Shibboleth IDP 2.4 Setup
Richard Genthner
moose at symplicity.com
Wed Jul 16 12:20:41 EDT 2014
The other JDK was just openjdk-6
> Cantor, Scott <mailto:cantor.2 at osu.edu>
> July 16, 2014 at 12:17 PM
>
> What was the original JDK? I guess I thought it was openjdk to start with,
> that's why I suggested Oracle's.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
> Richard Genthner <mailto:moose at symplicity.com>
> July 16, 2014 at 9:21 AM
>
> So moving to openjdk7 fixed the issue. Now just to setup my idp to
> accept SP's automatically from a Federate Metadata.
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
> Peter Schober <mailto:peter.schober at univie.ac.at>
> July 16, 2014 at 3:45 AM
>
> For comparison here are my instructions for Debian7/Tomcat6/IDP2.4.0:
> https://wiki.univie.ac.at/display/federation/Shibboleth+IDP+2.4
> (and child pages).
> Specifics of getting a TLS/SSL server certificate and the metadata
> provider itself wil differ, of course. But not much else would need
> to, I think.
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
> Richard Genthner <mailto:moose at symplicity.com>
> July 15, 2014 at 2:15 PM
> My installation is Debian 7.5 tomcat6 and Shibboleth 2.4.0 incase your
> want to remake it.
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
> Richard Genthner <mailto:moose at symplicity.com>
> July 15, 2014 at 1:58 PM
>
> If I comment out this
>
> |<metadata:MetadataProvider id="URLMD"
> xsi:type="metadata:FileBackedHTTPMetadataProvider"
> metadataURL="http://md.incommon.org/InCommon/InCommon-metadata.xml"
> backingFile="/opt/shibboleth-idp/metadata/InCommon-metadata.xml"
> failFastInitialization="false" >
> <metadata:MetadataFilter xsi:type="metadata:ChainingFilter">
> <metadata:MetadataFilter xsi:type="metadata:RequiredValidUntil"
> maxValidityInterval="P15D" />
> <metadata:MetadataFilter xsi:type="metadata:EntityRoleWhiteList">
> <metadata:RetainedRole>samlmd:SPSSODescriptor</metadata:RetainedRole>
> </metadata:MetadataFilter>
> </metadata:MetadataFilter>
> </metadata:MetadataProvider>
> |
>
> And I will load just fine. But if I dont I get the following:
>
> Shibboleth 2.4x idp-process.log
>
> |13:50:08.157 - INFO
> [edu.internet2.middleware.shibboleth.common.config.BaseService:158] -
> Loading new configuration for service shibboleth.AttributeResolver
> 13:50:08.198 - INFO
> [edu.internet2.middleware.shibboleth.common.config.attribute.resolver.AbstractResolutionPlugInBeanDefinitionParser:55]
> - Parsing configuration for PrincipalConnector plugin with ID:
> shibTransient
> 13:50:08.199 - INFO
> [edu.internet2.middleware.shibboleth.common.config.attribute.resolver.AbstractResolutionPlugInBeanDefinitionParser:55]
> - Parsing configuration for PrincipalConnector plugin with ID: saml1Unspec
> 13:50:08.199 - INFO
> [edu.internet2.middleware.shibboleth.common.config.attribute.resolver.AbstractResolutionPlugInBeanDefinitionParser:55]
> - Parsing configuration for PrincipalConnector plugin with ID:
> saml2Transient
> 13:50:08.200 - INFO
> [edu.internet2.middleware.shibboleth.common.config.attribute.resolver.AbstractResolutionPlugInBeanDefinitionParser:55]
> - Parsing configuration for PrincipalConnector plugin with ID:
> saml2Persistent
> 13:50:08.207 - INFO
