IDP delegaition
Eddie Harari
eddie.harari at gmail.com
Thu Jul 26 10:03:29 EDT 2012
I get the following error after setting the in my sp relaying-party
configuration:
allowTokenDelegation="true"
19:40:07.865 - DEBUG
[edu.internet2.middleware.shibboleth.idp.ext.delegation.profile.DelegationAwareSAML2SSOProfileHandler:521]
- Context delegationRequested was null, evaluating and storing.
19:40:07.865 - DEBUG
[edu.internet2.middleware.shibboleth.idp.ext.delegation.profile.DelegationAwareSAML2SSOProfileHandler:533]
- Delegation request was not explicitly indicated, using default value
19:40:07.865 - DEBUG
[edu.internet2.middleware.shibboleth.idp.ext.delegation.profile.DelegationAwareSAML2SSOProfileHandler:537]
- Context delegationRequested value was evaluated and stored as:
REQUESTED_OPTIONAL
19:40:07.865 - DEBUG
[edu.internet2.middleware.shibboleth.idp.ext.delegation.profile.DelegationAwareSAML2SSOProfileHandler:659]
- Issuance of a delegation token is active, overriding eval as to
encrypting NameID to: false
19:40:07.866 - DEBUG
[edu.internet2.middleware.shibboleth.idp.ext.delegation.profile.DelegationAwareSAML2SSOProfileHandler:517]
- Context delegationRequested was non-null, returning stored value:
REQUESTED_OPTIONAL
19:40:07.866 - DEBUG
[edu.internet2.middleware.shibboleth.idp.ext.delegation.profile.DelegationAwareSAML2SSOProfileHandler:241]
- Delegation token issuance was requested (optional) and allowed
19:40:08.032 - ERROR
[edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet:89]
- Error occurred while processing request
java.lang.NullPointerException: null
at edu.internet2.middleware.shibboleth.idp.ext.delegation.profile.DelegationAwareSAML2SSOProfileHandler.buildLibertSSOSEPRAttributeValue(DelegationAwareSAML2SSOProfileHandler.java:322)
~[shibboleth-idp-ext-delegation-1.0.jar:na]
at edu.internet2.middleware.shibboleth.idp.ext.delegation.profile.DelegationAwareSAML2SSOProfileHandler.addLibertySSOSEPRAttribute(DelegationAwareSAML2SSOProfileHandler.java:294)
~[shibboleth-idp-ext-delegation-1.0.jar:na]
at edu.internet2.middleware.shibboleth.idp.ext.delegation.profile.DelegationAwareSAML2SSOProfileHandler.decorateDelegatedAssertion(DelegationAwareSAML2SSOProfileHandler.java:278)
~[shibboleth-idp-ext-delegation-1.0.jar:na]
at edu.internet2.middleware.shibboleth.idp.ext.delegation.profile.DelegationAwareSAML2SSOProfileHandler.postProcessAssertion(DelegationAwareSAML2SSOProfileHandler.java:242)
~[shibboleth-idp-ext-delegation-1.0.jar:na]
at edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler.buildResponse(AbstractSAML2ProfileHandler.java:268)
~[shibboleth-identityprovider-2.3.6.jar:na]
at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.completeAuthenticationRequest(SSOProfileHandler.java:310)
~[shibboleth-identityprovider-2.3.6.jar:na]
at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:177)
~[shibboleth-identityprovider-2.3.6.jar:na]
at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:88)
~[shibboleth-identityprovider-2.3.6.jar:na]
at edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet.service(ProfileRequestDispatcherServlet.java:84)
~[shibboleth-common-1.3.5.jar:na]
at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
[servlet-api.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
[catalina.jar:6.0.35]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:6.0.35]
at edu.internet2.middleware.shibboleth.idp.util.NoCacheFilter.doFilter(NoCacheFilter.java:50)
[shibboleth-identityprovider-2.3.6.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
[catalina.jar:6.0.35]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:6.0.35]
at edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilter(IdPSessionFilter.java:81)
[shibboleth-identityprovider-2.3.6.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
[catalina.jar:6.0.35]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:6.0.35]
at edu.internet2.middleware.shibboleth.common.log.SLF4JMDCCleanupFilter.doFilter(SLF4JMDCCleanupFilter.java:52)
[shibboleth-common-1.3.5.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
[catalina.jar:6.0.35]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:6.0.35]
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:219)
[catalina.jar:6.0.35]
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
[catalina.jar:6.0.35]
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:470)
[catalina.jar:6.0.35]
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
[catalina.jar:6.0.35]
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
[catalina.jar:6.0.35]
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
[catalina.jar:6.0.35]
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)
[catalina.jar:6.0.35]
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:859)
[tomcat-coyote.jar:6.0.35]
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:602)
[tomcat-coyote.jar:6.0.35]
