Re: Shibboleth SP3.0.0 Installation error -- invalid use of incomplete type ‘class xmltooling:: CredentialResolver’

Sun Dec 30 03:51:55 EST 2018

Hi Gerry,

Thank you for your help. Really appreciate it!

We were not giving Shibboleth-sp --prefix to configure  log4cpp, xerces-c & xml-security-c.

That was the reason it was breaking during SP make command execution.

Advance Happy New Year!

Thanks,

Pratik Gohil

________________________________
From: Hall, Gerry <gerry.hall at emory.edu>
Sent: Friday, December 28, 2018 7:34 PM
To: Dalvi, Vikram (GE Capital, consultant); Gohil, Pratik (GE Capital, Non-GE)
Subject: EXT: Re: Shibboleth SP3.0.0 Installation error -- invalid use of incomplete type ‘class xmltooling:: CredentialResolver’

I always use yum, so I cannot help with installing in a different directory other than /etc and yum does not appear to support that capability.  Remember however that Shibboleth is nothing more than a SAML plugin for the web server, probably Apache in your case.  My guess is that even if you install to a different location, you are still gonna have to tell the OS and Apache where the Shibboleth config files are.

As far as the yum repos, try the following.

For CENTOS7/RHEL7:

[security_shibboleth]

name=Shibboleth (CentOS_7)

type=rpm-md

baseurl=http://download.opensuse.org/repositories/security:/shibboleth/CentOS_7/

gpgcheck=1

gpgkey=http://download.opensuse.org/repositories/security:/shibboleth/CentOS_7/repodata/repomd.xml.key

enabled=1

For CENTOS6/RHEL6:

[security_shibboleth]

name=Shibboleth (RHEL_6)

type=rpm-md

baseurl=http://download.opensuse.org/repositories/security:/shibboleth/RHEL_6/

gpgcheck=1

gpgkey=http://download.opensuse.org/repositories/security:/shibboleth/RHEL_6/repodata/repomd.xml.key

enabled=0

From: "Dalvi, Vikram (GE Capital, consultant)" <vikram.dalvi at ge.com>
Date: Friday, December 28, 2018 at 8:42 AM
To: "Gohil, Pratik (GE Capital, Non-GE)" <Pratik.Gohil at ge.com>, "Hall, Gerry" <gerry.hall at emory.edu>, Shib Users <users at shibboleth.net>
Subject: Re: Shibboleth SP3.0.0 Installation error -- invalid use of incomplete type ‘class xmltooling:: CredentialResolver’

Hi Gerry,

Thank you for your quick response.

We are trying with source file to install Shibboleth SP in a specific directory of our choice. Because Yum will install it at /etc directory.

Yum install has given below error even after setting repository file at  /etc/yum.repos.d

[root at g2802alplapp01v web]# yum install shibboleth.x86_64

Loaded plugins: fastestmirror, fs-snapshot, ulninfo

Loading mirror speeds from cached hostfile

Could not retrieve mirrorlist https://shibboleth.net/cgi-bin/mirrorlist.cgi/CentOS_7 error was

14: curl#6 - "Could not resolve host: shibboleth.net; Name or service not known"

 One of the configured repositories failed (Unknown),

I have one question if it get successfully installed through yum command. Can we move SP directory to another location.

Thanks and Regards,

Vikram Dalvi

________________________________

From: Hall, Gerry <gerry.hall at emory.edu>
Sent: Friday, December 28, 2018 5:49 PM
To: Gohil, Pratik (GE Capital, Non-GE)
Subject: EXT: Re: Shibboleth SP3.0.0 Installation error -- invalid use of incomplete type ‘class xmltooling:: CredentialResolver’

Not sure why you are building the packages when you could just use yum (much, much easier) or why you are trying to install Shibboleth v3.0.0 (that is an old version).

But, if you want to take the easy route , try the following.

SP Install

https://wiki.shibboleth.net/confluence/display/SP3/LinuxInstall

LinuxInstall - Service Provider 3 - Shibboleth Wiki<https://wiki.shibboleth.net/confluence/display/SP3/LinuxInstall>
wiki.shibboleth.net
Make sure that the Shibboleth-supplied variables are present. If there is a non-empty variable called Shib-Application-ID, you successfully authenticated and have a valid session.However, you also should check if there are other non-empty Shibboleth variables defined in the attribute-map.xml file.If there are no variables like mail or givenName or surname, the IdP probably releaseed no attributes.

https://wiki.shibboleth.net/confluence/display/SP3/RPMInstall

1.  Get a copy of the appropriate repository file and add to /etc/yum.repos.d.

     See  https://shibboleth.net/downloads/service-provider/RPMS/

     For example, for CENTOS7/RHEL7:

[shibboleth]

name=Shibboleth (CentOS_7)

# Please report any problems to https://issues.shibboleth.net

type=rpm-md

mirrorlist=https://shibboleth.net/cgi-bin/mirrorlist.cgi/CentOS_7

gpgcheck=1

gpgkey=https://shibboleth.net/downloads/service-provider/RPMS/repomd.xml.key

enabled=1

2.  Install via Yum.

    64-bit OS:

        yum install shibboleth.x86_64

    32 bit OS:

        yum install shibboleth

That’s it.  Hope this helps.