> [edu.internet2.middleware.shibboleth.common.config.attribute.resolver.AbstractResolutionPlugInBeanDefinitionParser:55]
> - Parsing configuration for DataConnector plugin with ID: myLDAP
> 13:50:08.210 - INFO
> [edu.internet2.middleware.shibboleth.common.config.attribute.resolver.AbstractResolutionPlugInBeanDefinitionParser:55]
> - Parsing configuration for DataConnector plugin with ID: myStoredId
> 13:50:08.289 - INFO
> [edu.internet2.middleware.shibboleth.common.config.attribute.resolver.AbstractResolutionPlugInBeanDefinitionParser:55]
> - Parsing configuration for AttributeDefinition plugin with ID:
> transientId
> 13:50:32.912 - INFO
> [edu.internet2.middleware.shibboleth.common.config.BaseService:180] -
> shibboleth.AttributeResolver service loaded new configuration
> 13:50:32.919 - INFO
> [edu.internet2.middleware.shibboleth.common.config.BaseService:158] -
> Loading new configuration for service shibboleth.AttributeFilterEngine
> 13:50:32.938 - INFO
> [edu.internet2.middleware.shibboleth.common.config.attribute.filtering.AttributeFilterPolicyBeanDefinitionParser:72]
> - Parsing configuration for attribute filter policy
> releaseTransientIdToAnyone
> 13:50:32.957 - INFO
> [edu.internet2.middleware.shibboleth.common.config.BaseService:180] -
> shibboleth.AttributeFilterEngine service loaded new configuration
> 13:50:32.963 - INFO
> [edu.internet2.middleware.shibboleth.common.config.BaseService:158] -
> Loading new configuration for service shibboleth.SAML1AttributeAuthority
> 13:50:32.969 - INFO
> [edu.internet2.middleware.shibboleth.common.config.BaseService:158] -
> Loading new configuration for service shibboleth.SAML2AttributeAuthority
> 13:50:32.976 - INFO
> [edu.internet2.middleware.shibboleth.common.config.BaseService:158] -
> Loading new configuration for service
> shibboleth.RelyingPartyConfigurationManager
> 13:50:33.053 - INFO
> [edu.internet2.middleware.shibboleth.common.config.relyingparty.RelyingPartyConfigurationBeanDefinitionParser:73]
> - Parsing configuration for relying party with id: anonymous
> 13:50:33.053 - INFO
> [edu.internet2.middleware.shibboleth.common.config.relyingparty.RelyingPartyConfigurationBeanDefinitionParser:73]
> - Parsing configuration for relying party with id: default
> 13:50:33.079 - INFO
> [edu.internet2.middleware.shibboleth.common.config.security.AbstractX509CredentialBeanDefinitionParser:63]
> - Parsing configuration for X509Filesystem credential with id:
> IdPCredential
> 13:50:33.146 - INFO
> [edu.internet2.middleware.shibboleth.common.config.security.StaticExplicitKeySignatureTrustEngineBeanDefinitionParser:52]
> - Parsing configuration for StaticExplicitKeySignature trust engine
> with id: ICTrust
> 13:50:33.147 - INFO
> [edu.internet2.middleware.shibboleth.common.config.security.AbstractX509CredentialBeanDefinitionParser:63]
> - Parsing configuration for X509Filesystem credential with id:
> MyFederation1Credentials
> 13:50:33.149 - INFO
> [edu.internet2.middleware.shibboleth.common.config.security.ChainingSignatureTrustEngineBeanDefinitionParser:59]
> - Parsing configuration for SignatureChaining trust engine with id:
> shibboleth.SignatureTrustEngine
> 13:50:33.150 - INFO
> [edu.internet2.middleware.shibboleth.common.config.security.MetadataExplicitKeySignatureTrustEngineBeanDefinitionParser:50]