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
[tomcat-coyote.jar:6.0.35]
at java.lang.Thread.run(Thread.java:679) [na:1.6.0_22]
19:40:08.044 - DEBUG
[edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:346] -
No login context in storage service
19:40:08.045 - DEBUG
[edu.internet2.middleware.shibboleth.idp.ui.ServiceContactTag:177] -
No relying party, nothing to display
19:56:30.883 - INFO [Shibboleth-Access:74] -
20120726T165630Z|192.168.56.1|shib.zehut.org:8443|/profile/SAML2/Redirect/SSO|
19:56:30.883 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:86]
- shibboleth.HandlerManager: Looking up profile handler for request
path: /SAML2/Redirect/SSO
19:56:30.884 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:97]
- shibboleth.HandlerManager: Located profile handler of the following
type for the request path:
edu.internet2.middleware.shibboleth.idp.ext.delegation.profile.DelegationAwareSAML2SSOProfileHandler
19:56:30.884 - DEBUG
[edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:325] -
LoginContext key cookie was not present in request
19:56:30.885 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:188]
- Incoming request does not contain a login context, processing as
first leg of request
19:56:30.886 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:339]
- Decoding message with decoder binding
'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect'
19:56:30.893 - WARN
[edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:373]
- Error decoding authentication request message
org.opensaml.ws.message.decoder.MessageDecodingException: No
SAMLRequest or SAMLResponse query path parameter, invalid SAML 2 HTTP
Redirect message
at org.opensaml.saml2.binding.decoding.HTTPRedirectDeflateDecoder.doDecode(HTTPRedirectDeflateDecoder.java:98)
~[opensaml-2.5.3.jar:na]
at org.opensaml.ws.message.decoder.BaseMessageDecoder.decode(BaseMessageDecoder.java:79)
~[openws-1.4.4.jar:na]
at org.opensaml.saml2.binding.decoding.BaseSAML2MessageDecoder.decode(BaseSAML2MessageDecoder.java:70)
~[opensaml-2.5.3.jar:na]
at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.decodeRequest(SSOProfileHandler.java:359)
[shibboleth-identityprovider-2.3.6.jar:na]
at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.performAuthentication(SSOProfileHandler.java:211)
[shibboleth-identityprovider-2.3.6.jar:na]
at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:189)
[shibboleth-identityprovider-2.3.6.jar:na]
at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:88)
[shibboleth-identityprovider-2.3.6.jar:na]
at edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet.service(ProfileRequestDispatcherServlet.java:84)
[shibboleth-common-1.3.5.jar:na]
at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
[servlet-api.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
[catalina.jar:6.0.35]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:6.0.35]
at edu.internet2.middleware.shibboleth.idp.util.NoCacheFilter.doFilter(NoCacheFilter.java:50)
[shibboleth-identityprovider-2.3.6.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
[catalina.jar:6.0.35]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:6.0.35]
at edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilter(IdPSessionFilter.java:81)
[shibboleth-identityprovider-2.3.6.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
[catalina.jar:6.0.35]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:6.0.35]
at edu.internet2.middleware.shibboleth.common.log.SLF4JMDCCleanupFilter.doFilter(SLF4JMDCCleanupFilter.java:52)
[shibboleth-common-1.3.5.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
[catalina.jar:6.0.35]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina.jar:6.0.35]
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:219)
[catalina.jar:6.0.35]
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
[catalina.jar:6.0.35]
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:470)
[catalina.jar:6.0.35]
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
[catalina.jar:6.0.35]
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
[catalina.jar:6.0.35]
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
[catalina.jar:6.0.35]
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)
[catalina.jar:6.0.35]
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:859)
[tomcat-coyote.jar:6.0.35]
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:602)
[tomcat-coyote.jar:6.0.35]
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
[tomcat-coyote.jar:6.0.35]
at java.lang.Thread.run(Thread.java:679) [na:1.6.0_22]
19:56:30.894 - DEBUG
[edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:325] -
LoginContext key cookie was not present in request
19:56:30.894 - DEBUG
[edu.internet2.middleware.shibboleth.idp.ui.ServiceContactTag:177] -
No relying party, nothing to display
Any idea why there is a NULL pointer exception ?
More information about the users
mailing list