Error after succeeded authentication
Gilles Badouet
badouetg at uni.coventry.ac.uk
Tue Jul 9 10:40:58 EDT 2013
>Can you please provide a link to this statement?
May be not a preference but an attention regarding 'disregardSslCertificate' configuration.
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPMetadataProvider
http://shibboleth.net/community/advisories/secadv_20130417.txt
The explanation should be within one of the above link I think.
It is also noticeable that most of the examples of URL/URI in metadata provider elements use http based.
Kind regards
Gilles Rubens Badouet
________________________________________
From: users-bounces at shibboleth.net <users-bounces at shibboleth.net> on behalf of users-request at shibboleth.net <users-request at shibboleth.net>
Sent: 09 July 2013 15:04
To: users at shibboleth.net
Subject: users Digest, Vol 25, Issue 49
Send users mailing list submissions to
users at shibboleth.net
To subscribe or unsubscribe via the World Wide Web, visit
http://shibboleth.net/mailman/listinfo/users
or, via email, send a message with subject or body 'help' to
users-request at shibboleth.net
You can reach the person managing the list at
users-owner at shibboleth.net
When replying, please edit your Subject line so it is more specific
than "Re: Contents of users digest..."
Today's Topics:
1. Re: Error after succeeded authentication (Ortner Nikolaus)
2. Re: NoClassDefFoundError: org/w3c/dom/ElementTraversal (Ian Young)
3. Re: NoClassDefFoundError: org/w3c/dom/ElementTraversal
(Mustapha Aoussar)
4. Issues creating custom login handler (Byte Flinger)
5. Re: Issues creating custom login handler (Kevin P. Foote)
6. Re: Issues creating custom login handler (Manuel Haim)
----------------------------------------------------------------------
Message: 1
Date: Tue, 9 Jul 2013 12:57:07 +0000
From: Ortner Nikolaus <N.Ortner at fh-kaernten.at>
Subject: Re: Error after succeeded authentication
To: 'Shib Users' <users at shibboleth.net>
Message-ID:
<30128BCB0B9FDB4AAFB81E09D52830DE3A2874C6 at EXMBX01.technikum.local>
Content-Type: text/plain; charset="us-ascii"
> Just before your email, I noticed in wiki documentation that it is preferable to
> use uri="http..." instead of ssl based ( uri="https...") in the metadata
> provider element of shibboleth2.xml.
Can you please provide a link to this statement?
Kind regards.
------------------------------
Message: 2
Date: Tue, 9 Jul 2013 13:57:56 +0100
From: Ian Young <ian at iay.org.uk>
Subject: Re: NoClassDefFoundError: org/w3c/dom/ElementTraversal
To: Shib Users <users at shibboleth.net>
Message-ID: <49A89802-066F-43D4-B892-4D6D8E46F75A at iay.org.uk>
Content-Type: text/plain; charset="iso-8859-1"
On 9 Jul 2013, at 13:55, Mustapha Aoussar <mustapha.aoussar at gmail.com> wrote:
> but i copied only xalan-2.7.1.jar xercesImpl-2.10.0.jar to
>
> [stakkit at net2 endorsed]$ cd /home/stakkit/webapps/jetty/lib/endorsed
> [stakkit at net2 endorsed]$ ls
> xalan-2.7.1.jar xercesImpl-2.10.0.jar
As the wiki page says:
> Endorse Xerces and Xalan by creating the directory JETTY_HOME/lib/endorsed/ and copy the .jar files included in the IdP source endorsed/ directory into the newly created directory.
Copy *all* of the files.
I'll update the wiki page to make that plainer.
-- Ian
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130709/7b548440/attachment-0001.html
------------------------------
Message: 3
Date: Tue, 9 Jul 2013 15:05:57 +0200
From: Mustapha Aoussar <mustapha.aoussar at gmail.com>
Subject: Re: NoClassDefFoundError: org/w3c/dom/ElementTraversal
To: Shib Users <users at shibboleth.net>
Message-ID:
<CAP=4u8RcL68c9_7r+E8FcEmJz8B+_1G6Eq0qCuNL7cYihR+=pQ at mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
Thank you very much!! works fine!!!
Thank you!! :)
Best Regards!
2013/7/9 Ian Young <ian at iay.org.uk>
>
> On 9 Jul 2013, at 13:55, Mustapha Aoussar <mustapha.aoussar at gmail.com>
> wrote:
>
> but i copied only xalan-2.7.1.jar xercesImpl-2.10.0.jar to
>
> [stakkit at net2 endorsed]$ cd /home/stakkit/webapps*/jetty/lib/endorsed*
> [stakkit at net2 endorsed]$ ls
> xalan-2.7.1.jar xercesImpl-2.10.0.jar
>
>
> As the wiki page says:
>
> Endorse Xerces and Xalan by creating the directory *
> JETTY_HOME/lib/endorsed/* and copy the .jar files included in the IdP
> source *endorsed/* directory into the newly created directory.
>
>
> Copy *all* of the files.
>
> I'll update the wiki page to make that plainer.