> - Parsing configuration for MetadataExplicitKeySignature trust engine
> with id: shibboleth.SignatureMetadataExplicitKeyTrustEngine
> 13:50:33.151 - INFO
> [edu.internet2.middleware.shibboleth.common.config.security.MetadataPKIXSignatureTrustEngineBeanDefinitionParser:52]
> - Parsing configuration for MetadataPKIXSignature trust engine with
> id: shibboleth.SignatureMetadataPKIXTrustEngine
> 13:50:33.152 - INFO
> [edu.internet2.middleware.shibboleth.common.config.security.ChainingTrustEngineBeanDefinitionParser:59]
> - Parsing configuration for Chaining trust engine with id:
> shibboleth.CredentialTrustEngine
> 13:50:33.153 - INFO
> [edu.internet2.middleware.shibboleth.common.config.security.MetadataExplicitKeyTrustEngineBeanDefinitionParser:48]
> - Parsing configuration for MetadataExplicitKey trust engine with id:
> shibboleth.CredentialMetadataExplictKeyTrustEngine
> 13:50:33.153 - INFO
> [edu.internet2.middleware.shibboleth.common.config.security.MetadataPKIXX509CredentialTrustEngineBeanDefinitionParser:52]
> - Parsing configuration for MetadataPKIXX509Credential trust engine
> with id: shibboleth.CredentialMetadataPKIXTrustEngine
> 13:50:33.154 - INFO
> [edu.internet2.middleware.shibboleth.common.config.security.ShibbolethSecurityPolicyBeanDefinitionParser:59]
> - Parsing configuration for SecurityPolicyType security policy with
> id: shibboleth.ShibbolethSSOSecurityPolicy
> 13:50:33.160 - INFO
> [edu.internet2.middleware.shibboleth.common.config.security.ShibbolethSecurityPolicyBeanDefinitionParser:59]
> - Parsing configuration for SecurityPolicyType security policy with
> id: shibboleth.SAML1AttributeQuerySecurityPolicy
> 13:50:33.165 - INFO
> [edu.internet2.middleware.shibboleth.common.config.security.ShibbolethSecurityPolicyBeanDefinitionParser:59]
> - Parsing configuration for SecurityPolicyType security policy with
> id: shibboleth.SAML1ArtifactResolutionSecurityPolicy
> 13:50:33.166 - INFO
> [edu.internet2.middleware.shibboleth.common.config.security.ShibbolethSecurityPolicyBeanDefinitionParser:59]
> - Parsing configuration for SecurityPolicyType security policy with
> id: shibboleth.SAML2SSOSecurityPolicy
> 13:50:33.170 - INFO
> [edu.internet2.middleware.shibboleth.common.config.security.ShibbolethSecurityPolicyBeanDefinitionParser:59]
> - Parsing configuration for SecurityPolicyType security policy with
> id: shibboleth.SAML2AttributeQuerySecurityPolicy
> 13:50:33.172 - INFO
> [edu.internet2.middleware.shibboleth.common.config.security.ShibbolethSecurityPolicyBeanDefinitionParser:59]
> - Parsing configuration for SecurityPolicyType security policy with
> id: shibboleth.SAML2ArtifactResolutionSecurityPolicy
> 13:50:33.174 - INFO
> [edu.internet2.middleware.shibboleth.common.config.security.ShibbolethSecurityPolicyBeanDefinitionParser:59]
> - Parsing configuration for SecurityPolicyType security policy with
> id: shibboleth.SAML2SLOSecurityPolicy
> 13:51:09.435 - ERROR
> [edu.internet2.middleware.shibboleth.common.config.BaseService:188] -
> Configuration was not loaded for
> shibboleth.RelyingPartyConfigurationManager service, error creating
> components. The root cause of this error was:
> java.lang.NullPointerException: null
> |
>
> Tomcat 6 Logs
>
> |Jul 15, 2014 1:24:03 PM org.apache.catalina.startup.Catalina start
> INFO: Server startup in 38314 ms
