FW: OIDC plugin issues associated modules not showing.
Caudill, Trevor T - caudiltt
caudiltt at jmu.edu
Mon Feb 28 17:02:58 UTC 2022
Jetty Version: 10.0.8
Shibboleth IDP Version: 4.1.4
Instructions Followed: https://shibboleth.atlassian.net/wiki/spaces/IDPPLUGINS/pages/1374027959/DuoOIDCAuthnConfiguration
We are attempting to switch to the DUOOIDCAuthnConfiguration in order to use Duo's new, Universal Prompt. Our environment currently has the original Duo flow configured and running. After installing the plug-ins for oidc-common-dist-1.1.0.tar.gz and net.shibboleth.idp.plugin.authn.duo.nimbus we aren't seeing the associated modules listed at all. (idp.oidc.common.1, idp.authn.DuoOIDC) I have included below some of the verbose log output from an attempt to rerun the plug-in install for oidc-common-dist-1.1.0.tar.gz.
[myServer plugins]# /opt/shibboleth-idp/bin/plugin.sh --verbose -i oidc-common-dist-1.1.0.tar.gz
2022-02-23 09:56:33,848 - DEBUG [net.shibboleth.idp.installer.plugin.impl.TrustStore:349] - Plugin net.shibboleth.oidc.common: Trust store exists, loading
2022-02-23 09:56:33,898 - DEBUG [net.shibboleth.idp.installer.plugin.impl.TrustStore:265] - Looking for key with Id suppressed
2022-02-23 09:56:34,066 - DEBUG [net.shibboleth.idp.installer.plugin.impl.TrustStore:295] - Signature Check Succeeded
2022-02-23 09:56:34,086 - DEBUG [net.shibboleth.idp.module.PropertyDrivenIdPModule:143] - Ignoring plugin 'net.shibboleth.oidc.common' version property in favor of package manifest
2022-02-23 09:56:34,090 - DEBUG [net.shibboleth.idp.module.PropertyDrivenIdPModule:175] - Plugin net.shibboleth.oidc.common loaded
2022-02-23 09:56:34,093 - DEBUG [net.shibboleth.idp.module.PropertyDrivenIdPModule:212] - Module idp.oidc.common.1 loaded
2022-02-23 09:56:34,094 - DEBUG [net.shibboleth.idp.installer.plugin.impl.PluginInstaller:350] - Found Service announcing itself as net.shibboleth.oidc.common
2022-02-23 09:56:34,107 - DEBUG [net.shibboleth.idp.installer.plugin.impl.PluginState:298] - Plugin net.shibboleth.oidc.common: Looking for update at HTTPResource [https://shibboleth.net/downloads/identity-provider/plugins/plugins.properties]
2022-02-23 09:56:34,108 - DEBUG [net.shibboleth.ext.spring.resource.HTTPResource:207] - Attempting to fetch remote resource as 'https://shibboleth.net/downloads/identity-provider/plugins/plugins.properties'
2022-02-23 09:56:34,167 - DEBUG [org.apache.http.impl.conn.DefaultHttpClientConnectionOperator:139] - Connecting to shibboleth.net/3.213.250.186:443
2022-02-23 09:56:34,657 - DEBUG [net.shibboleth.utilities.java.support.httpclient.TLSSocketFactory:338] - Connected to: shibboleth.net/3.213.250.186:443
2022-02-23 09:56:34,742 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "################################################################[\n]"
2022-02-23 09:56:34,742 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "# DuoOIDC Authentication based on the Shibboleth Nimbus client #[\n]"
2022-02-23 09:56:34,742 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "################################################################[\n]"
2022-02-23 09:56:34,742 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "net.shibboleth.idp.plugin.authn.duo.nimbus.versions = 1.0.0 1.1.0 1.1.1[\n]"
2022-02-23 09:56:34,742 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "net.shibboleth.idp.plugin.authn.duo.nimbus.downloadURL.%{version} = https://build.shibboleth.net/nexus/service/local/repositories/releases/content/net/shibboleth/idp/plugin/authn/idp-plugin-duo-nimbus-dist/%{version}[\n<https://build.shibboleth.net/nexus/service/local/repositories/releases/content/net/shibboleth/idp/plugin/authn/idp-plugin-duo-nimbus-dist/%25%7bversion%7d%5b/n>]"
2022-02-23 09:56:34,742 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "net.shibboleth.idp.plugin.authn.duo.nimbus.baseName.%{version} = idp-plugin-duo-nimbus-dist-%{version}[\n]"
