Shibboleth IdP v3 multiple entityID config question

[bleb1982]

We are also trying to get our IdP 3.0 to work similarly to this post. 

In the relying-party.xml we have this override configured. If we do NOT have
the p:responderId parameter in here things start up and work just fine.
However, as soon as we add the  p:responderId in there we get errors when
starting up (error message below). Per this thread, it seemed that we could
easily just add responderId to the override and it should work. Is there
some other configuration that I am missing?

<util:list id="shibboleth.RelyingPartyOverrides">
    <bean parent="RelyingPartyByName" c:relyingPartyIds="idporgssoconfig">
      <property name="profileConfigurations">
        <list>
          <bean parent="SAML2.SSO" p:encryptAssertions="false"
p:encryptNameIDs="false" p:signAssertions="false" p:signResponses="true"
p:resolveAttributes="true" p:assertionLifetime="PT5M0.000S"
p:includeAttributeStatement="true" p:includeConditionsNotBefore="true"
p:responderId="https://idp-a.example.org" />
        </list>
      </property>
    </bean>
</util:list>

IDP-PROCESS.log
============================
INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/home/rhenninger/IdP/system/conf/relying-party-system.xml]
2016-11-29 10:22:57,235 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:577]
- Refreshing ApplicationContext:shibboleth.relying-partyResolverService:
startup date [Tue Nov 29 10:22:57 EST 2016]; parent: Root
WebApplicationContext
2016-11-29 10:22:57,538 - WARN
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:545]
- Exception encountered during context initialization - cancelling refresh
attempt: org.springframework.beans.factory.BeanCreationException: Error
creating bean with name 'shibboleth.relying-partyOverrides': Cannot create
inner bean 'relying-partyByName$child#379df7c0' of type
[net.shibboleth.idp.saml.relying-party.impl.relying-partyConfigurationSupport]
while setting bean property 'sourceList' with key [0]; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating bean
with name 'relying-partyByName$child#379df7c0' defined in file
[/home/rhenninger/IdP/work/relying-party.xml]: Cannot create inner bean
'SAML2.SSO$child#3ad2b73f' of type
[net.shibboleth.idp.saml.saml2.profile.config.BrowserSSOProfileConfiguration]
while setting bean property 'profileConfigurations' with key [0]; nested
exception is org.springframework.beans.factory.BeanCreationException: Error
creating bean with name 'SAML2.SSO$child#3ad2b73f' defined in file
[/home/rhenninger/IdP/work/relying-party.xml]: Error setting property
values; nested exception is
org.springframework.beans.NotWritablePropertyException: Invalid property
'responderId' of bean class
[net.shibboleth.idp.saml.saml2.profile.config.BrowserSSOProfileConfiguration]:
Bean property 'responderId' is not writable or has an invalid setter method.
Does the parameter type of the setter match the return type of the getter?
2016-11-29 10:22:57,553 - ERROR
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:181]
- Service 'shibboleth.relying-partyResolverService': Initial load failed
net.shibboleth.utilities.java.support.service.ServiceException:
org.springframework.beans.factory.BeanCreationException: Error creating bean
with name 'shibboleth.relying-partyOverrides': Cannot create inner bean
'relying-partyByName$child#379df7c0' of type
[net.shibboleth.idp.saml.relying-party.impl.relying-partyConfigurationSupport]
while setting bean property 'sourceList' with key [0]; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating bean
with name 'relying-partyByName$child#379df7c0' defined in file
[/home/rhenninger/IdP/work/relying-party.xml]: Cannot create inner bean
'SAML2.SSO$child#3ad2b73f' of type
[net.shibboleth.idp.saml.saml2.profile.config.BrowserSSOProfileConfiguration]
while setting bean property 'profileConfigurations' with key [0]; nested
exception is org.springframework.beans.factory.BeanCreationException: Error
creating bean with name 'SAML2.SSO$child#3ad2b73f' defined in file
[/home/rhenninger/IdP/work/relying-party.xml]: Error setting property
values; nested exception is
org.springframework.beans.NotWritablePropertyException: Invalid property
'responderId' of bean class
[net.shibboleth.idp.saml.saml2.profile.config.BrowserSSOProfileConfiguration]:
Bean property 'responderId' is not writable or has an invalid setter method.
Does the parameter type of the setter match the return type of the getter?
                at
