OIDC extension 1.0.2 manual install issues

David Huebner david.huebner at daasi.de
Fri Jul 5 07:49:31 EDT 2019


Hi folks,

I've been playing around with installing 
https://github.com/CSCfi/shibboleth-idp-oidc-extension/releases/tag/v1.0.2 
lately.
The goal is to install on top of an existing Shibboleth IDP 3.4.4 and 
I've been following 
https://github.com/CSCfi/shibboleth-idp-oidc-extension/wiki/Installing-from-archive 
and also double checked the general steps with the ansible playbook.

I think my main issue for now is, that all oidc and oauth2 flows are not 
registered on IDP startup at all, which leads to tomcat giving me 404 
for the various oidc endpoints.

I've set up a dev environment with vagrant up alongside, which gives me 
the following idp-process logs (truncated for readability, there are 
more of course):

Registered flow ID 'oauth2/introspection' using 'file 
[/opt/shibboleth-idp/flows/oauth2/introspection/introspection-flow.xml]'
[...]
Registered flow ID 'oidc/authorize' using 'file 
[/opt/shibboleth-idp/flows/oidc/authorize/authorize-flow.xml]'
[...]

None of those is present in my IDP 3.4.4+manual install environment, 
just the normal shibboleth ones.
However, I can see some org.geant log entries, e.g. when parsing 
/opt/shibboleth-idp/metadata/oidc-client.json, which at least verifies, 
that the jars etc. are picked up correctly.

So... the main difference I can see:
Vagrant up environment: IDP 3.4.0 and more recent version of extension
IDP3.4.4+manual install environment: IDP 3.4.4 and extension 1.0.2

For all I can tell, the config should be similar. Of course all flows 
files etc. are present in both environments.
I get no significant warns or errors in either idp log or tomcat log.

Has anyone done a manual install successfully yet and any ideas, what 
the issue could be?
Is IDP 3.4.4 vs 3.4.0 breaking things?

Thanks,
David

-- 
David Hübner, Solutions Engineer

DAASI International GmbH
Europaplatz 3
D-72072 Tübingen
Germany

phone: +49 7071 407109-0
fax:   +49 7071 407109-9
email: david.huebner at daasi.de
web:   www.daasi.de

Sitz der Gesellschaft: Tübingen
Registergericht: Amtsgericht Stuttgart, HRB 382175
Geschäftsleitung: Peter Gietz



More information about the dev mailing list