IdPv3 jetty9 back-channel setup help needed

Francesco Malvezzi francesco.malvezzi at unimore.it
Wed Jan 21 08:03:32 EST 2015


Hi all,

Having tried it hard for a couple of days, I have to admit I am unable
to setup correctly a IdPv3 with jetty 9.2, java 1.8, Debian GNU/Linux.

The problem is attribute authority which always fails as if payload
would be empty:

2015-01-21 13:39:32,685 - ERROR
[org.opensaml.messaging.decoder.servlet.BaseHttpServletRequestXMLMessageDecoder:151]
- Error unmarshalling message from input stream
net.shibboleth.utilities.java.support.xml.XMLParserException: Unable to
parse inputstream, it contained invalid XML
	at
net.shibboleth.utilities.java.support.xml.BasicParserPool.parse(BasicParserPool.java:240)
Caused by: org.xml.sax.SAXParseException: Fine del file anticipata.
	at
com.sun.org.apache.xerces.internal.parsers.DOMParser.parse(DOMParser.java:257)
2015-01-21 13:39:32,691 - ERROR
[org.opensaml.profile.action.impl.DecodeMessage:73] - Profile Action
DecodeMessage: Unable to decode incoming request
org.opensaml.messaging.decoder.MessageDecodingException: Error
unmarshalling message from input stream
	at
org.opensaml.messaging.decoder.servlet.BaseHttpServletRequestXMLMessageDecoder.unmarshallMessage(BaseHttpServletRequestXMLMessageDecoder.java:152)
Caused by: net.shibboleth.utilities.java.support.xml.XMLParserException:
Unable to parse inputstream, it contained invalid XML
	at
net.shibboleth.utilities.java.support.xml.BasicParserPool.parse(BasicParserPool.java:240)
Caused by: org.xml.sax.SAXParseException: Fine del file anticipata.
	at
com.sun.org.apache.xerces.internal.parsers.DOMParser.parse(DOMParser.java:257)

So client receives a fairly generic error:
<?xml version="1.0" encoding="UTF-8"?>
<soap11:Envelope
xmlns:soap11="http://schemas.xmlsoap.org/soap/envelope/"><soap11:Body><saml1p:Response
IssueInstant="2015-01-21T13:01:00.089Z" MajorVersion="1"
MinorVersion="1" ResponseID="_38eccc266c6810ea4aa38fe083a62e85"
xmlns:saml1p="urn:oasis:names:tc:SAML:1.0:protocol"><saml1p:Status><saml1p:StatusCode
Value="saml1p:Requester"/><saml1p:StatusMessage>An error
occurred.</saml1p:StatusMessage></saml1p:Status></saml1p:Response></soap11:Body></soap11:Envelope>

jetty-base is the jetty-base dir in the idp unzipped source.

In jetty-base I modified only a few properties about the back-channel
port, and about back-channel keystore (location, password and so like).

Naively, I suspect it's something connected to jetty9-dta-ssl-1.0.0.jar,
but I can't have any logline about: net.shibboleth.utilities.jetty9, nor
in shib logs, neither in jetty logs.

Whence should I start to pinpoint my error?

Do you need a log of the installing procedure? Or some of the
configuration files?

The attribute request client command (curl) does work if the target is
idpv2.

Thank you in advance for your time,

Francesco


More information about the users mailing list