LDAP credential

[Bo Lorentsen]

On 2012-09-20 15:58, Chad La Joie wrote:
> You really need to ask your LDAP admin how the service is configured. 
> A username/password may not be required. Or maybe they require the use 
> of startTLS, or a kerberos token, or a dozen other options. The IdP 
> can support most options supported by LDAP servers but it has no way 
> to inspect the directory and find out what is required. 
Ok, I now get a :

User bl authenticated with method 
urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport

in my log file, and I now hopped my idP would redirect my login back to 
my SP/resource ... but " get this error :

16:21:59.666 - WARN 
[edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:371] 
- Error decoding authentication request message
org.opensaml.ws.message.decoder.MessageDecodingException: No SAMLRequest 
or SAMLResponse query path parameter, invalid SAML 2 HTTP Redirect message
     at 
org.opensaml.saml2.binding.decoding.HTTPRedirectDeflateDecoder.doDecode(HTTPRedirectDeflateDecoder.java:98) 
~[opensaml-2.5.3.jar:na]
     at 
org.opensaml.ws.message.decoder.BaseMessageDecoder.decode(BaseMessageDecoder.java:79) 
~[openws-1.4.4.jar:na]
     at 
org.opensaml.saml2.binding.decoding.BaseSAML2MessageDecoder.decode(BaseSAML2MessageDecoder.java:70) 
~[opensaml-2.5.3.jar:na]
     at 
edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.decodeRequest(SSOProfileHandler.java:357) 
[shibboleth-identityprovider-2.3.8.jar:na]
     at 
edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.performAuthentication(SSOProfileHandler.java:209) 
[shibboleth-identityprovider-2.3.8.jar:na]
     at 
edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:187) 
[shibboleth-identityprovider-2.3.8.jar:na]
     at 
edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:88) 
[shibboleth-identityprovider-2.3.8.jar:na]
     at 
edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet.service(ProfileRequestDispatcherServlet.java:84) 
[shibboleth-common-1.3.7.jar:na]
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:717) 
[servlet-api-2.5.jar:na]
     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) 
[catalina-6.0.35.jar:6.0.35]
     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) 
[catalina-6.0.35.jar:6.0.35]
     at 
edu.internet2.middleware.shibboleth.idp.util.NoCacheFilter.doFilter(NoCacheFilter.java:50) 
[shibboleth-identityprovider-2.3.8.jar:na]
     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) 
[catalina-6.0.35.jar:6.0.35]
     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) 
[catalina-6.0.35.jar:6.0.35]
     at 
edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilter(IdPSessionFilter.java:81) 
[shibboleth-identityprovider-2.3.8.jar:na]
     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) 
[catalina-6.0.35.jar:6.0.35]
     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) 
[catalina-6.0.35.jar:6.0.35]
     at 
edu.internet2.middleware.shibboleth.common.log.SLF4JMDCCleanupFilter.doFilter(SLF4JMDCCleanupFilter.java:52) 
[shibboleth-common-1.3.7.jar:na]
     at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) 
[catalina-6.0.35.jar:6.0.35]
     at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) 
[catalina-6.0.35.jar:6.0.35]
     at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:219) 
[catalina-6.0.35.jar:6.0.35]
     at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191) 
[catalina-6.0.35.jar:6.0.35]
     at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) 
[catalina-6.0.35.jar:6.0.35]
     at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) 
[catalina-6.0.35.jar:6.0.35]
     at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) 
[catalina-6.0.35.jar:6.0.35]
     at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293) 
[catalina-6.0.35.jar:6.0.35]
     at 
org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190) 
[tomcat-coyote-6.0.35.jar:6.0.35]
     at 
org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291) 
[tomcat-coyote-6.0.35.jar:6.0.35]
     at 
org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:776) 
[tomcat-coyote-6.0.35.jar:6.0.35]
     at 
org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:705) 
[tomcat-coyote-6.0.35.jar:6.0.35]
     at 
org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:898) 
[tomcat-coyote-6.0.35.jar:6.0.35]
     at 
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:690) 
[tomcat-coyote-6.0.35.jar:6.0.35]
     at java.lang.Thread.run(Thread.java:679) [na:1.6.0_24]
16:21:59.666 - DEBUG 
[edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:325] - 
LoginContext key cookie was not present in request
16:21:59.666 - DEBUG 
[edu.internet2.middleware.shibboleth.idp.ui.ServiceContactTag:177] - No 
relying party, nothing to display

I hoped that the "return URL" was part of the request origianlly send to 
the idP, or is this something completely different ?

/BL