OIDC extension 1.0.2 manual install issues
David Huebner
david.huebner at daasi.de
Fri Jul 5 07:49:31 EDT 2019
Hi folks,
I've been playing around with installing
https://github.com/CSCfi/shibboleth-idp-oidc-extension/releases/tag/v1.0.2
lately.
The goal is to install on top of an existing Shibboleth IDP 3.4.4 and
I've been following
https://github.com/CSCfi/shibboleth-idp-oidc-extension/wiki/Installing-from-archive
and also double checked the general steps with the ansible playbook.
I think my main issue for now is, that all oidc and oauth2 flows are not
registered on IDP startup at all, which leads to tomcat giving me 404
for the various oidc endpoints.
I've set up a dev environment with vagrant up alongside, which gives me
the following idp-process logs (truncated for readability, there are
more of course):
Registered flow ID 'oauth2/introspection' using 'file
[/opt/shibboleth-idp/flows/oauth2/introspection/introspection-flow.xml]'
[...]
Registered flow ID 'oidc/authorize' using 'file
[/opt/shibboleth-idp/flows/oidc/authorize/authorize-flow.xml]'
[...]
None of those is present in my IDP 3.4.4+manual install environment,
just the normal shibboleth ones.
However, I can see some org.geant log entries, e.g. when parsing
/opt/shibboleth-idp/metadata/oidc-client.json, which at least verifies,
that the jars etc. are picked up correctly.
So... the main difference I can see:
Vagrant up environment: IDP 3.4.0 and more recent version of extension
IDP3.4.4+manual install environment: IDP 3.4.4 and extension 1.0.2
For all I can tell, the config should be similar. Of course all flows
files etc. are present in both environments.
I get no significant warns or errors in either idp log or tomcat log.
Has anyone done a manual install successfully yet and any ideas, what
the issue could be?
Is IDP 3.4.4 vs 3.4.0 breaking things?
Thanks,
David
--
David Hübner, Solutions Engineer
DAASI International GmbH
Europaplatz 3
D-72072 Tübingen
Germany
phone: +49 7071 407109-0
fax: +49 7071 407109-9
email: david.huebner at daasi.de
web: www.daasi.de
Sitz der Gesellschaft: Tübingen
Registergericht: Amtsgericht Stuttgart, HRB 382175
Geschäftsleitung: Peter Gietz
More information about the dev
mailing list