TestShib
Sathish Anickode
SAnickode at skytouchtechnology.com
Tue Dec 9 18:06:24 EST 2014
Thanks for the info. I turned on the logs and found the following error but I am not sure which configuration file is not found. I checked the handler.xml and find that the location of login.config is correct.
java.lang.SecurityException: Configuration Error:
No such file or directory
at com.sun.security.auth.login.ConfigFile.<init>(ConfigFile.java:110) ~[na:1.7.0_71]
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) ~[na:1.7.0_71]
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57) ~[na:1.7.0_71]
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) ~[na:1.7.0_71]
at java.lang.reflect.Constructor.newInstance(Constructor.java:526) ~[na:1.7.0_71]
at java.lang.Class.newInstance(Class.java:379) ~[na:1.7.0_71]
at javax.security.auth.login.Configuration$2.run(Configuration.java:258) ~[na:1.7.0_71]
at javax.security.auth.login.Configuration$2.run(Configuration.java:250) ~[na:1.7.0_71]
at java.security.AccessController.doPrivileged(Native Method) ~[na:1.7.0_71]
at javax.security.auth.login.Configuration.getConfiguration(Configuration.java:249) ~[na:1.7.0_71]
at javax.security.auth.login.LoginContext$1.run(LoginContext.java:253) ~[na:1.7.0_71]
at javax.security.auth.login.LoginContext$1.run(LoginContext.java:251) ~[na:1.7.0_71]
at java.security.AccessController.doPrivileged(Native Method) ~[na:1.7.0_71]
at javax.security.auth.login.LoginContext.init(LoginContext.java:250) ~[na:1.7.0_71]
at javax.security.auth.login.LoginContext.<init>(LoginContext.java:425) ~[na:1.7.0_71]
at edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet.authenticateUser(UsernamePasswordLoginServlet.java:174) [shibboleth-identityprovider-2.4.3.jar:na]
at edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet.service(UsernamePasswordLoginServlet.java:123) [shibboleth-identityprovider-2.4.3.jar:na]
at javax.servlet.http.HttpServlet.service(HttpServlet.java:723) [servlet-api.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) [catalina.jar:6.0.43]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [catalina.jar:6.0.43]
at edu.internet2.middleware.shibboleth.idp.util.NoCacheFilter.doFilter(NoCacheFilter.java:50) [shibboleth-identityprovider-2.4.3.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) [catalina.jar:6.0.43]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [catalina.jar:6.0.43]
at edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilter(IdPSessionFilter.java:87) [shibboleth-identityprovider-2.4.3.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) [catalina.jar:6.0.43]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [catalina.jar:6.0.43]
at edu.internet2.middleware.shibboleth.common.log.SLF4JMDCCleanupFilter.doFilter(SLF4JMDCCleanupFilter.java:52) [shibboleth-common-1.4.3.jar:na]
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) [catalina.jar:6.0.43]
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [catalina.jar:6.0.43]
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:219) [catalina.jar:6.0.43]
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191) [catalina.jar:6.0.43]
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) [catalina.jar:6.0.43]
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103) [catalina.jar:6.0.43]
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) [catalina.jar:6.0.43]
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293) [catalina.jar:6.0.43]
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:861) [tomcat-coyote.jar:6.0.43]
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:620) [tomcat-coyote.jar:6.0.43]
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489) [tomcat-coyote.jar:6.0.43]
at java.lang.Thread.run(Thread.java:745) [na:1.7.0_71]
Caused by: java.io.IOException: Configuration Error:
No such file or directory
at com.sun.security.auth.login.ConfigFile.init(ConfigFile.java:288) ~[na:1.7.0_71]
at com.sun.security.auth.login.ConfigFile.init(ConfigFile.java:219) ~[na:1.7.0_71]
at com.sun.security.auth.login.ConfigFile.<init>(ConfigFile.java:108) ~[na:1.7.0_71]
... 38 common frames omitted
-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Kevin Foote
Sent: Tuesday, December 09, 2014 3:40 PM
To: Shib Users
Subject: Re: TestShib
> On Dec 9, 2014, at 2:29 PM, Sathish Anickode <SAnickode at skytouchtechnology.com> wrote:
>
> I was actually testing through TestShib but was redirected to the following url: https://idp.local.com/idp/Authn/UserPassword, and I encountered similar issue. Once I submitted my user id and password from this page, I got back the following message:
>
> Login has failed. Double-check your username and password.
Forgot to ask if this is v2 or v3 of the IdP but I’ll assume v2 for now..
Well this tells us that the testshib.org sp is directing to your IdP just fine and that your IdP is “configured” for the JAAS authN.
I believe you should turn up logging in the logging.xml file and restart your IdP jvm.
This should show you what is going on in vt-ldap JAAS portion.
== clip from logging.xml
10 <logger name="edu.internet2.middleware.shibboleth" level="DEBUG" />
11
12 <!-- Logs OpenSAML, but not IdP, messages -->
13 <logger name="org.opensaml" level="WARN" />
14
15 <!-- Logs LDAP related messages -->
16 <logger name="edu.vt.middleware.ldap" level=“DEBUG" />
--------
thanks
kevin.foote
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list