IDP troubleshooting

Doug Tomer dtomer at allegheny.edu
Thu May 12 13:58:24 EDT 2016 

Thanks for the reply.  Here's the version info and the error from the
idp-process.log.  Please let me know if there's anything else I can provide
or steps to take to help troubleshoot.


shibboleth-identityprovider version 2.4.4

13:50:45.565 - ERROR
[edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet:154]
- Unable to redirect to login page.
org.apache.jasper.JasperException: Unable to compile class for JSP:

An error occurred at line: 1 in the generated java file
The type java.io.ObjectInputStream cannot be resolved. It is indirectly
referenced from required .class files

Stacktrace:
        at
org.apache.jasper.compiler.DefaultErrorHandler.javacError(DefaultErrorHandler.java:92)
~[jasper-6.0.24.jar:na]
        at
org.apache.jasper.compiler.ErrorDispatcher.javacError(ErrorDispatcher.java:330)
~[jasper-6.0.24.jar:na]
        at
org.apache.jasper.compiler.JDTCompiler.generateClass(JDTCompiler.java:439)
~[jasper-6.0.24.jar:na]
        at org.apache.jasper.compiler.Compiler.compile(Compiler.java:334)
~[jasper-6.0.24.jar:na]
        at org.apache.jasper.compiler.Compiler.compile(Compiler.java:312)
~[jasper-6.0.24.jar:na]
        at org.apache.jasper.compiler.Compiler.compile(Compiler.java:299)
~[jasper-6.0.24.jar:na]
        at
org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:589)
~[jasper-6.0.24.jar:na]
        at
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:317)
~[jasper-6.0.24.jar:na]
        at
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:313)
~[jasper-6.0.24.jar:na]
        at
org.apache.jasper.servlet.JspServlet.service(JspServlet.java:260)
~[jasper-6.0.24.jar:na]
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:723)
[tomcat6-servlet-2.5-api-6.0.24.jar:na]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
[catalina-6.0.24.jar:na]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina-6.0.24.jar:na]
        at
org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:646)
~[catalina-6.0.24.jar:na]
        at
org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:436)
~[catalina-6.0.24.jar:na]
        at
org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:374)
~[catalina-6.0.24.jar:na]
        at
org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302)
~[catalina-6.0.24.jar:na]
        at
edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet.redirectToLoginPage(UsernamePasswordLoginServlet.java:149)
[shibboleth-identityprovider-2.4.0.jar:na]
        at
edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet.service(UsernamePasswordLoginServlet.java:118)
[shibboleth-identityprovider-2.4.0.jar:na]
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:723)
[tomcat6-servlet-2.5-api-6.0.24.jar:na]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
[catalina-6.0.24.jar:na]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina-6.0.24.jar:na]
        at
edu.internet2.middleware.shibboleth.idp.util.NoCacheFilter.doFilter(NoCacheFilter.java:50)
[shibboleth-identityprovider-2.4.0.jar:na]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
[catalina-6.0.24.jar:na]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina-6.0.24.jar:na]
        at
edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilter(IdPSessionFilter.java:87)
[shibboleth-identityprovider-2.4.0.jar:na]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
[catalina-6.0.24.jar:na]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina-6.0.24.jar:na]
        at
edu.internet2.middleware.shibboleth.common.log.SLF4JMDCCleanupFilter.doFilter(SLF4JMDCCleanupFilter.java:52)
[shibboleth-common-1.4.0.jar:na]
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
[catalina-6.0.24.jar:na]
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
[catalina-6.0.24.jar:na]
        at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
[catalina-6.0.24.jar:na]
        at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
[catalina-6.0.24.jar:na]
        at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
[catalina-6.0.24.jar:na]
        at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
[catalina-6.0.24.jar:na]
        at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
[catalina-6.0.24.jar:na]
        at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:299)
[catalina-6.0.24.jar:na]
        at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:857)
[tomcat-coyote-6.0.24.jar:na]
        at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:588)
[tomcat-coyote-6.0.24.jar:na]
        at
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
[tomcat-coyote-6.0.24.jar:na]
        at java.lang.Thread.run(Thread.java:745) [na:1.8.0_91]

On Thu, May 12, 2016 at 10:56 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > Our idp/Authn/UserPassword page is not working this morning.  I made a
> > change to add the departmentNumber to attribute-filter.xml and attribute-
> > resolver.xml on Monday, but system was working fine afterwards.  A cron
> > job to yum updates from Red Hat updated several packages on Wednesday
> > at 4am, including tomcat.  I was not aware of any issues until today.
> Any help
> > on how to troubleshoot our issue would be greatly appreciated.
>
> Updating a Java container unattended is tantamount to intentionally
> breaking your IdP. Even using a packaged container is a horrible idea in
> practice based on my observations, but you certainly can't silently update
> it without any oversight.
>
> In any case, you gave no indication of the versions involved or any logs
> or decsriptions of the error.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160512/b8119995/attachment.html>

More information about the users mailing list