2022-02-23 09:56:34,743 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "#####################################################[\n]"
2022-02-23 09:56:34,743 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "# DuoOIDC Authentication based on the Duo WebSDK v4 #[\n]"
2022-02-23 09:56:34,743 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "#####################################################[\n]"
2022-02-23 09:56:34,743 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "net.shibboleth.idp.plugin.authn.duo.sdk.versions = 1.0.0 1.1.0 1.1.1[\n]"
2022-02-23 09:56:34,743 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "net.shibboleth.idp.plugin.authn.duo.sdk.downloadURL.%{version} = https://build.shibboleth.net/nexus/service/local/repositories/releases/content/net/shibboleth/idp/plugin/authn/idp-plugin-duo-sdk-dist/%{version}[\n<https://build.shibboleth.net/nexus/service/local/repositories/releases/content/net/shibboleth/idp/plugin/authn/idp-plugin-duo-sdk-dist/%25%7bversion%7d%5b/n>]"
2022-02-23 09:56:34,743 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "net.shibboleth.idp.plugin.authn.duo.sdk.baseName.%{version} = idp-plugin-duo-sdk-dist-%{version}[\n]"
2022-02-23 09:56:34,744 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "###############################[\n]"
2022-02-23 09:56:34,744 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "# OIDC Commons library plugin #[\n]"
2022-02-23 09:56:34,744 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "###############################[\n]"
2022-02-23 09:56:34,744 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "net.shibboleth.oidc.common.versions = 1.0.0 1.1.0[\n]"
2022-02-23 09:56:34,744 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "net.shibboleth.oidc.common.downloadURL.%{version} = https://build.shibboleth.net/nexus/service/local/repositories/releases/content/net/shibboleth/oidc/oidc-common-dist/%{version}[\n<https://build.shibboleth.net/nexus/service/local/repositories/releases/content/net/shibboleth/oidc/oidc-common-dist/%25%7bversion%7d%5b/n>]"
2022-02-23 09:56:34,744 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "net.shibboleth.oidc.common.baseName.%{version} = oidc-common-dist-%{version}[\n]"
2022-02-23 09:56:34,745 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "##################################[\n]"
2022-02-23 09:56:34,745 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "# OpenID Connect Provider plugin #[\n]"
2022-02-23 09:56:34,745 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "##################################[\n]"
2022-02-23 09:56:34,745 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "net.shibboleth.idp.plugin.oidc.op.versions = 3.0.0 3.0.1 3.0.2 3.0.3 3.0.4[\n]"
2022-02-23 09:56:34,745 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "net.shibboleth.idp.plugin.oidc.op.downloadURL.%{version} = https://build.shibboleth.net/nexus/service/local/repositories/releases/content/net/shibboleth/idp/plugin/oidc/idp-plugin-oidc-op-distribution/%{version}[\n<https://build.shibboleth.net/nexus/service/local/repositories/releases/content/net/shibboleth/idp/plugin/oidc/idp-plugin-oidc-op-distribution/%25%7bversion%7d%5b/n>]"
2022-02-23 09:56:34,745 - DEBUG [org.apache.http.wire:73] - http-outgoing-0 << "net.shibboleth.idp.plugin.oidc.op.baseName.%{version} = idp-plugin-oidc-op-distribution-%{version}[\n]"
2022-02-23 09:56:34,922 - DEBUG [org.apache.http.impl.conn.PoolingHttpClientConnectionManager:351] - Connection released: [id: 1][route: {s}->https://shibboleth.net:443][total available: 0; route allocated: 0 of 100; total allocated: 0 of 100]
2022-02-23 09:56:34,966 - INFO [net.shibboleth.idp.installer.plugin.impl.PluginInstaller:263] - Installing Plugin net.shibboleth.oidc.common version 1.1.0
2022-02-23 09:56:35,228 - DEBUG [net.shibboleth.idp.module.PropertyDrivenIdPModule:212] - Module idp.authn.Duo loaded
