AuthnRequest Failure

Thu Jan 10 11:38:26 EST 2013

Hi Nate,

Please ignore that issue, I have resolved yet found another one.  I was
using the wrong url to send my authorisation request to, this has been
resolved but my message is now throwing the below exception, should I
not be deflating my message before url and base64 encoding it.

16:36:05.732 - INFO [Shibboleth-Access:74] -
20130110T163605Z|fe80:0:0:0:ec7e:a277:1015:c0dc%11|readw7philipo:8443|/p
rofile/SAML2/POST/SSO|

16:36:05.779 - ERROR
[org.opensaml.saml2.binding.decoding.HTTPPostDecoder:124] - Unable to
Base64 decode SAML message

16:36:05.779 - WARN
[edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler
:371] - Error decoding authentication request message

org.opensaml.ws.message.decoder.MessageDecodingException: Unable to
Base64 decode SAML message

                at
org.opensaml.saml2.binding.decoding.HTTPPostDecoder.getBase64DecodedMess
age(HTTPPostDecoder.java:125) ~[opensaml-2.5.3.jar:na]

                at
org.opensaml.saml2.binding.decoding.HTTPPostDecoder.doDecode(HTTPPostDec
oder.java:90) ~[opensaml-2.5.3.jar:na]

                at
org.opensaml.ws.message.decoder.BaseMessageDecoder.decode(BaseMessageDec
oder.java:79) ~[openws-1.4.4.jar:na]

                at
org.opensaml.saml2.binding.decoding.BaseSAML2MessageDecoder.decode(BaseS
AML2MessageDecoder.java:70) ~[opensaml-2.5.3.jar:na]

                at
edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.
decodeRequest(SSOProfileHandler.java:357)
[shibboleth-identityprovider-2.3.8.jar:na]

                at
edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.
performAuthentication(SSOProfileHandler.java:209)
[shibboleth-identityprovider-2.3.8.jar:na]

                at
edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.
processRequest(SSOProfileHandler.java:187)
[shibboleth-identityprovider-2.3.8.jar:na]

                at
edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.
processRequest(SSOProfileHandler.java:88)
[shibboleth-identityprovider-2.3.8.jar:na]

                at
edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatc
herServlet.service(ProfileRequestDispatcherServlet.java:84)
[shibboleth-common-1.3.7.jar:na]

                at
javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
[servlet-api.jar:na]

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applica
tionFilterChain.java:290) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilt
erChain.java:206) [catalina.jar:6.0.29]

                at
edu.internet2.middleware.shibboleth.idp.util.NoCacheFilter.doFilter(NoCa
cheFilter.java:50) [shibboleth-identityprovider-2.3.8.jar:na]

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applica
tionFilterChain.java:235) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilt
erChain.java:206) [catalina.jar:6.0.29]

                at
edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilte
r(IdPSessionFilter.java:81) [shibboleth-identityprovider-2.3.8.jar:na]

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applica
tionFilterChain.java:235) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilt
erChain.java:206) [catalina.jar:6.0.29]

                at
edu.internet2.middleware.shibboleth.common.log.SLF4JMDCCleanupFilter.doF
ilter(SLF4JMDCCleanupFilter.java:52) [shibboleth-common-1.3.7.jar:na]

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applica
tionFilterChain.java:235) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilt
erChain.java:206) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValv
e.java:233) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValv
e.java:191) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java
:127) [catalina.jar:6.0.29]

                at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java
:102) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.
java:109) [catalina.jar:6.0.29]

                at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:2
98) [catalina.jar:6.0.29]

                at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:85
7) [tomcat-coyote.jar:6.0.29]

                at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(
Http11Protocol.java:588) [tomcat-coyote.jar:6.0.29]

                at
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
[tomcat-coyote.jar:6.0.29]

                at java.lang.Thread.run(Unknown Source) [na:1.7.0_09]

From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
On Behalf Of Nate Klingenstein
Sent: 10 January 2013 16:25
To: Shib Users
Subject: Re: AuthnRequest Failure

Philip,

Your IdP received a request to the Shibboleth SSO profile handler(SAML
1.1 and our extension) that was invalid.  There was no providerId, but
it's a necessary field for processing that request.

