idp login issue connecting to ldap

[Paul Caskey]

First, I have not read this entire thread, so my apologies if this is completely off-base, but it might be relevant.  I was recently working on a new V3 IdP and ran into an issue where trying to login (via the normal login form) resulted in a simple re-display of the login page with no displayed errors and no messages written to idp-process.log, even with ldaptive and idp in DEBUG.

I was running Jetty 9.3.  I reverted to 9.2 and then started getting errors messages in idp-process.log.  The errors basically indicated that I had not installed the JCE, which I had overlooked (error was invalid key length for the sealer key, IIRC).  That IdP is now running fine on Jetty 9.2 (with JCE), I never went back to 9.3.  

Apologies if that's not relevant, just thought I'd throw it out there.



> -----Original Message-----
> From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
> Sent: Monday, August 03, 2015 6:47 PM
> To: Shib Users
> Subject: Re: idp login issue connecting to ldap
> 
> Here's a valid log. The difference starts with this line:
> 
> 2015-08-03 19:39:34,741 - DEBUG
> [org.springframework.webflow.mvc.view.AbstractMvcView:216] - Processing
> user event 'proceed'
> 
> 
> Yours never sees the form submission with the event transition, which is what
> the Login button provides.
> 
> I would guess that something's preventing the server from seeing the POST
> body and it's only seeing the URL.
> 
> Is there anything in front of Jetty? Other than trying Jetty 9.2, I don't have
> anything to suggest. I haven't done any real testing with 9.3, though I know
> others have been setting it up.
> 
> -- Scott
> 
> 
> 2015-08-03 19:39:34,738 - DEBUG
> [org.springframework.webflow.mvc.servlet.FlowHandlerMapping:108] -
> Mapping request with URI '/idp/profile/SAML2/Redirect/SSO' to flow with id
> 'SAML2/Redirect/SSO'
> 2015-08-03 19:39:34,739 - DEBUG
> [org.springframework.webflow.executor.FlowExecutorImpl:161] - Resuming
> flow execution with key 'e1s1
> 2015-08-03 19:39:34,739 - DEBUG
> [org.springframework.webflow.conversation.impl.SessionBindingConversation
> Manager:75] - Locking conversation 1
> 2015-08-03 19:39:34,739 - DEBUG
> [org.springframework.webflow.execution.repository.impl.DefaultFlowExecution
> Repository:106] - Getting flow execution with key 'e1s1'
> 2015-08-03 19:39:34,739 - DEBUG
> [org.springframework.webflow.definition.registry.FlowDefinitionRegistryImpl:5
> 8] - Getting FlowDefinition with id 'SAML2/Redirect/SSO'
> 2015-08-03 19:39:34,740 - DEBUG
> [org.springframework.webflow.definition.registry.FlowDefinitionRegistryImpl:5
> 8] - Getting FlowDefinition with id 'authn'
> 2015-08-03 19:39:34,740 - DEBUG
> [org.springframework.webflow.definition.registry.FlowDefinitionRegistryImpl:5
> 8] - Getting FlowDefinition with id 'authn/Password'
> 2015-08-03 19:39:34,740 - DEBUG
> [org.springframework.webflow.engine.impl.FlowExecutionImpl:250] - Resuming
> in org.springframework.webflow.mvc.servlet.MvcExternalContext at 604b7cf
> 2015-08-03 19:39:34,741 - DEBUG
> [org.springframework.webflow.mvc.view.AbstractMvcView:216] - Processing
> user event 'proceed'
> 2015-08-03 19:39:34,741 - DEBUG
> [org.springframework.webflow.mvc.view.AbstractMvcView:238] - No model to
> bind to; done processing user event
> 2015-08-03 19:39:34,741 - DEBUG
> [org.springframework.webflow.engine.ViewState:229] - Event 'proceed'
> returned from view [ServletMvcView at 1fbf7a1f view =
> org.springframework.web.servlet.view.velocity.VelocityView: name 'login'; URL
> [login.vm]]
> 2015-08-03 19:39:34,742 - DEBUG
> [org.springframework.webflow.engine.Transition:214] - Executing
> [Transition at 53ea9981 on = proceed, to =
> ExtractUsernamePasswordFromFormRequest]
> 
> --
> To unsubscribe from this list send an email to users-
> unsubscribe at shibboleth.net