_______

From: users <users-bounces at shibboleth.net> on behalf of "Dalvi, Vikram (GE Capital, consultant)" <vikram.dalvi at ge.com>
Reply-To: Shib Users <users at shibboleth.net>
Date: Friday, December 28, 2018 at 4:45 AM
To: Shib Users <users at shibboleth.net>
Cc: "Gohil, Pratik (GE Capital, Non-GE)" <Pratik.Gohil at ge.com>
Subject: Shibboleth SP3.0.0 Installation error -- invalid use of incomplete type ‘class xmltooling::CredentialResolver’

Hi,

We are trying to install Shibboleth SP 3.0.0 on our Linux server. We have followed the documentation on wiki.shibboleth.net for LinuxBuild and we have downloaded latest versions of all the required mentioned packages and built them.

However, when we are trying to build shibboleth SP3 we are getting below error in make command.

============

In file included from ServiceProvider.cpp:44:0:

/appbin/web/shibboleth-sp/include/saml/saml2/metadata/MetadataProvider.h:68:70: error: invalid use of incomplete type ‘class xmltooling::CredentialResolver’

         class SAML_API MetadataProvider : public virtual xmltooling::CredentialResolver

                                                                      ^

In file included from internal.h:55:0,

                 from ServiceProvider.cpp:27:

../shibsp/Application.h:39:23: error: forward declaration of ‘class xmltooling::CredentialResolver’

     class XMLTOOL_API CredentialResolver;

                       ^

make[3]: *** [libshibsp_la-ServiceProvider.lo] Error 1

make[3]: Leaving directory `/appbin/shibboleth_buildwork/shibboleth-sp-3.0.1/shibsp'

make[2]: *** [all] Error 2

make[2]: Leaving directory `/appbin/shibboleth_buildwork/shibboleth-sp-3.0.1/shibsp'

make[1]: *** [all-recursive] Error 1

make[1]: Leaving directory `/appbin/shibboleth_buildwork/shibboleth-sp-3.0.1'

make: *** [all] Error 2

================

Below is the configure command we are using to build SP3. output is attached with mail.

==================

./configure --with-log4shib=/appbin/shibboleth_buildwork/log4shib-2.0.0 --enable-apache-24 --with-apxs24=/appbin/shibboleth_buildwork/apache_buildwork/apache-2.4.29_Shibboleth/bin/apxs --prefix=/appbin/web/shibboleth-sp --disable-odbc --with-cxxtest=/appbin/shibboleth_buildwork/cxxtest-4.3 -C
==================

our PKG_CONFIG_PATH variable value is

================

export PKG_CONFIG_PATH=/appbin/shibboleth_buildwork/xmltooling-3.0.0:/appbin/shibboleth_buildwork/xml-security-c-2.0.2:/appbin/shibboleth_buildwork/log4cpp:/appbin/shibboleth_buildwork/xerces-c-3.2.2:/appbin/shibboleth_buildwork/opensaml-3.0.0:/appbin/shibboleth_buildwork/opensaml-3.0.0

================

Our server details

===============

Red Hat Enterprise Linux Server release 7.6 (Maipo) x86_64 GNU/Linux
===============

gcc and g++ details

===============

[root at g2802alplapp01v shibboleth-sp]# g++ -v

Using built-in specs.

COLLECT_GCC=g++

COLLECT_LTO_WRAPPER=/usr/libexec/gcc/x86_64-redhat-linux/4.8.5/lto-wrapper

Target: x86_64-redhat-linux

gcc version 4.8.5 20150623 (Red Hat 4.8.5-36.0.1) (GCC)

===============

Can you please help us in figuring out what is gong wrong here. Please let us know if you need any more information.

Thanks and Regards,

Vikram Dalvi

Enhanced Authentication Services

________________________________

This e-mail message (including any attachments) is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information. If the reader of this message is not the intended
recipient, you are hereby notified that any dissemination, distribution
or copying of this message (including any attachments) is strictly
prohibited.

If you have received this message in error, please contact
the sender by reply e-mail message and destroy all copies of the
original message (including attachments).
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20181230/6d49ff69/attachment.html>