Login jsp idpui for CAS

Mon Nov 2 12:08:59 EST 2015

Thanks Marvin,

The following is an excerpt from the idp-process.log in DEBUG, as requested.  I restarted our Jetty server, then I did a single SAML2 authentication using our testing SP (WTS-Staging1).  I then logged out and browse to our sample CAS protected URL.  The login page branding I am presented with is the UIInfo from the WTS-Staging1 SP.

The excerpt picks up just prior to the SP logout where the IdP locates the SP session to process the logout request…

One disclaimer…  I worked with scantor on a recent issue where we have a requirement to create a simple custom auth-flow (ours is called umt-netid).  The first action in our auth-flow is to call the native sub-flow ‘authn\Password’, which I understand is doing the login.jsp presentation.

2015-11-02 09:42:59,711 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedIdPSession:602] - Loading SPSession for service http://wts-staging1.ito.umt.edu/Shibboleth.sso in session 9a5efc82183364f401c77c366c5085b2b6374d6536bffb319c46bddfb0b36ca5
2015-11-02 09:42:59,711 - DEBUG [net.shibboleth.idp.session.SPSessionSerializerRegistry:86] - Registry located StorageSerializer of type 'net.shibboleth.idp.saml.session.impl.SAML2SPSessionSerializer' for SPSession type 'class net.shibboleth.idp.saml.session.SAML2SPSession'
2015-11-02 09:42:59,713 - DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.ProcessLogoutRequest:272] - Profile Action ProcessLogoutRequest: LogoutRequest matches IdP session 9a5efc82183364f401c77c366c5085b2b6374d6536bffb319c46bddfb0b36ca5
2015-11-02 09:42:59,714 - DEBUG [net.shibboleth.idp.session.impl.StorageBackedSessionManager:521] - Destroyed session 9a5efc82183364f401c77c366c5085b2b6374d6536bffb319c46bddfb0b36ca5
2015-11-02 09:42:59,718 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] - Profile Action PopulateAuditContext: Adding 1 value for field 'u'
2015-11-02 09:42:59,718 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] - Profile Action PopulateAuditContext: Adding 1 value for field 'n'
2015-11-02 09:42:59,718 - DEBUG [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile Action PopulateAuditContext: Skipping field 's' not included in audit format
2015-11-02 09:42:59,730 - ERROR [org.apache.velocity:96] - ResourceManager : unable to find resource 'logout.vm' in any resource loader.
2015-11-02 09:43:03,847 - DEBUG [net.shibboleth.idp.session.impl.PopulateSessionContext:131] - Profile Action PopulateSessionContext: No session found for client
2015-11-02 09:43:03,847 - DEBUG [net.shibboleth.idp.cas.service.PatternServiceRegistry:60] - Evaluating whether http://10.10.18.162:7080/cas-sample/j_spring_cas_security_check matches ^(http|https)://.*?
2015-11-02 09:43:03,847 - DEBUG [net.shibboleth.idp.cas.service.PatternServiceRegistry:62] - Found match
2015-11-02 09:43:03,847 - DEBUG [net.shibboleth.idp.cas.flow.BuildRelyingPartyContextAction:83] - Setting up RP context for verified relying party http://10.10.18.162:7080/cas-sample/j_spring_cas_security_check
2015-11-02 09:43:03,848 - DEBUG [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:284] - Resolving relying party configuration
2015-11-02 09:43:03,848 - DEBUG [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:305] - No relying party configurations are applicable, returning the default configuration shibboleth.DefaultRelyingParty
2015-11-02 09:43:03,848 - DEBUG [net.shibboleth.idp.profile.impl.SelectRelyingPartyConfiguration:136] - Profile Action SelectRelyingPartyConfiguration: Found relying party configuration shibboleth.DefaultRelyingParty for request
2015-11-02 09:43:03,848 - DEBUG [net.shibboleth.idp.cas.flow.CheckAuthenticationRequiredAction:82] - IdP session not found
2015-11-02 09:43:03,849 - DEBUG [net.shibboleth.idp.authn.impl.PopulateAuthenticationContext:125] - Profile Action PopulateAuthenticationContext: Installing custom PrincipalEvalPredicateFactoryRegistry into AuthenticationContext
2015-11-02 09:43:03,849 - DEBUG [net.shibboleth.idp.authn.impl.PopulateAuthenticationContext:158] - Profile Action PopulateAuthenticationContext: Installed 1 authentication flows into AuthenticationContext
2015-11-02 09:43:03,850 - DEBUG [net.shibboleth.idp.session.impl.PopulateSessionContext:131] - Profile Action PopulateSessionContext: No session found for client
2015-11-02 09:43:03,850 - DEBUG [net.shibboleth.idp.authn.impl.FilterFlowsByForcedAuthn:53] - Profile Action FilterFlowsByForcedAuthn: Request does not have forced authentication requirement, nothing to do
2015-11-02 09:43:03,850 - DEBUG [net.shibboleth.idp.authn.impl.FilterFlowsByPassivity:53] - Profile Action FilterFlowsByPassivity: Request does not have passive requirement, nothing to do
2015-11-02 09:43:03,851 - DEBUG [net.shibboleth.idp.authn.impl.FilterFlowsByNonBrowserSupport:53] - Profile Action FilterFlowsByNonBrowserSupport: Request does not have non-browser requirement, nothing to do
2015-11-02 09:43:03,851 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:241] - Profile Action SelectAuthenticationFlow: No specific Principals requested
2015-11-02 09:43:03,851 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:267] - Profile Action SelectAuthenticationFlow: No usable active results available, selecting an inactive flow
2015-11-02 09:43:03,852 - DEBUG [net.shibboleth.idp.authn.impl.SelectAuthenticationFlow:309] - Profile Action SelectAuthenticationFlow: Selecting inactive authentication flow authn/umt-netid
2015-11-02 09:43:03,852 - DEBUG [net.shibboleth.idp.authn.impl.ExtractUsernamePasswordFromBasicAuth:115] - Profile Action ExtractUsernamePasswordFromBasicAuth: No appropriate Authorization header found
2015-11-02 09:43:03,858 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:744] - Returning logo from UIInfo, 'en' (150 x 150) : https://www.umt.edu/templates/imx/idp_logo_test.png
2015-11-02 09:43:03,859 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:264] - Acceptable Scheme 'https', returning value 'https://www.umt.edu/templates/imx/idp_logo_test.png'
2015-11-02 09:43:03,859 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:310] - Returning name from UIInfo 'Staging 1 SP'
2015-11-02 09:43:03,859 - DEBUG [net.shibboleth.idp.ui.context.RelyingPartyUIContext:551] - Returning OrganizationDisplayName from Organization, University of Montana, WTS-Staging1

Thanks again for taking a look.  This is puzzling to me..

-Josh

From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Marvin Addison
Sent: Friday, October 30, 2015 7:29 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: Login jsp idpui for CAS

I am trying to gather more info on what is coming to the view via the RelyingPartyUIContext.
That would be helpful as well as idp-process.log excerpts with net.shibboleth.idp at DEBUG.

Thanks,
Marvin

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20151102/7a69c2ec/attachment-0001.html>