2022-02-23 09:56:35,229 - DEBUG [net.shibboleth.idp.module.PropertyDrivenIdPModule:214] - Module idp.authn.Duo: Resource /net/shibboleth/idp/module/conf/authn/duo-authn-config.xml -> conf/authn/duo-authn-config.xml (noreplace)
2022-02-23 09:56:35,229 - DEBUG [net.shibboleth.idp.module.PropertyDrivenIdPModule:214] - Module idp.authn.Duo: Resource /net/shibboleth/idp/module/conf/authn/duo.properties -> conf/authn/duo.properties (noreplace)
2022-02-23 09:56:35,229 - DEBUG [net.shibboleth.idp.module.PropertyDrivenIdPModule:214] - Module idp.authn.Duo: Resource /net/shibboleth/idp/module/views/duo.vm -> views/duo.vm (noreplace)
2022-02-23 09:56:35,229 - DEBUG [net.shibboleth.idp.module.AbstractIdPModule:97] - Module idp.authn.Duo checking enabled status
2022-02-23 09:56:35,229 - DEBUG [net.shibboleth.idp.module.AbstractIdPModule:111] - Module idp.authn.Duo: resolved resource destination /opt/shibboleth-idp/conf/authn/duo.properties
2022-02-23 09:56:35,229 - DEBUG [net.shibboleth.idp.module.AbstractIdPModule:111] - Module idp.authn.Duo: resolved resource destination /opt/shibboleth-idp/views/duo.vm
2022-02-23 09:56:35,229 - DEBUG [net.shibboleth.idp.module.AbstractIdPModule:118] - Module idp.authn.Duo is enabled
2022-02-23 09:56:35,290 - DEBUG [net.shibboleth.idp.module.PropertyDrivenIdPModule:212] - Module idp.oidc.common.1 loaded
2022-02-23 09:56:35,290 - DEBUG [net.shibboleth.idp.module.AbstractIdPModule:97] - Module idp.oidc.common.1 checking enabled status
2022-02-23 09:56:35,290 - DEBUG [net.shibboleth.idp.module.AbstractIdPModule:100] - Module idp.oidc.common.1 is always enabled
2022-02-23 09:56:35,292 - DEBUG [net.shibboleth.idp.module.PropertyDrivenIdPModule:212] - Module idp.authn.DuoOIDC loaded
2022-02-23 09:56:35,292 - DEBUG [net.shibboleth.idp.module.PropertyDrivenIdPModule:214] - Module idp.authn.DuoOIDC: Resource /net/shibboleth/idp/plugin/authn/duo/nimbus/conf/authn/duo-oidc-authn-config.xml -> conf/authn/duo-oidc-authn-config.xml (noreplace)
2022-02-23 09:56:35,292 - DEBUG [net.shibboleth.idp.module.PropertyDrivenIdPModule:214] - Module idp.authn.DuoOIDC: Resource /net/shibboleth/idp/plugin/authn/duo/nimbus/conf/authn/duo-oidc.properties -> conf/authn/duo-oidc.properties (noreplace)
2022-02-23 09:56:35,292 - DEBUG [net.shibboleth.idp.module.AbstractIdPModule:97] - Module idp.authn.DuoOIDC checking enabled status
2022-02-23 09:56:35,292 - DEBUG [net.shibboleth.idp.module.AbstractIdPModule:111] - Module idp.authn.DuoOIDC: resolved resource destination /opt/shibboleth-idp/conf/authn/duo-oidc-authn-config.xml
2022-02-23 09:56:35,292 - DEBUG [net.shibboleth.idp.module.AbstractIdPModule:111] - Module idp.authn.DuoOIDC: resolved resource destination /opt/shibboleth-idp/conf/authn/duo-oidc.properties
2022-02-23 09:56:35,292 - DEBUG [net.shibboleth.idp.module.AbstractIdPModule:118] - Module idp.authn.DuoOIDC is enabled
2022-02-23 09:56:35,358 - DEBUG [net.shibboleth.idp.installer.plugin.impl.PluginInstallerSupport:91] - Walking /tmp/plugin-installer-unpack11403880628734332139/shibboleth-idp-plugin-oidc-common-1.1.0/webapp, looking for a name clash in /opt/shibboleth-idp/dist/plugin-webapp
2022-02-23 09:56:35,359 - DEBUG [net.shibboleth.idp.installer.plugin.impl.PluginInstallerSupport:112] - Copying from /tmp/plugin-installer-unpack11403880628734332139/shibboleth-idp-plugin-oidc-common-1.1.0/webapp to /opt/shibboleth-idp/dist/plugin-webapp
2022-02-23 09:56:35,377 - DEBUG [net.shibboleth.idp.module.AbstractIdPModule:97] - Module idp.oidc.common.1 checking enabled status
2022-02-23 09:56:35,377 - DEBUG [net.shibboleth.idp.module.AbstractIdPModule:100] - Module idp.oidc.common.1 is always enabled
2022-02-23 09:56:35,378 - DEBUG [net.shibboleth.idp.module.PropertyDrivenIdPModule:212] - Module idp.authn.Duo loaded
2022-02-23 09:56:35,378 - DEBUG [net.shibboleth.idp.module.PropertyDrivenIdPModule:214] - Module idp.authn.Duo: Resource /net/shibboleth/idp/module/conf/authn/duo-authn-config.xml -> conf/authn/duo-authn-config.xml (noreplace)
