CAS and HTML local storage

[Mika Tiainen]

Hi,

I've been setting up CAS on our IDP v3.2.1. When idp.storage.htmlLocalStorage
is set, the initial request for CAS authentication fails with "An error
occurred: ServiceNotSpecified". Reopening the same URL gives login page and
everything works after that. Disabling HTML local storage makes the problem
disappear.

For a failed request log shows:

2016-05-26 12:51:00,749 - ERROR [net.shibboleth.utilities.java.support.security.DataSealer:181] - Exception unwrapping data
java.io.EOFException: null
        at java.io.DataInputStream.readFully(DataInputStream.java:197)
2016-05-26 12:51:00,751 - ERROR [org.opensaml.storage.impl.client.ClientStorageService:406] - StorageService shibboleth.ClientSessionStorageService: Exception unwrapping secured data net.shibboleth.utilities.java.support.security.DataSealerException: Exception unwrapping data
        at net.shibboleth.utilities.java.support.security.DataSealer.unwrap(DataSealer.java:182)
Caused by: java.io.EOFException: null
        at java.io.DataInputStream.readFully(DataInputStream.java:197)
2016-05-26 12:51:00,752 - ERROR [net.shibboleth.utilities.java.support.security.DataSealer:181] - Exception unwrapping data
java.io.EOFException: null
        at java.io.DataInputStream.readFully(DataInputStream.java:197)
2016-05-26 12:51:00,757 - ERROR [org.opensaml.storage.impl.client.ClientStorageService:406] - StorageService shibboleth.ClientPersistentStorageService: Exception unwrapping secured data
net.shibboleth.utilities.java.support.security.DataSealerException: Exception unwrapping data
        at net.shibboleth.utilities.java.support.security.DataSealer.unwrap(DataSealer.java:182)
Caused by: java.io.EOFException: null
        at java.io.DataInputStream.readFully(DataInputStream.java:197)
2016-05-26 12:51:00,759 - DEBUG [net.shibboleth.idp.session.impl.PopulateSessionContext:131] - Profile Action PopulateSessionContext: No session found for client
2016-05-26 12:51:00,763 - WARN [org.opensaml.profile.action.impl.LogEvent:76] - An error event occurred while processing the request: ServiceNotSpecified
2016-05-26 12:51:00,770 - INFO [Shibboleth-Audit.SSO:241] - 20160526T095100Z||||https://www.apereo.org/cas/protocol/login|||||||||

Where does ClientSessionStorageService come from? idp.session.StorageService
is shibboleth.MemcachedStorageService

-- 
Mika Tiainen
Saimaa University of Applied Sciences
IT services