> Exception in thread "Timer-1" java.lang.NullPointerException
> at
> com.mchange.v2.log.log4j.Log4jMLog$Log4jMLogger.isLoggable(Log4jMLog.java:257)
> at
> com.mchange.v2.resourcepool.BasicResourcePool$CheckIdleResourcesTask.run(BasicResourcePool.java:1961)
> at java.util.TimerThread.mainLoop(Timer.java:534)
> at java.util.TimerThread.run(Timer.java:484)
> Jul 15, 2014 1:50:03 PM org.apache.coyote.http11.Http11Protocol pause
> INFO: Pausing Coyote HTTP/1.1 on http-8080
> Jul 15, 2014 1:50:04 PM org.apache.catalina.core.StandardService stop
> INFO: Stopping service Catalina
> Jul 15, 2014 1:50:04 PM org.apache.coyote.http11.Http11Protocol destroy
> INFO: Stopping Coyote HTTP/1.1 on http-8080
> Jul 15, 2014 1:50:05 PM org.apache.catalina.startup.ClassLoaderFactory
> validateFile
> WARNING: Problem with directory [/usr/share/tomcat6/server/classes],
> exists: [false], isDirectory: [false], canRead: [false]
> Jul 15, 2014 1:50:05 PM org.apache.catalina.startup.ClassLoaderFactory
> validateFile
> WARNING: Problem with directory [/usr/share/tomcat6/server], exists:
> [false], isDirectory: [false], canRead: [false]
> Jul 15, 2014 1:50:05 PM org.apache.catalina.startup.ClassLoaderFactory
> validateFile
> WARNING: Problem with directory [/usr/share/tomcat6/shared/classes],
> exists: [false], isDirectory: [false], canRead: [false]
> Jul 15, 2014 1:50:05 PM org.apache.catalina.startup.ClassLoaderFactory
> validateFile
> WARNING: Problem with directory [/usr/share/tomcat6/shared], exists:
> [false], isDirectory: [false], canRead: [false]
> Jul 15, 2014 1:50:05 PM org.apache.coyote.http11.Http11Protocol init
> INFO: Initializing Coyote HTTP/1.1 on http-8080
> Jul 15, 2014 1:50:05 PM org.apache.catalina.startup.Catalina load
> INFO: Initialization processed in 393 ms
> Jul 15, 2014 1:50:05 PM org.apache.catalina.core.StandardService start
> INFO: Starting service Catalina
> Jul 15, 2014 1:50:05 PM org.apache.catalina.core.StandardEngine start
> INFO: Starting Servlet Engine: Apache Tomcat/6.0.35
> Jul 15, 2014 1:50:05 PM org.apache.catalina.startup.HostConfig
> deployDescriptor
> INFO: Deploying configuration descriptor idp.xml
> Jul 15, 2014 1:51:09 PM org.apache.catalina.core.StandardContext start
> SEVERE: Error listenerStart
> Jul 15, 2014 1:51:09 PM org.apache.catalina.core.StandardContext start
> SEVERE: Context [/idp] startup failed due to previous errors
> Jul 15, 2014 1:51:09 PM org.apache.catalina.loader.WebappClassLoader
> clearReferencesJdbc
> SEVERE: The web application [/idp] registered the JDBC driver
> [com.mysql.jdbc.Driver] but failed to unregister it when the web
> application was stopped. To prevent a memory leak, the JDBC Driver has
> been forcibly unregistered.
> Jul 15, 2014 1:51:09 PM org.apache.catalina.loader.WebappClassLoader
> clearReferencesThreads
> SEVERE: The web application [/idp] appears to have started a thread
> named [Timer-1] but has failed to stop it. This is very likely to
> create a memory leak.
> Jul 15, 2014 1:51:09 PM org.apache.catalina.loader.WebappClassLoader
> clearReferencesThreads
> SEVERE: The web application [/idp] appears to have started a thread
> named
> [com.mchange.v2.async.ThreadPoolAsynchronousRunner$PoolThread-#0] but
> has failed to stop it. This is very likely to create a memory leak.
