duplicate attribute value issue in idp 2.3.3

Chad La Joie lajoie at itumi.biz
Tue Aug 2 13:57:06 BST 2011


Okay, that has nothing to do with duplicate attribute values.  And
I'll need more information on how exactly your IdP is configured
because I don't see this error in my test environment.  Can you turn
the IdP and OpenSAML on to debug, run *one* request, and send me the
process log for that *one* request?

On Tue, Aug 2, 2011 at 08:49, Arjuna Scagnetto <ascagnetto at units.it> wrote:
> this is the error with configs copied from idp2.3.2
>
> 14:49:33.840 - ERROR
> [edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet:89]
> - Error occurred while processing request
> java.lang.IllegalArgumentException:
> {urn:oasis:names:tc:SAML:2.0:assertion}NameID is already the child of
> another XMLObject and may not be inserted in to this list
>        at
> org.opensaml.xml.util.XMLObjectChildrenList.setParent(XMLObjectChildrenList.java:201)
> ~[xmltooling-1.3.2.jar:na]
>        at
> org.opensaml.xml.util.XMLObjectChildrenList.add(XMLObjectChildrenList.java:146)
> ~[xmltooling-1.3.2.jar:na]
>        at
> org.opensaml.xml.util.IndexedXMLObjectChildrenList.add(IndexedXMLObjectChildrenList.java:71)
> ~[xmltooling-1.3.2.jar:na]
>        at
> org.opensaml.xml.util.XMLObjectChildrenList.add(XMLObjectChildrenList.java:1)
> ~[xmltooling-1.3.2.jar:na]
>        at java.util.AbstractList.add(AbstractList.java:91) ~[na:1.6.0_26]
>        at
> edu.internet2.middleware.shibboleth.common.attribute.encoding.provider.SAML2XMLObjectAttributeEncoder.encode(SAML2XMLObjectAttributeEncoder.java:61)
> ~[shibboleth-common-1.3.3.jar:na]
>        at
> edu.internet2.middleware.shibboleth.common.attribute.encoding.provider.SAML2XMLObjectAttributeEncoder.encode(SAML2XMLObjectAttributeEncoder.java:35)
> ~[shibboleth-common-1.3.3.jar:na]
>        at
> edu.internet2.middleware.shibboleth.common.attribute.provider.ShibbolethSAML2AttributeAuthority.encodeAttributes(ShibbolethSAML2AttributeAuthority.java:211)
> ~[shibboleth-common-1.3.3.jar:na]
>        at
> edu.internet2.middleware.shibboleth.common.attribute.provider.ShibbolethSAML2AttributeAuthority.buildAttributeStatement(ShibbolethSAML2AttributeAuthority.java:118)
> ~[shibboleth-common-1.3.3.jar:na]
>        at
> edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler.buildAttributeStatement(AbstractSAML2ProfileHandler.java:509)
> ~[shibboleth-identityprovider-2.3.3.jar:na]
>        at
> edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.completeAuthenticationRequest(SSOProfileHandler.java:276)
> ~[shibboleth-identityprovider-2.3.3.jar:na]
>        at
> edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:165)
> ~[shibboleth-identityprovider-2.3.3.jar:na]
>        at
> edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:88)
> ~[shibboleth-identityprovider-2.3.3.jar:na]
>        at
> edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet.service(ProfileRequestDispatcherServlet.java:84)
> ~[shibboleth-common-1.3.3.jar:na]
>        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
> [servlet-api.jar:na]
>        at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
> [catalina.jar:6.0.32]
>        at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> [catalina.jar:6.0.32]
>        at
> ch.SWITCH.aai.uApprove.idpplugin.Dispatcher.dispatchToIdP(Dispatcher.java:64)
> [idp-plugin-2.2.1.jar:na]
>        at
> ch.SWITCH.aai.uApprove.idpplugin.Plugin.checkAccess(Plugin.java:202)
> [idp-plugin-2.2.1.jar:na]
>        at
> ch.SWITCH.aai.uApprove.idpplugin.Plugin.doFilter(Plugin.java:119)
> [idp-plugin-2.2.1.jar:na]
>        at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
> [catalina.jar:6.0.32]
>        at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> [catalina.jar:6.0.32]
>        at
> edu.internet2.middleware.shibboleth.idp.util.NoCacheFilter.doFilter(NoCacheFilter.java:50)
> [shibboleth-identityprovider-2.3.3.jar:na]
>        at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
> [catalina.jar:6.0.32]
>        at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> [catalina.jar:6.0.32]
>        at
> edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilter(IdPSessionFilter.java:81)
> [shibboleth-identityprovider-2.3.3.jar:na]
>        at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
> [catalina.jar:6.0.32]
>        at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> [catalina.jar:6.0.32]
>        at
> edu.internet2.middleware.shibboleth.common.log.SLF4JMDCCleanupFilter.doFilter(SLF4JMDCCleanupFilter.java:52)
> [shibboleth-common-1.3.3.jar:na]
>        at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
> [catalina.jar:6.0.32]
>        at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
> [catalina.jar:6.0.32]
>        at
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:219)
> [catalina.jar:6.0.32]
>        at
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
> [catalina.jar:6.0.32]
>        at
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
> [catalina.jar:6.0.32]
>        at
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
> [catalina.jar:6.0.32]
>        at
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
> [catalina.jar:6.0.32]
>        at
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
> [catalina.jar:6.0.32]
>        at
> org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190)
> [tomcat-coyote.jar:6.0.32]
>        at
> org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)
> [tomcat-coyote.jar:6.0.32]
>        at
> org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:776)
> [tomcat-coyote.jar:6.0.32]
>        at
> org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:705)
> [tomcat-coyote.jar:6.0.32]
>        at
> org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:898)
> [tomcat-coyote.jar:6.0.32]
>        at
> org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:690)
> [tomcat-coyote.jar:6.0.32]
>        at java.lang.Thread.run(Thread.java:662) [na:1.6.0_26]

-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered


More information about the users mailing list