MCB java exceptios

Thu Apr 16 13:42:30 EDT 2015

Well, that would explain the NPE then.  If we're trying to get the metadata
for the RP & there's no RP, then that'd toss an NPE.

Dave

On Thu, Apr 16, 2015 at 11:38 AM, IAM David Bantz <dabantz at alaska.edu>
wrote:

> No, the java NPE is not thrown for all requests.  I'm trying to reproduce.
> I can trigger both the tell-tale IdP DEBUG log message and the java NPE by
> pointing my browser to the login page:
> https://idp.alaska.edu/idp/Authn/MCB
> which of course happens frequently as people use browser navigation,
> presenting the IdP with a "request" from nowhere.
>
> David
>
> On Wed, Apr 15, 2015 at 7:18 PM, David Langenberg <davel at uchicago.edu>
> wrote:
>
>> Fascinating.  What the MCB is doing at that particular line is trying to
>> get the metadata for the RelyingParty.
>>
>>
>> https://github.com/langedb/Shibboleth-Multi-Context-Broker/blob/issue-8/mcb-project/src/main/java/edu/internet2/middleware/assurance/mcb/authn/provider/MCBLoginServlet.java#L135
>>
>> Does this get thrown for all SPs and all requests?  I too see the NPEs in
>> my logs, but since functionally everything seems to be working fine I don't
>> feel it's a must-fix-immediately.  As Michael said, you could wait and try
>> 1.2.5 (1.2.4 has a pretty serious regression in it).  I should note that as
>> for Chicago, the next step for our shibboleth service is IdPv3 for which
>> Unicon is building right now, so we don't plan on doing any more work on
>> the current v2 code unless something very nasty is found.
>>
>> Dave
>>
>> On Wed, Apr 15, 2015 at 8:55 PM, Michael A Grady <mgrady at unicon.net>
>> wrote:
>>
>>> Well, Hethmon fixed at least one NPE on 6/4/2014, which I wouldn't be
>>> surprised to find is *not* reflected in your current version:
>>>
>>>
>>> https://github.com/Internet2/Shibboleth-Multi-Context-Broker/commit/4a1215a8262da007abf640e60de7cd2a0b81e888
>>>
>>> Since we used a distribution that we actually got from David L., he
>>> might have a better idea on that. You probably want to update the MCB
>>> version you have. But I think there is still one outstanding issue he is
>>> working on, so you might still want to hold off and see if within the next
>>> few weeks he has a 1.2.5 (1.2.4 is the latest right now).
>>>
>>> On Apr 15, 2015, at 3:48 PM, db at alaska.edu <dabantz at alaska.edu> wrote:
>>>
>>> Yes
>>>
>>>
>>> David.Bantz at me.com
>>> David.Bantz at Alaska.edu <http://alaska.edu/>
>>>
>>>
>>> On Apr 15, 2015, at 12:41 PM, Michael A Grady <mgrady at unicon.net> wrote:
>>>
>>> What version of the MCB are you running at this point? Still the version
>>> we installed last year?
>>>
>>> On Apr 15, 2015, at 3:00 PM, IAM David Bantz <dabantz at alaska.edu> wrote:
>>>
>>> Unnoticed till now but the localhost logs in /var/log/tomcat are rife
>>> with java null pointer exceptions thrown by the MCB, like that quoted below.
>>>
>>> It doesn't seem to be damaging performance, but also seems worth knowing
>>> why.  The IdP process log has a few lines at the same moment as the
>>> exception:
>>>
>>> IdP Process log:
>>>
>>> 07:52:59.787 - DEBUG
>>> [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginServlet:114]
>>> - Request received from [172.30.247.112]
>>>
>>> 07:52:59.787 - DEBUG
>>> [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginServlet:126]
>>> - Creating new principal object for request.
>>>
>>> 07:52:59.788 - DEBUG
>>> [edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginServlet:130]
>>> - principal = [{MCBUsernamePrincipal}[principal]]
>>>
>>> --------
>>> tomcat local host log:
>>>
>>> Apr 15, 2015 7:52:59 AM org.apache.catalina.core.StandardWrapperValve
>>> invoke
>>>
>>> SEVERE: Servlet.service() for servlet MCBLoginServlet threw exception
>>>
>>> java.lang.NullPointerException
>>>
>>>         at
>>> edu.internet2.middleware.assurance.mcb.authn.provider.MCBLoginServlet.service(MCBLoginServlet.java:135)
>>>
>>>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
>>>
>>>         at
>>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
>>>
>>>         at
>>> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>>>
>>>         at
>>> edu.internet2.middleware.shibboleth.idp.util.NoCacheFilter.doFilter(NoCacheFilter.java:50)
>>>
>>>         at
>>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
>>>
>>>         at
>>> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>>>
>>>         at
>>> edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilter(IdPSessionFilter.java:87)
>>>
>>>         at
>>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
>>>
>>>         at
>>> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>>>
>>>         at
>>> edu.internet2.middleware.shibboleth.common.log.SLF4JMDCCleanupFilter.doFilter(SLF4JMDCCleanupFilter.java:52)
>>>
>>>         at
>>> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
>>>
>>>         at
>>> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
>>>
>>>         at
>>> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:219)
>>>
>>>         at
>>> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
>>>
>>>         at
>>> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
>>>
>>>         at
>>> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
>>>
>>>         at
>>> org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:554)
>>>
>>>         at
>>> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
>>>
>>>         at
>>> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)
>>>
>>>         at
>>> org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:859)
>>>
>>>         at
>>> org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)
>>>
>>>         at
>>> org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
>>>
>>>         at java.lang.Thread.run(Thread.java:662)
>>>
>>>
>>>
>>> --
>>> Michael A. Grady
>>> Senior IAM Consultant, Unicon, Inc.
>>>
>>>
>>>
>>> --
>>> Michael A. Grady
>>> Senior IAM Consultant, Unicon, Inc.
>>>
>>>
>>
>>
>> --
>> David Langenberg
>> Identity & Access Management Architect
>> The University of Chicago
>>
>
>

-- 
David Langenberg
Identity & Access Management Architect
The University of Chicago
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150416/ffee1bb5/attachment.html 