MCB initialAuthContext with multiple contexts throws java.lang.NullPointerException

Paul Hethmon paul.hethmon at clareitysecurity.com
Thu Feb 13 10:27:58 EST 2014


On Feb 12, 2014, at 8:57 PM, Scott Koranda <skoranda at gmail.com<mailto:skoranda at gmail.com>> wrote:

If instead I configure the <initialAuthContext> element with two
<context> elements, for example

   <initialAuthContext requestedOnly="false">
           <context name="urn:oasis:names:tc:SAML:2.0:ac:classes:Password" />
           <context name="http://id.incommon.org/assurance/bronze" />
   </initialAuthContext>

then I am presented, as I expect, a list of two methods. When I choose
one of the methods and click "Continue" I find in my Tomcat log files

Scott,

In your idp-process.log are there any debug lines that look like this:

log.debug("Adding default method [{}]", m.getContent());

>From the stack trace it appears that for some reason the default method list is null, which doesn't make much sense given it is the list shown on the selection page. However, the list shown on the selection page can vary. So because of that it stores the list in the Tomcat session object where it later retrieves it for validation of the selection. That is the point the NPE shows up, that list retrieved from the session is null. Anything special in the Tomcat configuration as far as session support?

Paul


Paul Hethmon
Chief Software Architect
paul.hethmon at clareitysecurity.com<mailto:paul.hethmon at clareitysecurity.com>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140213/9c9a2df4/attachment-0001.html 


More information about the users mailing list