net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:334)
Caused by: org.springframework.beans.factory.BeanCreationException: Error
creating bean with name 'shibboleth.relying-partyOverrides': Cannot create
inner bean 'relying-partyByName$child#379df7c0' of type
[net.shibboleth.idp.saml.relying-party.impl.relying-partyConfigurationSupport]
while setting bean property 'sourceList' with key [0]; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating bean
with name 'relying-partyByName$child#379df7c0' defined in file
[/home/rhenninger/IdP/work/relying-party.xml]: Cannot create inner bean
'SAML2.SSO$child#3ad2b73f' of type
[net.shibboleth.idp.saml.saml2.profile.config.BrowserSSOProfileConfiguration]
while setting bean property 'profileConfigurations' with key [0]; nested
exception is org.springframework.beans.factory.BeanCreationException: Error
creating bean with name 'SAML2.SSO$child#3ad2b73f' defined in file
[/home/rhenninger/IdP/work/relying-party.xml]: Error setting property
values; nested exception is
org.springframework.beans.NotWritablePropertyException: Invalid property
'responderId' of bean class
[net.shibboleth.idp.saml.saml2.profile.config.BrowserSSOProfileConfiguration]:
Bean property 'responderId' is not writable or has an invalid setter method.
Does the parameter type of the setter match the return type of the getter?
                at
org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveInnerBean(BeanDefinitionValueResolver.java:313)
Caused by: org.springframework.beans.factory.BeanCreationException: Error
creating bean with name 'relying-partyByName$child#379df7c0' defined in file
[/home/rhenninger/IdP/work/relying-party.xml]: Cannot create inner bean
'SAML2.SSO$child#3ad2b73f' of type
[net.shibboleth.idp.saml.saml2.profile.config.BrowserSSOProfileConfiguration]
while setting bean property 'profileConfigurations' with key [0]; nested
exception is org.springframework.beans.factory.BeanCreationException: Error
creating bean with name 'SAML2.SSO$child#3ad2b73f' defined in file
[/home/rhenninger/IdP/work/relying-party.xml]: Error setting property
values; nested exception is
org.springframework.beans.NotWritablePropertyException: Invalid property
'responderId' of bean class
[net.shibboleth.idp.saml.saml2.profile.config.BrowserSSOProfileConfiguration]:
Bean property 'responderId' is not writable or has an invalid setter method.
Does the parameter type of the setter match the return type of the getter?
                at
org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveInnerBean(BeanDefinitionValueResolver.java:313)
Caused by: org.springframework.beans.factory.BeanCreationException: Error
creating bean with name 'SAML2.SSO$child#3ad2b73f' defined in file
[/home/rhenninger/IdP/work/relying-party.xml]: Error setting property
values; nested exception is
org.springframework.beans.NotWritablePropertyException: Invalid property
'responderId' of bean class
[net.shibboleth.idp.saml.saml2.profile.config.BrowserSSOProfileConfiguration]:
Bean property 'responderId' is not writable or has an invalid setter method.
Does the parameter type of the setter match the return type of the getter?
                at
org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1518)
Caused by: org.springframework.beans.NotWritablePropertyException: Invalid
property 'responderId' of bean class
[net.shibboleth.idp.saml.saml2.profile.config.BrowserSSOProfileConfiguration]:
Bean property 'responderId' is not writable or has an invalid setter method.
Does the parameter type of the setter match the return type of the getter?
                at
org.springframework.beans.BeanWrapperImpl.createNotWritablePropertyException(BeanWrapperImpl.java:231)
2016-11-29 10:22:57,554 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:183]
- Service 'shibboleth.relying-partyResolverService': Continuing to poll
configuration
2016-11-29 10:22:57,555 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:199]
- Service 'shibboleth.relying-partyResolverService': Reload time set to:
900000, starting refresh thread
2016-11-29 10:22:57,581 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:172]
- Service 'shibboleth.MetadataResolverService': Performing initial load
=======================================================

Finally is there a way to set the signing certificate to be used for an
override?



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Shibboleth-IdP-v3-multiple-entityID-config-question-tp7615143p7629834.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.