> Jul 15, 2014 1:51:09 PM org.apache.catalina.loader.WebappClassLoader
> clearReferencesThreads
> SEVERE: The web application [/idp] appears to have started a thread
> named
> [com.mchange.v2.async.ThreadPoolAsynchronousRunner$PoolThread-#1] but
> has failed to stop it. This is very likely to create a memory leak.
> Jul 15, 2014 1:51:09 PM org.apache.catalina.loader.WebappClassLoader
> clearReferencesThreads
> SEVERE: The web application [/idp] appears to have started a thread
> named
> [com.mchange.v2.async.ThreadPoolAsynchronousRunner$PoolThread-#2] but
> has failed to stop it. This is very likely to create a memory leak.
> Jul 15, 2014 1:51:09 PM org.apache.catalina.loader.WebappClassLoader
> clearReferencesThreads
> SEVERE: The web application [/idp] appears to have started a thread
> named [Abandoned connection cleanup thread] but has failed to stop it.
> This is very likely to create a memory leak.
> Jul 15, 2014 1:51:09 PM org.apache.catalina.loader.WebappClassLoader
> clearReferencesThreads
> SEVERE: The web application [/idp] appears to have started a thread
> named [MySQL Statement Cancellation Timer] but has failed to stop it.
> This is very likely to create a memory leak.
> Jul 15, 2014 1:51:09 PM org.apache.catalina.loader.WebappClassLoader
> clearReferencesThreads
> SEVERE: The web application [/idp] appears to have started a thread
> named [MultiThreadedHttpConnectionManager cleanup] but has failed to
> stop it. This is very likely to create a memory leak.
> Jul 15, 2014 1:51:09 PM org.apache.catalina.loader.WebappClassLoader
> clearThreadLocalMap
> SEVERE: The web application [/idp] created a ThreadLocal with key of
> type
> [edu.vt.middleware.ldap.ssl.ThreadLocalTLSSocketFactory.ThreadLocalSslConfig]
> (value
> [edu.vt.middleware.ldap.ssl.ThreadLocalTLSSocketFactory$ThreadLocalSslConfig at 6d88ea53])
> and a value of type
> [edu.vt.middleware.ldap.ssl.DefaultSSLContextInitializer] (value
> [edu.vt.middleware.ldap.ssl.DefaultSSLContextInitializer at 37d02753])
> but failed to remove it when the web application was stopped. This is
> very likely to create a memory leak.
> Jul 15, 2014 1:51:09 PM org.apache.catalina.startup.HostConfig
> deployDescriptor
> INFO: Deploying configuration descriptor ROOT.xml
> Jul 15, 2014 1:51:09 PM org.apache.coyote.http11.Http11Protocol start
> INFO: Starting Coyote HTTP/1.1 on http-8080
> Jul 15, 2014 1:51:09 PM org.apache.jk.common.ChannelSocket init
> INFO: JK: ajp13 listening on /127.0.0.1:8009
> Jul 15, 2014 1:51:09 PM org.apache.jk.server.JkMain start
> INFO: Jk running ID=0 time=0/14 config=null
> Jul 15, 2014 1:51:09 PM org.apache.catalina.startup.Catalina start
> INFO: Server startup in 64210 ms
> |
>
> ---
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
--
--
Richard Genthner
Senior System Administrator
rgenthner at symplicity.com
tel. 703-351-0200 x8051
Direct 703-373-7033
sip:8051 at voip.symplicity.com
Symplicity Corporation
http://www.symplicity.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140716/ab268f31/attachment-0001.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: compose-unknown-contact.jpg
Type: image/jpeg
Size: 770 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20140716/ab268f31/attachment-0002.jpg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: postbox-contact.jpg
Type: image/jpeg
Size: 1334 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20140716/ab268f31/attachment-0003.jpg
More information about the users
mailing list