2022-02-23 09:56:35,379 - DEBUG [net.shibboleth.idp.module.PropertyDrivenIdPModule:214] - Module idp.authn.Duo: Resource /net/shibboleth/idp/module/conf/authn/duo.properties -> conf/authn/duo.properties (noreplace)
2022-02-23 09:56:35,379 - DEBUG [net.shibboleth.idp.module.PropertyDrivenIdPModule:214] - Module idp.authn.Duo: Resource /net/shibboleth/idp/module/views/duo.vm -> views/duo.vm (noreplace)
2022-02-23 09:56:35,379 - DEBUG [net.shibboleth.idp.installer.plugin.impl.PluginInstaller:427] - Not re-enabling module idp.authn.Duo, not provided by this plugin
2022-02-23 09:56:35,379 - DEBUG [net.shibboleth.idp.module.PropertyDrivenIdPModule:212] - Module idp.authn.External loaded
2022-02-23 09:56:35,379 - DEBUG [net.shibboleth.idp.module.PropertyDrivenIdPModule:214] - Module idp.authn.External: Resource /net/shibboleth/idp/module/conf/authn/external-authn-config.xml -> conf/authn/external-authn-config.xml (noreplace)
2022-02-23 09:56:35,418 - DEBUG [net.shibboleth.idp.module.PropertyDrivenIdPModule:212] - Module idp.oidc.common.1 loaded
2022-02-23 09:56:35,418 - DEBUG [net.shibboleth.idp.installer.plugin.impl.PluginInstaller:424] - Re-enabling module idp.oidc.common.1
2022-02-23 09:56:35,418 - DEBUG [net.shibboleth.idp.module.AbstractIdPModule:129] - Module idp.oidc.common.1 enabling
2022-02-23 09:56:35,418 - DEBUG [net.shibboleth.idp.module.AbstractIdPModule:143] - Module idp.oidc.common.1 enabled
2022-02-23 09:56:35,427 - DEBUG [net.shibboleth.idp.installer.plugin.impl.RollbackPluginInstall:195] - Rollback/Uninstall. No work done
2022-02-23 09:56:35,428 - INFO [net.shibboleth.idp.installer.BuildWar:103] - Rebuilding /opt/shibboleth-idp/war/idp.war, Version 4.1.4
2022-02-23 09:56:35,428 - DEBUG [net.shibboleth.idp.installer.InstallerSupport:278] - Directory /opt/shibboleth-idp/webpapp does not exist. Skipping delete.
2022-02-23 09:56:35,428 - DEBUG [net.shibboleth.idp.installer.InstallerSupport:278] - Directory /opt/shibboleth-idp/webpapp.tmp does not exist. Skipping delete.
2022-02-23 09:56:35,430 - INFO [net.shibboleth.idp.installer.BuildWar:113] - Initial populate from /opt/shibboleth-idp/dist/webapp to /opt/shibboleth-idp/webpapp.tmp
2022-02-23 09:56:36,616 - INFO [net.shibboleth.idp.installer.BuildWar:92] - Overlay from /opt/shibboleth-idp/dist/plugin-webapp to /opt/shibboleth-idp/webpapp.tmp
2022-02-23 09:56:36,622 - INFO [net.shibboleth.idp.installer.BuildWar:92] - Overlay from /opt/shibboleth-idp/edit-webapp to /opt/shibboleth-idp/webpapp.tmp
2022-02-23 09:56:36,757 - INFO [net.shibboleth.idp.installer.BuildWar:125] - Creating war file /opt/shibboleth-idp/war/idp.war
# /opt/shibboleth-idp/bin/plugin.sh -l
Plugin: net.shibboleth.idp.plugin.authn.duo.nimbus Current Version: 1.1.1
Plugin: net.shibboleth.oidc.common Current Version: 1.1.0
[myServer plugins]# /opt/shibboleth-idp/bin/module.sh -l
Module: idp.authn.Duo [ENABLED]
Module: idp.authn.External [ENABLED]
Module: idp.authn.Function [ENABLED]
Module: idp.authn.IPAddress [ENABLED]
Module: idp.authn.MFA [ENABLED]
Module: idp.authn.Password [ENABLED]
Module: idp.authn.RemoteUser [ENABLED]
Module: idp.authn.RemoteUserInternal [ENABLED]
Module: idp.authn.SPNEGO [ENABLED]
Module: idp.authn.X509 [DISABLED]
Module: idp.authn.Demo [DISABLED]
Module: idp.admin.Hello [DISABLED]
Module: idp.admin.UnlockKeys [DISABLED]
Module: idp.intercept.Consent [ENABLED]
Module: idp.intercept.ContextCheck [ENABLED]
Module: idp.intercept.ExpiringPassword [ENABLED]
Module: idp.intercept.Impersonate [ENABLED]
Module: idp.intercept.Warning [DISABLED]
Module: idp.profile.CAS [ENABLED]
[myServer plugins]# /opt/shibboleth-idp/bin/module.sh -e idp.oidc.common.1
Unknown modules: [idp.oidc.common.1]
Thanks,
Trevor Caudill
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220228/0b9518d8/attachment.htm>
More information about the users
mailing list