Shibboleth IdP integration with Oracle 11g Identity Federation

lalithj j_lalith at hotmail.com
Tue Apr 9 03:34:57 EDT 2013 

Hi,

Unfortunately eventhough we got other successful SP integration, with Oracle
11.1.2 OAM(OIF) integration with Shibboleth IdP still we are having issues,
Responses I got from forum (Kevin) was with regards to 11.1.1 which is
different to release2

After all of these discussion, we removed the SOAP Serivice URL from the
configuration in OIF, now we dont get the bad_certificate error, but get
below error about liberty version, I know this is a Oracle error, but from
Shibboleth point of view, is it expecting any  value? or does it look like I
need to configure anything in Shibboleth (e.g. relying party)?

<Apr 9, 2013 1:54:12 PM EST> <Error>
<oracle.security.fed.eventhandler.fed.profiles.sp.artifact.v20.ArtifactEventHandler>
<FED-18045> <Unsupported liberty version: SAML2.0> 
<Apr 9, 2013 1:54:12 PM EST> <Error>
<oracle.security.fed.controller.library.api.FedEngineInstance>
<FEDSTS-12049> <Event Exception: {0} 
oracle.security.fed.event.EventException: Unsupported Liberty version:
SAML2.0 
        at
oracle.security.fed.eventhandler.fed.profiles.sp.artifact.v20.ArtifactEventHandler.perform(ArtifactEventHandler.java:140) 
        at
oracle.security.fed.controller.ActionStateMachine.processEvent(ActionStateMachine.java:172) 
        at
oracle.security.fed.controller.EventControllerImpl.processEvent(EventControllerImpl.java:89) 
        at
oracle.security.fed.controller.ApplicationController.publishEvent(ApplicationController.java:345) 
        at
oracle.security.fed.controller.frontend.action.RequestHandlerContext.publishEvent(RequestHandlerContext.java:50) 
        at
oracle.security.fed.controller.frontend.action.RequestHandlerSupport.perform(RequestHandlerSupport.java:15) 
        at
oracle.security.fed.controller.library.api.FedEngineInstance.processCall(FedEngineInstance.java:260) 
        at
oracle.security.fed.controller.library.api.FedEngineInstance.processCall(FedEngineInstance.java:164) 
        at
oracle.security.fed.controller.library.api.FedEngineSPInstance.validateAndMapAssertion(FedEngineSPInstance.java:166) 
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) 
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
        at java.lang.reflect.Method.invoke(Method.java:597) 
        at
oracle.security.am.engine.authn.internal.plugin.FedUserAuthenticationPlugin.invokeValidateAndMapAssertion(FedUserAuthenticationPlugin.java:284) 
        at
oracle.security.am.engine.authn.internal.plugin.FedUserAuthenticationPlugin.process(FedUserAuthenticationPlugin.java:162) 
        at
oracle.security.am.engine.authn.internal.executor.PlugInExecutor.execute(PlugInExecutor.java:197) 
        at
oracle.security.am.engine.authn.internal.executor.AuthenticationSchemeExecutor.execute(AuthenticationSchemeExecutor.java:101) 
        at
oracle.security.am.engine.authn.internal.controller.AuthenticationEngineControllerImpl.validateUser(AuthenticationEngineControllerImpl.java:265) 
        at
oracle.security.am.engines.enginecontroller.AuthnEngineController.authenticateUser(AuthnEngineController.java:698) 
        at
oracle.security.am.engines.enginecontroller.AuthnEngineController.processEvent(AuthnEngineController.java:299) 
        at
oracle.security.am.controller.MasterController.processEvent(MasterController.java:570) 
        at
oracle.security.am.controller.MasterController.processRequest(MasterController.java:759) 
        at
oracle.security.am.controller.MasterController.process(MasterController.java:682) 
        at
oracle.security.am.pbl.PBLFlowManager.delegateToMasterController(PBLFlowManager.java:209) 
        at
oracle.security.am.pbl.PBLFlowManager.handleBaseEvent(PBLFlowManager.java:147) 
        at
oracle.security.am.pbl.PBLFlowManager.processRequest(PBLFlowManager.java:107) 
        at
oracle.security.am.pbl.transport.http.AMServlet.handleRequest(AMServlet.java:177) 
        at
oracle.security.am.pbl.transport.http.AMServlet.doPost(AMServlet.java:136) 
        at
oracle.security.am.pbl.transport.http.AMServlet.doGet(AMServlet.java:699) 
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:707) 
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:821) 
        at
weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227) 
        at
weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125) 
        at
weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:301) 
        at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:27) 
        at
weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:61) 
        at
oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:119) 
        at
oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:315) 
        at
oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:442) 
        at
oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103) 
        at
oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171) 
        at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71) 
        at
weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:61) 
        at
oracle.security.am.agent.wls.filters.OAMServletAuthenticationFilter.doFilter(OAMServletAuthenticationFilter.java:264) 
        at
oracle.security.am.agent.wls.filters.OAMValidationSystemFilter.doFilter(OAMValidationSystemFilter.java:134) 
        at
oracle.security.wls.oamagent.OAMAgentWrapperFilter.doFilter(OAMAgentWrapperFilter.java:120) 
        at
weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:61) 
        at
oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:139) 
        at
weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:61) 
        at
weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3738) 
        at
weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3704) 
        at
weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321) 
        at
weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120) 
        at
weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2281) 
        at
weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2180) 
        at
weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1491) 
        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256) 
        at weblogic.work.ExecuteThread.run(ExecuteThread.java:221) 
> 
java.lang.reflect.InvocationTargetException 
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) 
