MCB java exceptios

[IAM David Bantz]

No, the java NPE is not thrown for all requests.  I'm trying to reproduce.
I can trigger both the tell-tale IdP DEBUG log message and the java NPE by
pointing my browser to the login page:
https://idp.alaska.edu/idp/Authn/MCB
which of course happens frequently as people use browser navigation,
presenting the IdP with a "request" from nowhere.

David

On Wed, Apr 15, 2015 at 7:18 PM, David Langenberg <davel at uchicago.edu>
wrote:

> Fascinating.  What the MCB is doing at that particular line is trying to
> get the metadata for the RelyingParty.
>
>
> https://github.com/langedb/Shibboleth-Multi-Context-Broker/blob/issue-8/mcb-project/src/main/java/edu/internet2/middleware/assurance/mcb/authn/provider/MCBLoginServlet.java#L135
>
> Does this get thrown for all SPs and all requests?  I too see the NPEs in
> my logs, but since functionally everything seems to be working fine I don't
> feel it's a must-fix-immediately.  As Michael said, you could wait and try
> 1.2.5 (1.2.4 has a pretty serious regression in it).  I should note that as
> for Chicago, the next step for our shibboleth service is IdPv3 for which
> Unicon is building right now, so we don't plan on doing any more work on
> the current v2 code unless something very nasty is found.
>
> Dave
>
> On Wed, Apr 15, 2015 at 8:55 PM, Michael A Grady <mgrady at unicon.net>
> wrote:
>
>> Well, Hethmon fixed at least one NPE on 6/4/2014, which I wouldn't be
>> surprised to find is *not* reflected in your current version:
>>
>>
>> https://github.com/Internet2/Shibboleth-Multi-Context-Broker/commit/4a1215a8262da007abf640e60de7cd2a0b81e888
>>
>> Since we used a distribution that we actually got from David L., he might
>> have a better idea on that. You probably want to update the MCB version you
>> have. But I think there is still one outstanding issue he is working on, so
>> you might still want to hold off and see if within the next few weeks he
>> has a 1.2.5 (1.2.4 is the latest right now).
>>
>> On Apr 15, 2015, at 3:48 PM, db at alaska.edu <dabantz at alaska.edu> wrote:
>>
>> Yes
>>
>>
>> David.Bantz at me.com
>> David.Bantz at Alaska.edu <http://alaska.edu/>
>>
>>
>> On Apr 15, 2015, at 12:41 PM, Michael A Grady <mgrady at unicon.net> wrote:
>>
>> What version of the MCB are you running at this point? Still the version
>> we installed last year?
>>
>> On Apr 15, 2015, at 3:00 PM, IAM David Bantz <dabantz at alaska.edu> wrote:
>>
>> Unnoticed till now but the localhost logs in /var/log/tomcat are rife
>> with java null pointer exceptions thrown by the MCB, like that quoted below.
>>
>> It doesn't seem to be damaging performance, but also seems worth knowing
>> why.  The IdP process log has a few lines at the same moment as the
>> exception:
>>
>> IdP Process log:
>>
>> 07:52:59.787 - DEBUG
>> [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginServlet:114]
>> - Request received from [172.30.247.112]
>>
>> 07:52:59.787 - DEBUG
>> [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginServlet:126]
>> - Creating new principal object for request.
>>
>> 07:52:59.788 - DEBUG
>> [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginServlet:130]
>> - principal = [{MCBUsernamePrincipal}[principal]]
>>
>> --------
>> tomcat local host log:
>>
>> Apr 15, 2015 7:52:59 AM org.apache.catalina.core.StandardWrapperValve
>> invoke
>>
>> SEVERE: Servlet.service() for servlet MCBLoginServlet threw exception
>>
>> java.lang.NullPointerException
>>
>>         at
>> edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginServlet.service(MCBLoginServlet.java:135)
>>
>>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
>>
>>         at
>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
>>
>>         at
>> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>>
>>         at
>> edu.internet2.middleware.shibboleth.idp.util.NoCacheFilter.doFilter(NoCacheFilter.java:50)
>>
>>         at
>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
>>
>>         at
>> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>>
>>         at
>> edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilter(IdPSessionFilter.java:87)
>>
>>         at
>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
>>
>>         at
>> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>>
>>         at
>> edu.internet2.middleware.shibboleth.common.log.SLF4JMDCCleanupFilter.doFilter(SLF4JMDCCleanupFilter.java:52)
>>
>>         at
>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
>>
>>         at
>> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>>
>>         at
>> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:219)
>>
>>         at
>> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
>>
>>         at
>> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
>>
>>         at
>> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
>>
>>         at
>> org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:554)
>>
>>         at
>> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
>>
>>         at
>> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
>>
>>         at
>> org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:859)
>>
>>         at
>> org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)
>>
>>         at
>> org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
>>
>>         at java.lang.Thread.run(Thread.java:662)
>>
>>
>>
>> --
>> Michael A. Grady
>> Senior IAM Consultant, Unicon, Inc.
>>
>>
>>
>> --
>> Michael A. Grady
>> Senior IAM Consultant, Unicon, Inc.
>>
>>
>
>
> --
> David Langenberg
> Identity & Access Management Architect
> The University of Chicago
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150416/88fbc1d2/attachment-0001.html