Not able to log on to Webex

[An H Nguyen]

I need to resolve this error. It is Shibboleth IDP v3

2016-01-20 10:10:12,640 - ERROR
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:231]
- Service 'shibboleth.NameIdentifierGenerationService': Reload for
shibboleth.NameIdentifierGenerationService failed
net.shibboleth.utilities.java.support.service.ServiceException:
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name
'net.shibboleth.idp.saml.nameid.impl.NameIdentifierGenerationServiceImpl#0'
defi
ned in file [/opt/shibboleth-idp/system/conf/saml-nameid-system.xml]:
Cannot create inner bean
'org.opensaml.saml.saml1.profile.impl.ChainingSAML1NameIdentifierGenerator#62f9a41d'
of type [org.opensaml.saml.saml1.profile.impl.Chain
ingSAML1NameIdentifierGenerator] while setting bean property
'SAML1NameIdentifierGenerator'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'org.opensaml.saml.saml1.profil
e.impl.ChainingSAML1NameIdentifierGenerator#62f9a41d' defined in file
[/opt/shibboleth-idp/system/conf/saml-nameid-system.xml]: Cannot resolve
reference to bean 'shibboleth.SAML1NameIdentifierGenerators' while setting
bean property
 'generators'; nested exception is
org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean
named 'shibboleth.SAML1NameIdentifierGenerators' is defined
        at
net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:334)
Caused by: org.springframework.beans.factory.BeanCreationException: Error
creating bean with name
'net.shibboleth.idp.saml.nameid.impl.NameIdentifierGenerationServiceImpl#0'
defined in file [/opt/shibboleth-idp/system/conf/saml-nam
eid-system.xml]: Cannot create inner bean
'org.opensaml.saml.saml1.profile.impl.ChainingSAML1NameIdentifierGenerator#62f9a41d'
of type
[org.opensaml.saml.saml1.profile.impl.ChainingSAML1NameIdentifierGenerator]
while setting bean p
roperty 'SAML1NameIdentifierGenerator'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name
'org.opensaml.saml.saml1.profile.impl.ChainingSAML1NameIdentifierGenerator#62f9a41d'
 defined in file [/opt/shibboleth-idp/system/conf/saml-nameid-system.xml]:
Cannot resolve reference to bean 'shibboleth.SAML1NameIdentifierGenerators'
while setting bean property 'generators'; nested exception is
org.springframewor
k.beans.factory.NoSuchBeanDefinitionException: No bean named
'shibboleth.SAML1NameIdentifierGenerators' is defined
        at
org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveInnerBean(BeanDefinitionValueResolver.java:313)
Caused by: org.springframework.beans.factory.BeanCreationException: Error
creating bean with name
'org.opensaml.saml.saml1.profile.impl.ChainingSAML1NameIdentifierGenerator#62f9a41d'
defined in file [/opt/shibboleth-idp/system/conf/saml-nameid-system.xml]:
Cannot resolve reference to bean 'shibboleth.SAML1NameIdentifierGenerators'
while setting bean property 'generators'; nested exception is
org.springframework.beans.factory.NoSuchBeanDefinitionException: No bean
named 'shibboleth.SAML1NameIdentifierGenerators' is defined
        at
org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:359)
Caused by: org.springframework.beans.factory.NoSuchBeanDefinitionException:
No bean named 'shibboleth.SAML1NameIdentifierGenerators' is defined
        at
org.springframework.beans.factory.support.DefaultListableBeanFactory.getBeanDefinition(DefaultListableBeanFactory.java:687)


On Tue, Jan 19, 2016 at 11:43 AM, An H Nguyen <an.h.nguyen at sjsu.edu> wrote:

> My IDP v3 is able to authenticate with AD but I have this error with Webex
> SAML2 authentication:
>
> SAML2AuthService?
> *User Authentication Failed*
> *Reason:  *SSO protocol error (1)
>
>
> From idp-process.log:
> =========================
>
> 2016-01-19 11:25:25,399 - DEBUG
> [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:175]
> - Profile Action AddAttributeStatementToAssertion: Attempting to encode
> attribute WebExLastName as a SAML 2 Attribute
> 2016-01-19 11:25:25,399 - DEBUG
> [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:187]
> - Profile Action AddAttributeStatementToAssertion: Encoding attribute
> WebExLastName as a SAML 2 Attribute
> 2016-01-19 11:25:25,399 - DEBUG
> [net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:154]
> - Beginning to encode attribute WebExLastName
> 2016-01-19 11:25:25,400 - DEBUG
> [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:73] -
> Encoding value Nguyen of attribute WebExLastName
> 2016-01-19 11:25:25,400 - DEBUG
> [net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:191]
> - Completed encoding 1 values for attribute WebExLastName
> 2016-01-19 11:25:25,400 - DEBUG
> [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:175]
> - Profile Action AddAttributeStatementToAssertion: Attempting to encode
> attribute WebExEmail as a SAML 2 Attribute
> 2016-01-19 11:25:25,400 - DEBUG
> [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:187]
> - Profile Action AddAttributeStatementToAssertion: Encoding attribute
> WebExEmail as a SAML 2 Attribute
> 2016-01-19 11:25:25,400 - DEBUG
> [net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:154]
> - Beginning to encode attribute WebExEmail
> 2016-01-19 11:25:25,401 - DEBUG
> [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:73] -
> Encoding value an.h.nguyen at gtest.sjsu.edu of attribute WebExEmail
> 2016-01-19 11:25:25,401 - DEBUG
> [net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:191]
> - Completed encoding 1 values for attribute WebExEmail
> 2016-01-19 11:25:25,401 - DEBUG
> [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:175]
> - Profile Action AddAttributeStatementToAssertion: Attempting to encode
> attribute emailNameID as a SAML 2 Attribute
> 2016-01-19 11:25:25,401 - DEBUG
> [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:201]
> - Profile Action AddAttributeStatementToAssertion: Attribute emailNameID
> did not have a usable SAML 2 Attribute encoder associated with it, nothing
> to do
> 2016-01-19 11:25:25,402 - DEBUG
> [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:175]
> - Profile Action AddAttributeStatementToAssertion: Attempting to encode
> attribute WebExFirstName as a SAML 2 Attribute
> 2016-01-19 11:25:25,402 - DEBUG
> [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:187]
> - Profile Action AddAttributeStatementToAssertion: Encoding attribute
> WebExFirstName as a SAML 2 Attribute
> 2016-01-19 11:25:25,402 - DEBUG
> [net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:154]
> - Beginning to encode attribute WebExFirstName
> 2016-01-19 11:25:25,402 - DEBUG
> [net.shibboleth.idp.saml.attribute.encoding.SAMLEncoderSupport:73] -
> Encoding value An of attribute WebExFirstName
> 2016-01-19 11:25:25,403 - DEBUG
> [net.shibboleth.idp.saml.attribute.encoding.AbstractSAMLAttributeEncoder:191]
> - Completed encoding 1 values for attribute WebExFirstName
> 2016-01-19 11:25:25,403 - DEBUG
> [net.shibboleth.idp.saml.saml2.profile.impl.AddAttributeStatementToAssertion:117]
> - Profile Action AddAttributeStatementToAssertion: Adding constructed
> AttributeStatement to Assertion _99bfa4fbcd3303a85ad3a446ff9e6bc7
> 2016-01-19 11:25:25,405 - DEBUG
> [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:100]
> - Configuration specifies the following formats:
> [urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress]
> 2016-01-19 11:25:25,405 - DEBUG
> [net.shibboleth.idp.saml.profile.logic.DefaultNameIdentifierFormatStrategy:121]
> - Filtered non-metadata-supported formats from configured formats, leaving:
> [urn:oasis:names:tc:SAML:2.0:nameid-format:emailAddress]
> 2016-01-19 11:25:25,405 - DEBUG
> [net.shibboleth.idp.saml.nameid.impl.LegacyNameIdentifierGenerator:151] -
> Unable to obtain name identifier from legacy attribute encoders
> 2016-01-19 11:25:25,408 - DEBUG
> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
> Action PopulateAuditContext: Skipping field 'f' not included in audit format
> 2016-01-19 11:25:25,408 - DEBUG
> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
> Action PopulateAuditContext: Skipping field 'd' not included in audit format
> 2016-01-19 11:25:25,408 - DEBUG
> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
> Action PopulateAuditContext: Skipping field 't' not included in audit format
> 2016-01-19 11:25:25,408 - DEBUG
> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] - Profile
> Action PopulateAuditContext: Adding 1 value for field 'ac'
> 2016-01-19 11:25:25,409 - DEBUG
> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:206] - Profile
> Action PopulateAuditContext: Adding 1 value(s) for field 'i'
> 2016-01-19 11:25:25,409 - DEBUG
> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
> Action PopulateAuditContext: Skipping field 'x' not included in audit format
> 2016-01-19 11:25:25,424 - DEBUG
> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
> Action PopulateAuditContext: Skipping field 'II' not included in audit
> format
> 2016-01-19 11:25:25,424 - DEBUG
> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
> Action PopulateAuditContext: Skipping field 'SS' not included in audit
> format
> 2016-01-19 11:25:25,425 - DEBUG
> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] - Profile
> Action PopulateAuditContext: Adding 1 value for field 'u'
> 2016-01-19 11:25:25,425 - DEBUG
> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
> Action PopulateAuditContext: Skipping field 's' not included in audit format
> 2016-01-19 11:25:25,425 - DEBUG
> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
> Action PopulateAuditContext: Skipping field 'S' not included in audit format
> 2016-01-19 11:25:25,425 - DEBUG
> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
> Action PopulateAuditContext: Skipping field 'DD' not included in audit
> format
> 2016-01-19 11:25:25,426 - DEBUG
> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:206] - Profile
> Action PopulateAuditContext: Adding 6 value(s) for field 'attr'
> 2016-01-19 11:25:25,426 - DEBUG
> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] - Profile
> Action PopulateAuditContext: Skipping field 'SM' not included in audit
> format
> 2016-01-19 11:25:25,426 - DEBUG
> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] - Profile
> Action PopulateAuditContext: Adding 1 value for field 'bb'
> 2016-01-19 11:25:25,426 - DEBUG
> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] - Profile
> Action PopulateAuditContext: Adding 1 value for field 'III'
> 2016-01-19 11:25:25,428 - DEBUG
> [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:159] -
> Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of
> type 'org.opensaml.messaging.handler.impl.BasicMessageHandlerChain' on
> OUTBOUND message context
> 2016-01-19 11:25:25,429 - DEBUG
> [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] -
> Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on
> message context containing a message of type
> 'org.opensaml.saml.saml2.core.impl.ResponseImpl'
> 2016-01-19 11:25:25,441 - DEBUG
> [net.shibboleth.idp.saml.profile.impl.SpringAwareMessageEncoderFactory:100]
> - Looking up message encoder based on binding URI:
> urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST
>
>
>
> --
> Thanks,
> - - - - - - - - - - - -
> An H. Nguyen
> SJSU Computing Systems Analyst
>



-- 
Thanks,
- - - - - - - - - - - -
An H. Nguyen
SJSU Computing Systems Analyst
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160120/49d4a78a/attachment-0001.html>