need help with Shibboleth IDP 3.0 installation

[Hong Ye]

bash-4.1$ ls -l jdk/jre/lib/ext/
total 24004
-rw-r--r-- 1 shibadm shibadm  3860522 Sep 17 20:42 cldrdata.jar
-rw-r--r-- 1 shibadm shibadm     8286 Sep 17 20:42 dnsns.jar
-rw-r--r-- 1 shibadm shibadm 17257493 Sep 16 12:47 jfxrt.jar
-rw-r--r-- 1 shibadm shibadm  1179307 Sep 17 20:42 localedata.jar
-rw-r--r-- 1 shibadm shibadm     1227 Sep 17 20:42 meta-index
-rw-r--r-- 1 shibadm shibadm  1618833 Sep 17 20:42 nashorn.jar
-rw-r--r-- 1 shibadm shibadm    39773 Sep 17 20:42 sunec.jar
-rw-r--r-- 1 shibadm shibadm   278033 Sep 17 20:42 sunjce_provider.jar
-rw-r--r-- 1 shibadm shibadm   249280 Sep 17 20:42 sunpkcs11.jar
-rw-r--r-- 1 shibadm shibadm    68837 Sep 17 20:42 zipfs.jar

 jre/lib/security/java.security,

security.provider.1=sun.security.provider.Sun
security.provider.2=sun.security.rsa.SunRsaSign
security.provider.3=sun.security.ec.SunEC
security.provider.4=com.sun.net.ssl.internal.ssl.Provider
security.provider.5=com.sun.crypto.provider.SunJCE
security.provider.6=sun.security.jgss.SunProvider
security.provider.7=com.sun.security.sasl.Provider
security.provider.8=org.jcp.xml.dsig.internal.dom.XMLDSigRI
security.provider.9=sun.security.smartcardio.SunPCSC

On Jan 12, 2015, at 3:11 PM, Brent Putman <putmanb at georgetown.edu<mailto:putmanb at georgetown.edu>> wrote:


On 1/12/15 2:55 PM, Hong Ye wrote:


-bash-4.1$ /app/shibboleth/environment/jdk/bin/java -version
java version "1.8.0_25"
Java(TM) SE Runtime Environment (build 1.8.0_25-b17)
Java HotSpot(TM) 64-Bit Server VM (build 25.25-b02, mixed mode)




Ok.  I'm still baffled.  I don't offhand see anything wrong with the way Tomcat is running.

Basically, the way it's behaving, it's like either 1) it's not picking up the JCA security provider jars in jre/lib/ext or 2) the security providers aren't being registered at runtime, so they're not available.

Re: 1:  can you confirm the contents of the JDK's jre/lib/ext (post a file list)?

Re: 2:  can you confirm the contents of the JDK's jre/lib/security/java.security, specifically the 'security.provider.N' lines?


Unless you've deliberately changed something there, it should work. But it's not working... so it can't hurt to check the obvious.






--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150112/be27b5b2/attachment-0001.html