Need to modify AuthnContextClassRef in ExternalAuth

Stefan Santesson stefan at aaa-sec.com
Tue Dec 22 11:07:17 EST 2015


This is what I get:

2015-12-22 17:02:03,585 - DEBUG [org.opensaml.storage.impl.client.PopulateClientStorageLoadContext:120] - Profile Action PopulateClientStorageLoadContext: ClientStorageServices requiring load: [shibboleth.ClientSessionStorageService, shibboleth.ClientPersistentStorageService]
2015-12-22 17:02:03,621 - DEBUG [org.opensaml.storage.impl.client.LoadClientStorageServices:203] - Profile Action LoadClientStorageServices: No cookie data present, initializing StorageService 'shibboleth.ClientSessionStorageService' to empty state
2015-12-22 17:02:03,622 - TRACE [org.opensaml.storage.impl.client.ClientStorageService:411] - StorageService shibboleth.ClientSessionStorageService: Initializing empty storage state into session
2015-12-22 17:02:03,623 - DEBUG [org.opensaml.storage.impl.client.LoadClientStorageServices:203] - Profile Action LoadClientStorageServices: No cookie data present, initializing StorageService 'shibboleth.ClientPersistentStorageService' to empty state
2015-12-22 17:02:03,624 - TRACE [org.opensaml.storage.impl.client.ClientStorageService:411] - StorageService shibboleth.ClientPersistentStorageService: Initializing empty storage state into session
2015-12-22 17:02:03,725 - DEBUG [org.opensaml.storage.AbstractMapBackedStorageService:283] - Read failed, context '8a06d680af9a424444405885f61dd34c8ada558bf1e9f34637811d1b66b50959' not found
2015-12-22 17:02:05,527 - INFO [net.shibboleth.idp.authn.impl.ValidateExternalAuthentication:107] - Profile Action ValidateExternalAuthentication: External authentication succeeded for Subject: [UsernamePrincipal{username=170001010017}, AuthnContextClassRefPrincipal{authnContextClassRef=http://id.elegnamnden.se/loa/1.0/loa3}]
2015-12-22 17:02:05,620 - ERROR [net.shibboleth.idp.authn:-2] - Uncaught runtime exception
net.shibboleth.utilities.java.support.logic.ConstraintViolationException: Storage object was not present in session
	at net.shibboleth.utilities.java.support.logic.Constraint.isNotNull(Constraint.java:227)
2015-12-22 17:02:05,626 - WARN [org.opensaml.profile.action.impl.LogEvent:76] - An error event occurred while processing the request: RuntimeException



Where we differ is that I get: Read failed, context '8a06d680af9a424444405885f61dd34c8ada558bf1e9f34637811d1b66b50959' not found

/Stefan





On 22/12/15 16:48, "users on behalf of Cantor, Scott" <users-bounces at shibboleth.net on behalf of cantor.2 at osu.edu> wrote:

>On 12/22/15, 10:43 AM, "users on behalf of Cantor, Scott" <users-bounces at shibboleth.net on behalf of cantor.2 at osu.edu> wrote:
>
>
>
>>On 12/22/15, 10:38 AM, "users on behalf of Cantor, Scott" <users-bounces at shibboleth.net on behalf of cantor.2 at osu.edu> wrote:
>>
>>>Logging isn't quite getting what I need yet, I think you'd need to add this:
>>>
>>><logger name="org.opensaml.storage" level="DEBUG"/>
>>
>>TRACE, actually.
>
>Here are the key log entries that should show up (the first and last line are just bounding the interesting ones related to initializing the storage state).
>
>If those show up and the error still manifests, then I think we're looking at a container imcompatibility, so my next question would be what the container is and whether this is real Java or not.
>
>-- Scott
>
>2015-12-22 10:44:12,247 - DEBUG [org.opensaml.saml.common.profile.impl.VerifyChannelBindings:154] - Profile Action VerifyChannelBindings: No channel bindings found to verify, nothing to do
>2015-12-22 10:44:12,252 - DEBUG [org.opensaml.storage.impl.client.PopulateClientStorageLoadContext:120] - Profile Action PopulateClientStorageLoadContext: ClientStorageServices requiring load: [shibboleth.ClientSessionStorageService, shibboleth.ClientPersistentStorageService]
>2015-12-22 10:44:12,254 - DEBUG [org.opensaml.storage.impl.client.LoadClientStorageServices:203] - Profile Action LoadClientStorageServices: No cookie data present, initializing StorageService 'shibboleth.ClientSessionStorageService' to empty state
>2015-12-22 10:44:12,255 - TRACE [org.opensaml.storage.impl.client.ClientStorageService:411] - StorageService shibboleth.ClientSessionStorageService: Initializing empty storage state into session
>2015-12-22 10:44:12,255 - DEBUG [org.opensaml.storage.impl.client.LoadClientStorageServices:203] - Profile Action LoadClientStorageServices: No cookie data present, initializing StorageService 'shibboleth.ClientPersistentStorageService' to empty state
>2015-12-22 10:44:12,256 - TRACE [org.opensaml.storage.impl.client.ClientStorageService:411] - StorageService shibboleth.ClientPersistentStorageService: Initializing empty storage state into session
>2015-12-22 10:44:12,257 - DEBUG [net.shibboleth.idp.saml.profile.impl.InitializeAuthenticationContext:115] - Profile Action InitializeAuthenticationContext: Created authentication context: AuthenticationContext{initiationInstant=2015-12-22T10:44:12.257-05:00, isPassive=false, forceAuthn=false, hintedName=null, potentialFlows=[], activeResults=[], attemptedFlow=null, signaledFlowId=null, authenticationStateMap={}, resultCacheable=true, initialAuthenticationResult=null, authenticationResult=null, completionInstant=1969-12-31T19:00:00.000-05:00}
>
>
>-- 
>To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net



More information about the users mailing list