X.509 Authentication using Tomcat

[Peter Schober]

* nduan at dtechspace.com <nduan at dtechspace.com> [2014-02-20 21:42]:
> Actually this is the place that causes the exception.  The complete 
> handler.xml file is attached.

Scott already pointed you to the error and copy&pasting Mike's
suggestion would have also worked.

>      <LoginHandler xsi:type="x509:X509"
>                    loginPageURL="/x509-login"
>                    authenticationServletURL="/Authn/X509/Login">
>          <AuthenticationMethod>
>              urn:oasis:names:tc:SAML:2.0:ac:classes:X509
>          </AuthenticationMethod>
>      </LoginHandler>

The config file does not define a default namespace so all elements
need the previously defined XML namespace declaration prefix in their
name, i.e. <ph:LoginHandler> and <ph:AuthenticationMethod>, not
<LoginHandler> and <AuthenticationMethod>.

Or include an xmlns="urn:mace:shibboleth:2.0:idp:profile-handler"
attribute in the parent <ph:ProfileHandlerGroup> element, then your
existing config would also validate without changing the elements.
-peter