TestShib

Sathish Anickode SAnickode at skytouchtechnology.com
Tue Dec 9 18:06:24 EST 2014


Thanks for the info. I turned on the logs and found the following error but I am not sure which configuration file is not found. I checked the handler.xml and find that the location of login.config is correct.

java.lang.SecurityException: Configuration Error:
	No such file or directory
	at com.sun.security.auth.login.ConfigFile.<init>(ConfigFile.java:110) ~[na:1.7.0_71]
	at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[na:1.7.0_71]
	at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57) ~[na:1.7.0_71]
	at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[na:1.7.0_71]
	at java.lang.reflect.Constructor.newInstance(Constructor.java:526) ~[na:1.7.0_71]
	at java.lang.Class.newInstance(Class.java:379) ~[na:1.7.0_71]
	at javax.security.auth.login.Configuration$2.run(Configuration.java:258) ~[na:1.7.0_71]
	at javax.security.auth.login.Configuration$2.run(Configuration.java:250) ~[na:1.7.0_71]
	at java.security.AccessController.doPrivileged(Native Method) ~[na:1.7.0_71]
	at javax.security.auth.login.Configuration.getConfiguration(Configuration.java:249) ~[na:1.7.0_71]
	at javax.security.auth.login.LoginContext$1.run(LoginContext.java:253) ~[na:1.7.0_71]
	at javax.security.auth.login.LoginContext$1.run(LoginContext.java:251) ~[na:1.7.0_71]
	at java.security.AccessController.doPrivileged(Native Method) ~[na:1.7.0_71]
	at javax.security.auth.login.LoginContext.init(LoginContext.java:250) ~[na:1.7.0_71]
	at javax.security.auth.login.LoginContext.<init>(LoginContext.java:425) ~[na:1.7.0_71]
	at edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet.authenticateUser(UsernamePasswordLoginServlet.java:174) [shibboleth-identityprovider-2.4.3.jar:na]
	at edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet.service(UsernamePasswordLoginServlet.java:123) [shibboleth-identityprovider-2.4.3.jar:na]
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:723) [servlet-api.jar:na]
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) [catalina.jar:6.0.43]
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [catalina.jar:6.0.43]
	at edu.internet2.middleware.shibboleth.idp.util.NoCacheFilter.doFilter(NoCacheFilter.java:50) [shibboleth-identityprovider-2.4.3.jar:na]
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) [catalina.jar:6.0.43]
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [catalina.jar:6.0.43]
	at edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilter(IdPSessionFilter.java:87) [shibboleth-identityprovider-2.4.3.jar:na]
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) [catalina.jar:6.0.43]
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [catalina.jar:6.0.43]
	at edu.internet2.middleware.shibboleth.common.log.SLF4JMDCCleanupFilter.doFilter(SLF4JMDCCleanupFilter.java:52) [shibboleth-common-1.4.3.jar:na]
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) [catalina.jar:6.0.43]
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [catalina.jar:6.0.43]
	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:219) [catalina.jar:6.0.43]
	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191) [catalina.jar:6.0.43]
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) [catalina.jar:6.0.43]
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103) [catalina.jar:6.0.43]
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) [catalina.jar:6.0.43]
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293) [catalina.jar:6.0.43]
	at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:861) [tomcat-coyote.jar:6.0.43]
	at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:620) [tomcat-coyote.jar:6.0.43]
	at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489) [tomcat-coyote.jar:6.0.43]
	at java.lang.Thread.run(Thread.java:745) [na:1.7.0_71]
Caused by: java.io.IOException: Configuration Error:
	No such file or directory
	at com.sun.security.auth.login.ConfigFile.init(ConfigFile.java:288) ~[na:1.7.0_71]
	at com.sun.security.auth.login.ConfigFile.init(ConfigFile.java:219) ~[na:1.7.0_71]
	at com.sun.security.auth.login.ConfigFile.<init>(ConfigFile.java:108) ~[na:1.7.0_71]
	... 38 common frames omitted

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Kevin Foote
Sent: Tuesday, December 09, 2014 3:40 PM
To: Shib Users
Subject: Re: TestShib




> On Dec 9, 2014, at 2:29 PM, Sathish Anickode <SAnickode at skytouchtechnology.com> wrote:
> 
> I was actually testing through TestShib but was redirected to the following url: https://idp.local.com/idp/Authn/UserPassword, and I encountered similar issue. Once I submitted my user id and password from this page, I got back the following message:
> 
> Login has failed. Double-check your username and password.

Forgot to ask if this is v2 or v3 of the IdP but I’ll assume v2 for now.. 

Well this tells us that the testshib.org sp is directing to your IdP just fine and that your IdP is “configured” for the JAAS authN. 

I believe you should turn up logging in the logging.xml file and restart your IdP jvm.
 
This should show you what is going on in vt-ldap JAAS portion. 

== clip from logging.xml 

10     <logger name="edu.internet2.middleware.shibboleth" level="DEBUG" />
11 
12     <!-- Logs OpenSAML, but not IdP, messages -->
13     <logger name="org.opensaml" level="WARN" />
14 
15     <!-- Logs LDAP related messages -->
16     <logger name="edu.vt.middleware.ldap" level=“DEBUG" />



--------
thanks
 kevin.foote

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list