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPUnsolicitedSSO

We'll need more detail about what you're trying to accomplish and what
the flows should look like before we can help.

Thanks,

Nate.

On 10 Jan 2013, at 16:05, "Ogunleye, Philip"
<Philip.Ogunleye at snapon.com>

 wrote:

Hi,

I've got the following error in my process log, can anybody help:

16:01:23.066 - INFO [Shibboleth-Access:74] -
20130110T160123Z|fe80:0:0:0:ec7e:a277:1015:c0dc%11|readw7philipo.*****.*
**:8443|/profile/Shibboleth/SSO|

16:01:23.067 - WARN
[edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSODeco
der:72] - No providerId parameter given in Shibboleth SSO authentication
request.

16:01:23.068 - WARN
[edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProf
ileHandler:243] - Error decoding Shibboleth SSO request

org.opensaml.ws.message.decoder.MessageDecodingException: No providerId
parameter given in Shibboleth SSO authentication request.

                at
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSODecod
er.doDecode(ShibbolethSSODecoder.java:73)
~[shibboleth-identityprovider-2.3.8.jar:na]

                at
org.opensaml.ws.message.decoder.BaseMessageDecoder.decode(BaseMessageDec
oder.java:79) ~[openws-1.4.4.jar:na]

                at
org.opensaml.saml1.binding.decoding.BaseSAML1MessageDecoder.decode(BaseS
AML1MessageDecoder.java:109) ~[opensaml-2.5.3.jar:na]

                at
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfi
leHandler.decodeRequest(ShibbolethSSOProfileHandler.java:236)
[shibboleth-identityprovider-2.3.8.jar:na]

                at
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfi
leHandler.performAuthentication(ShibbolethSSOProfileHandler.java:170)
[shibboleth-identityprovider-2.3.8.jar:na]

                at
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfi
leHandler.processRequest(ShibbolethSSOProfileHandler.java:149)
[shibboleth-identityprovider-2.3.8.jar:na]

                at
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfi
leHandler.processRequest(ShibbolethSSOProfileHandler.java:66)
[shibboleth-identityprovider-2.3.8.jar:na]

                at
edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatc
herServlet.service(ProfileRequestDispatcherServlet.java:84)
[shibboleth-common-1.3.7.jar:na]

                at
javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
[servlet-api.jar:na]

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applica
tionFilterChain.java:290) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilt
erChain.java:206) [catalina.jar:6.0.29]

                at
edu.internet2.middleware.shibboleth.idp.util.NoCacheFilter.doFilter(NoCa
cheFilter.java:50) [shibboleth-identityprovider-2.3.8.jar:na]

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applica
tionFilterChain.java:235) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilt
erChain.java:206) [catalina.jar:6.0.29]

                at
edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilte
r(IdPSessionFilter.java:81) [shibboleth-identityprovider-2.3.8.jar:na]

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applica
tionFilterChain.java:235) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilt
erChain.java:206) [catalina.jar:6.0.29]

                at
edu.internet2.middleware.shibboleth.common.log.SLF4JMDCCleanupFilter.doF
ilter(SLF4JMDCCleanupFilter.java:52) [shibboleth-common-1.3.7.jar:na]

                at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applica
tionFilterChain.java:235) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilt
erChain.java:206) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValv
e.java:233) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValv
e.java:191) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java
:127) [catalina.jar:6.0.29]

                at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java
:102) [catalina.jar:6.0.29]

                at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.
java:109) [catalina.jar:6.0.29]

                at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:2
98) [catalina.jar:6.0.29]

                at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:85
7) [tomcat-coyote.jar:6.0.29]

                at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(
Http11Protocol.java:588) [tomcat-coyote.jar:6.0.29]

                at
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
[tomcat-coyote.jar:6.0.29]

                at java.lang.Thread.run(Unknown Source) [na:1.7.0_09]

--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net
<mailto:users-unsubscribe at shibboleth.net> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130110/fa1c1e8b/attachment-0001.html 