Odd Duo Exception after upgrading to 3.3.0 from 3.2.0

[Christopher Bongaarts]

On 2/3/2017 3:46 PM, Cantor, Scott wrote:
> On 2/3/17, 4:35 PM, "users on behalf of Christopher Bongaarts"<users-bounces at shibboleth.net on behalf of cab at umn.edu>  wrote:
>
>>     We had a similar error that we fixed by updating our customized web.xml file from 3.2.1 with the new version in 3.3.0
>> and reapplying our changes.  We did*not*  have to add the classpath settings that the Duo module doc installation
>> recommends; 3.3.0 already has those paths included.
> I don't know why that would be exactly, but there were/are specific things the Unicon flow was doing that certainly might have stopped working, including the way it was trying to programmatically  define the flow to the IdP, which isn't supported.
>
> I'm not aware of any web.xml changes that should matter.

The two changes we made that we effectively reverted to the 3.3.0 
delivered version were the contextConfigLocation values, which we had 
modified as directed by the Duo module docs.  The one at the webapp 
level is different between (stock) 3.2.1 and (stock) 3.3.0:

<param-value>${idp.home}/system/conf/global-system.xml,classpath*:/META-INF/net.shibboleth.idp/config.xml</param-value>
becomes
<param-value>classpath*:/META-INF/net.shibboleth.idp/preconfig.xml,${idp.home}/system/conf/global-system.xml,classpath*:/META-INF/net.shibboleth.idp/config.xml,classpath*:/META-INF/net.shibboleth.idp/postconfig.xml</param-value>

The one in the idp servlet definition is identical between the stock 
versions:

<param-value>${idp.home}/system/conf/mvc-beans.xml, 
${idp.home}/system/conf/webflow-config.xml</param-value>

So our mucking with the values, and/or the (lack of) change to the 
webapp-level parameter, apparently is enough to make the IdP unable to 
find certain parent flows (Mark's couldn't find the c10n flow; in our 
case it couldn't find the abstract authn flow).

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170203/97860318/attachment.html>