need help with Shibboleth IDP 3.0 installation

[Hong Ye]

bash-4.1$ ./bin/seckeygen.sh --storefile credentials/sealer.jks  --storepass password --versionfile credentials/sealer.kver --alias secret
bash: ./bin/seckeygen.sh: /bin/bash^M: bad interpreter: No such file or directory

After I removed the extra ^M in the script, I got

./bin/seckeygen.sh --storefile credentials/sealer.jks  --storepass password --versionfile credentials/sealer.kver --alias secret
Exception in thread "main" java.io.IOException: Keystore was tampered with, or password was incorrect
at com.sun.crypto.provider.JceKeyStore.engineLoad(JceKeyStore.java:865)
at java.security.KeyStore.load(KeyStore.java:1433)
at net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategyTool.changeKey(BasicKeystoreKeyStrategyTool.java:150)
at net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategyTool.main(BasicKeystoreKeyStrategyTool.java:227)

I don’t know if this matters, the first time when I ran install.sh, I was prompted to enter the password for sealer(don’t remember exactly what it was called, the value was set in idp.sealer.storePassword and idp.sealer.keypaasword in idp.properites). Somehow I ran install.sh again. The second time, it didn’t prompt me to enter the password for sealer.

Tomcat is running under Java 8
-bash-4.1$ ps -ef | grep java
root     25992     1  1 14:37 pts/0    00:00:14 /app/shibboleth/environment/jdk/bin/java -Djava.util.logging.config.file=/app/shibboleth/environment/tomcat/conf/logging.properties -Djava.util.logging.manager=org.apache.juli.ClassLoaderLogManager -noverify -Djava.ext.dirs=/app/shibboleth/environment/jdk/lib/ext -server -verbose:gc -Xloggc:/app/log/shibboleth/tomcat/gc.log -Xms2G -Xmx2G -XX:PermSize=1024M -XX:MaxPermSize=1024M -Djava.awt.headless=true -XX:+DisableExplicitGC -XX:+UseParallelOldGC -Didp.home=/app/shibboleth/shibboleth-idp -Djava.endorsed.dirs=/app/shibboleth/environment/tomcat/endorsed -classpath /app/shibboleth/environment/tomcat/bin/bootstrap.jar:/app/shibboleth/environment/tomcat/bin/tomcat-juli.jar -Dcatalina.base=/app/shibboleth/environment/tomcat -Dcatalina.home=/app/shibboleth/environment/tomcat -Djava.io.tmpdir=/app/shibboleth/environment/tomcat/temp org.apache.catalina.startup.Bootstrap start

-bash-4.1$ /app/shibboleth/environment/jdk/bin/java -version
java version "1.8.0_25"
Java(TM) SE Runtime Environment (build 1.8.0_25-b17)
Java HotSpot(TM) 64-Bit Server VM (build 25.25-b02, mixed mode)

Hong

On Jan 12, 2015, at 2:07 PM, Cantor, Scott <cantor.2 at osu.edu<mailto:cantor.2 at osu.edu>> wrote:

I had tomcat 8.0.15 downloaded from Apache.

That takes us back to "no idea what this box is doing" but whatever it is will turn out to be a breaking issue to document.

Assuming the keystore is actually present (it really shouldn't be I guess), try running bin/seckeygen.sh as described in https://wiki.shibboleth.net/confluence/display/IDP30/SecretKeyManagement

That should presumably fail with a similar error. If not and it updates the key version file to boot, that says that the Java runtime from the command line (and when the installer ran) is somehow different from Tomcat's.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150112/08637f36/attachment.html