Exceptions for iOS and O365

[Christopher Bongaarts]

We're getting reports that iOS users trying to use Office365 are getting 
errors essentially identical to that in IDP-720:

2016-09-16 17:19:47,774 - ERROR [org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder:175] - Error invoking Velocity template
java.nio.channels.ClosedChannelException: null
	at org.eclipse.jetty.util.IteratingCallback.close(IteratingCallback.java:427)

2016-09-16 17:19:47,778 - ERROR [org.opensaml.profile.action.impl.EncodeMessage:159] - Profile Action EncodeMessage: Unable to encode outbound response
org.opensaml.messaging.encoder.MessageEncodingException: Error creating output document
	at org.opensaml.saml.saml2.binding.encoding.impl.HTTPPostEncoder.postEncode(HTTPPostEncoder.java:176)
Caused by: java.nio.channels.ClosedChannelException: null
	at org.eclipse.jetty.util.IteratingCallback.close(IteratingCallback.java:427)

2016-09-16 17:19:47,779 - ERROR [java.lang.RuntimeException:76] -
java.lang.RuntimeException: java.lang.IllegalStateException: You can only resume paused view states, and state [EndState at 2cd4c0e1 id = 'ErrorView', flow = 'SAML2/POST/SSO', entryActionList = list[[AnnotatedAction at 62fade02 targetAction = [EvaluateAction at 4c346cb0 expression = environment, resultExpression = requestScope.environment], attributes = map[[empty]]], [AnnotatedAction at 18648888 targetAction = [EvaluateAction at 123d80ad expression = opensamlProfileRequestContext, resultExpression = requestScope.profileRequestContext], attributes = map[[empty]]], [AnnotatedAction at 26034626 targetAction = [EvaluateAction at 49bdffba expression = T(net.shibboleth.utilities.java.support.codec.HTMLEncoder), resultExpression = requestScope.encoder], attributes = map[[empty]]], [AnnotatedAction at 75210ecd targetAction = [EvaluateAction at be7d02c expression = flowRequestContext.getExternalContext().getNativeRequest(), resultExpression = requestScope.request], attributes = map[[empty]]], [AnnotatedAction at 37e98500 targetAction = [EvaluateAction at 118ffc68 expression = flowRequestContext.getExternalContext().getNativeResponse(), resultExpression = requestScope.response], attributes = map[[empty]]], [AnnotatedAction at 6ca5dff2 targetAction = [EvaluateAction at 597614fa expression = flowRequestContext.getActiveFlow().getApplicationContext().containsBean('shibboleth.CustomViewContext') ? flowRequestContext.getActiveFlow().getApplicationContext().getBean('shibboleth.CustomViewContext') : null, resultExpression = requestScope.custom], attributes = map[[empty]]]], exceptionHandlerSet = list[net.shibboleth.idp.profile.impl.RethrowingFlowExecutionExceptionHandler at 224c5b51], finalResponseAction = org.springframework.webflow.action.ViewFactoryActionAdapter at 239106b0, outputMapper = [null]] is not a view state - programmer error
	at net.shibboleth.idp.profile.impl.RethrowingFlowExecutionExceptionHandler.handle(RethrowingFlowExecutionExceptionHandler.java:40)
Caused by: java.lang.IllegalStateException: You can only resume paused view states, and state [EndState at 2cd4c0e1 id = 'ErrorView', flow = 'SAML2/POST/SSO', entryActionList = list[[AnnotatedAction at 62fade02 targetAction = [EvaluateAction at 4c346cb0 expression = environment, resultExpression = requestScope.environment], attributes = map[[empty]]], [AnnotatedAction at 18648888 targetAction = [EvaluateAction at 123d80ad expression = opensamlProfileRequestContext, resultExpression = requestScope.profileRequestContext], attributes = map[[empty]]], [AnnotatedAction at 26034626 targetAction = [EvaluateAction at 49bdffba expression = T(net.shibboleth.utilities.java.support.codec.HTMLEncoder), resultExpression = requestScope.encoder], attributes = map[[empty]]], [AnnotatedAction at 75210ecd targetAction = [EvaluateAction at be7d02c expression = flowRequestContext.getExternalContext().getNativeRequest(), resultExpression = requestScope.request], attributes = map[[empty]]], [AnnotatedAction at 37e98500 targetAction = [EvaluateAction at 118ffc68 expression = flowRequestContext.getExternalContext().getNativeResponse(), resultExpression = requestScope.response], attributes = map[[empty]]], [AnnotatedAction at 6ca5dff2 targetAction = [EvaluateAction at 597614fa expression = flowRequestContext.getActiveFlow().getApplicationContext().containsBean('shibboleth.CustomViewContext') ? flowRequestContext.getActiveFlow().getApplicationContext().getBean('shibboleth.CustomViewContext') : null, resultExpression = requestScope.custom], attributes = map[[empty]]]], exceptionHandlerSet = list[net.shibboleth.idp.profile.impl.RethrowingFlowExecutionExceptionHandler at 224c5b51], finalResponseAction = org.springframework.webflow.action.ViewFactoryActionAdapter at 239106b0, outputMapper = [null]] is not a view state - programmer error
	at org.springframework.webflow.engine.Flow.getCurrentViewState(Flow.java:633)

2016-09-16 17:19:47,780 - ERROR [java.lang.RuntimeException:76] -
java.lang.RuntimeException: java.lang.IllegalStateException: Exception occurred rendering view org.springframework.web.servlet.view.velocity.VelocityView: name 'error'; URL [error.vm]
	at net.shibboleth.idp.profile.impl.RethrowingFlowExecutionExceptionHandler.handle(RethrowingFlowExecutionExceptionHandler.java:40)
Caused by: java.lang.IllegalStateException: Exception occurred rendering view org.springframework.web.servlet.view.velocity.VelocityView: name 'error'; URL [error.vm]
	at org.springframework.webflow.mvc.view.AbstractMvcView.render(AbstractMvcView.java:200)
Caused by: java.lang.IllegalStateException: STREAM
	at org.eclipse.jetty.server.Response.getWriter(Response.java:887)

IDP-720 calls out keepalives as a potential source, and I know we've 
seen problems with IdP2 (specifically ArcGIS) when Apache had keepalives 
enabled.

Will keep digging and see if we can identify any commonalities. It does 
seem odd that a ClosedChannelException would still allow the error view 
to actually render so the end user sees it in their browser.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160916/3c06f761/attachment-0001.html>