>
> -- Ian
>
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130709/33a414de/attachment-0001.html
------------------------------
Message: 4
Date: Tue, 9 Jul 2013 15:08:46 +0200
From: Byte Flinger <byteflinger at gmail.com>
Subject: Issues creating custom login handler
To: Shib Users <users at shibboleth.net>
Message-ID:
<CAELTqdr6KSC-DZ=NhmWWeUm6DcVw=SiSBnVxL0ou5=qeVmZYfw at mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
Hi
I am trying to create a custom login handler however I am running into some
unexpected issues.
For starters I pretty much copied the example found here
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPDevExtLoginHandler
However it seems this example does not work out of the box. The first issue
was I kept getting
"Configuration problem: Id is required for element 'LoginHandler' when used
as a top-level tag"
As it turned out one needed to override the shouldGenerateId method in the
BeanDefinitionParser class to always return true (Which I find very strange
as the source code for AbstractSimpleBeanDefinitionParser seems to already
have the class returning true by default sao I shouldn't have to override
it).
Now the next issue I keep getting is the following error message:
ERROR [edu.internet2.middleware.shibboleth.common.config.BaseService:188] -
Configuration was not loaded for shibboleth.HandlerManager service, error
creating components. The root cause of this error was:
org.springframework.beans.NotWritablePropertyException: Invalid property
'type' of bean class [com.custom.shibboleth.CustomHandlerFactoryBean]: Bean
property 'type' is not writable or has an invalid setter method. Does the
parameter type of the setter match the return type of the getter?"
I don't understand why does it want a 'type' setter, I don't even have such
an attribute/variable anywhere in my code and certainly not in the class it
claims to need it (CustomHandlerFactoryBean).
My loginHandler is defined on handler.xml as follows:
<ph:ProfileHandlerGroup
xmlns:ph="urn:mace:shibboleth:2.0:idp:profile-handler"
xmlns:cus="urn:mace:custom:shibboleth:custommod:authn" xmlns:xsi="
http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="urn:mace:shibboleth:2.0:idp:profile-handler
classpath:/schema/shibboleth-2.0-idp-profile-handler.xsd
urn:mace:custom:shibboleth:custommod:authn
classpath:/schema/customplugin.xsd">
.
.
.
.
.
<ph:LoginHandler xsi:type="cus:CustomHandler">
<ph:AuthenticationMethod>urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified</ph:AuthenticationMethod>
</ph:LoginHandler>
It seems the examples on the wiki are neither complete nor functional. I'd
be glad to edit and fix them once I get it working but so far I have had no
luck.
Any help is appreciated!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130709/86ced344/attachment-0001.html
------------------------------
Message: 5
Date: Tue, 9 Jul 2013 09:39:56 -0400 (EDT)
From: "Kevin P. Foote" <kpfoote at iup.edu>
Subject: Re: Issues creating custom login handler
To: Shib Users <users at shibboleth.net>
Message-ID: <alpine.LFD.2.03.1307090933410.21498 at iup.edu>
Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII
On Tue, 9 Jul 2013, Byte Flinger wrote:
> I am trying to create a custom login handler however I am running into some
> unexpected issues.
>
> For starters I pretty much copied the example found here
>
> https://wiki.shibboleth.net/confluence/display/SHIB2/IdPDevExtLoginHandler
Sorry no direct answers to your questsions.. but maybe a tip.
I've found it easier to explore custom login handlers by pulling
down an alternate contributed handler and diving into the code that
way rather than solely using the wiki page(s) for dev.
All the files and innerworkings just seem to make more sense in that
context rather than on a wiki page, to me at least.
------
thanks
kevin.foote
------------------------------
Message: 6
Date: Tue, 09 Jul 2013 16:03:05 +0200
From: Manuel Haim <haim at hrz.uni-marburg.de>
Subject: Re: Issues creating custom login handler
To: users at shibboleth.net
Message-ID: <51DC1819.2040301 at hrz.uni-marburg.de>
Content-Type: text/plain; charset=ISO-8859-1
Hi,
> I am trying to create a custom login handler
for a starting point, you could give our custom login handler a try (and
see what files are needed for your login handler to work):
http://www.staff.uni-marburg.de/~haimm/unimr-login.shib2.2011_11_21.zip
It is a combination of the default UsernamePassword login handler and
the SSO login handler with the following additions:
a) When doing forceAuthn, you can login under a different name (the
previous login is destroyed).
b) For kiosk machines (detected by IP address), it shows an additional
"Guest login" button.
c) The IP address of the user is added to the session's
publicCredentials (for use in attribute resolution, but please take care
of this Security Advisory:
http://shibboleth.internet2.edu/secadv/secadv_20110718.txt).
d) The user can deactivate SSO when he logs in (this is done by
combining the PreviousSession and UsernamePassword login handler to just
one login handler which handles both). This way, the user will be asked
to log in again for each SP. This option may also train our current
users to understand what SSO means (as by now, without Shibboleth, they
still need to log in to each single web application).
e) As we have multiple user bases, the user can choose the domain he
belongs to when logging in (e.g. "staff" or "students").
-Manuel
------------------------------
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
End of users Digest, Vol 25, Issue 49
*************************************
More information about the users
mailing list