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
        at java.lang.reflect.Method.invoke(Method.java:597) 
       at
oracle.security.am.engine.authn.internal.plugin.FedUserAuthenticationPlugin.invokeValidateAndMapAssertion(FedUserAuthenticationPlugin.java:284) 
        at
oracle.security.am.engine.authn.internal.plugin.FedUserAuthenticationPlugin.process(FedUserAuthenticationPlugin.java:162) 
        at
oracle.security.am.engine.authn.internal.executor.PlugInExecutor.execute(PlugInExecutor.java:197) 
        at
oracle.security.am.engine.authn.internal.executor.AuthenticationSchemeExecutor.execute(AuthenticationSchemeExecutor.java:101) 
        at
oracle.security.am.engine.authn.internal.controller.AuthenticationEngineControllerImpl.validateUser(AuthenticationEngineControllerImpl.java:265) 
        at
oracle.security.am.engines.enginecontroller.AuthnEngineController.authenticateUser(AuthnEngineController.java:698) 
        at
oracle.security.am.engines.enginecontroller.AuthnEngineController.processEvent(AuthnEngineController.java:299) 
        at
oracle.security.am.controller.MasterController.processEvent(MasterController.java:570) 
        at
oracle.security.am.controller.MasterController.processRequest(MasterController.java:759) 
        at
oracle.security.am.controller.MasterController.process(MasterController.java:682) 
        at
oracle.security.am.pbl.PBLFlowManager.delegateToMasterController(PBLFlowManager.java:209) 
        at
oracle.security.am.pbl.PBLFlowManager.handleBaseEvent(PBLFlowManager.java:147) 
        at
oracle.security.am.pbl.PBLFlowManager.processRequest(PBLFlowManager.java:107) 
        at
oracle.security.am.pbl.transport.http.AMServlet.handleRequest(AMServlet.java:177) 
        at
oracle.security.am.pbl.transport.http.AMServlet.doPost(AMServlet.java:136) 
        at
oracle.security.am.pbl.transport.http.AMServlet.doGet(AMServlet.java:697) 
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:707) 
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:820) 
        at
weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227) 
        at
weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125) 
        at
weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:301) 
        at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26) 
        at
weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:60) 
        at
oracle.security.jps.ee.http.JpsAbsFilter$1.run(JpsAbsFilter.java:119) 
        at
oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:315) 
        at
oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:442) 
        at
oracle.security.jps.ee.http.JpsAbsFilter.runJaasMode(JpsAbsFilter.java:103) 
        at
oracle.security.jps.ee.http.JpsAbsFilter.doFilter(JpsAbsFilter.java:171) 
        at oracle.security.jps.ee.http.JpsFilter.doFilter(JpsFilter.java:71) 
        at
weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:60) 
        at
oracle.security.am.agent.wls.filters.OAMServletAuthenticationFilter.doFilter(OAMServletAuthenticationFilter.java:264) 
        at
oracle.security.am.agent.wls.filters.OAMValidationSystemFilter.doFilter(OAMValidationSystemFilter.java:133) 
        at
oracle.security.wls.oamagent.OAMAgentWrapperFilter.doFilter(OAMAgentWrapperFilter.java:120) 
        at
weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:60) 
        at
oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:139) 
        at
weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:60) 
        at
weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3738) 
        at
weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3704) 
        at
weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321) 
        at
weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120) 
        at
weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2281) 
        at
weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2180) 
        at
weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1491) 
        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256) 
        at weblogic.work.ExecuteThread.run(ExecuteThread.java:221) 
Caused by: java.lang.RuntimeException:
oracle.security.fed.event.EventException: Unsupported Liberty version:
SAML2.0 
        at
oracle.security.fed.controller.library.api.FedEngineInstance.processCall(FedEngineInstance.java:410) 
        at
oracle.security.fed.controller.library.api.FedEngineInstance.processCall(FedEngineInstance.java:164) 
        at
oracle.security.fed.controller.library.api.FedEngineSPInstance.validateAndMapAssertion(FedEngineSPInstance.java:166) 
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) 
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) 
        at java.lang.reflect.Method.invoke(Method.java:597) 
        at
oracle.security.am.engine.authn.internal.plugin.FedUserAuthenticationPlugin.invokeValidateAndMapAssertion(FedUserAuthenticationPlugin.java:284) 
        at
oracle.security.am.engine.authn.internal.plugin.FedUserAuthenticationPlugin.process(FedUserAuthenticationPlugin.java:162) 
        at
oracle.security.am.engine.authn.internal.executor.PlugInExecutor.execute(PlugInExecutor.java:197) 
        at
oracle.security.am.engine.authn.internal.executor.AuthenticationSchemeExecutor.execute(AuthenticationSchemeExecutor.java:101) 
        at
oracle.security.am.engine.authn.internal.controller.AuthenticationEngineControllerImpl.validateUser(AuthenticationEngineControllerImpl.java:265) 
        at
oracle.security.am.engines.enginecontroller.AuthnEngineController.authenticateUser(AuthnEngineController.java:698) 
        at
oracle.security.am.engines.enginecontroller.AuthnEngineController.processEvent(AuthnEngineController.java:299) 
        at
oracle.security.am.controller.MasterController.processEvent(MasterController.java:570) 
        at
oracle.security.am.controller.MasterController.processRequest(MasterController.java:759) 
        at
oracle.security.am.controller.MasterController.process(MasterController.java:682) 
        at
oracle.security.am.pbl.PBLFlowManager.delegateToMasterController(PBLFlowManager.java:209) 
        at
oracle.security.am.pbl.PBLFlowManager.handleBaseEvent(PBLFlowManager.java:147) 




--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Shibboleth-IdP-integration-with-Oracle-11g-Identity-Federation-tp7585604p7586002.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.

More information about the users mailing list