userPrincipalName as idp.authn.LDAP.dnFormat

[Mr. Christopher Bland]

Hi Scott,

Took your advise and am trying to port my V2 JAAS config over using the doc at https://wiki.shibboleth.net/confluence/display/IDP30/JAASAuthnConfiguration.  However I am getting an error.

2019-01-02 19:00:32,419 -  DEBUG [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstJAAS:340] - Profile Action ValidateUsernamePasswordAgainstJAAS: Using custom JAAS configuration type JavaLoginConfig with parameters of type java.security.URIParameter
2019-01-02 19:00:32,426  - WARN [net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstJAAS:261] - Profile Action ValidateUsernamePasswordAgainstJAAS: Login by 'chris at fdu.edu' via 'ShibUserPassAuth' produced exception
java.security.NoSuchAlgorithmException: Error constructing implementation (algorithm: JavaLoginConfig, provider: SUN, class: sun.security.provider.ConfigFile$Spi)
	at java.security.Provider$Service.newInstance(Provider.java:1617)
Caused by: java.io.IOException: Configuration Error:
	Line 14: expected [controlFlag]
	at sun.security.provider.ConfigFile$Spi.ioException(ConfigFile.java:666)

Based on Googling the error it seems that my IDP can’t find the jar file it needs.  What file should I look for to confirm that I have everything I need to do JAAS authentication?  I already checked my conf/authn/jaas-authn-config.xml and conf/authn/jaas.config for permissions and content.

-Chris

> On Jan 2, 2019, at 6:40 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
>> Simply put, trying to keep ahead of the curve. Not sure what you have in store
>> for the major release.
> 
> JAAS support is not going anywhere if that's what you're asking. If it were, there would be clear indications of that already. I use it and I believe most people should use it. If you don't need anything JAAS doesn't handle, you don't need anything else.
> 
> -- Scott
> 
> -- 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net