Shibboleth 4.2.1 and Duo with Nimbus Client issues

[Jeff Chapin]

Again, thanks for the kick in the right direction -- I now have this
working.

As it turns out, an incorrect value for clientID is *NOT* the only thing
that can cause this error message to be returned from Duo.  If
idp.duo.oidc.secretKey is unset, it will also return that same error. In my
case, I had idp.duo.oidc.secretKey in credentials/secrets.properties -- but
that file was not being loaded for some reason. I was able to note the
missing value in the catalina.out file, and when I moved that value to
duo-oidc.properties to test, this started working.

Thanks a bunch!

On Wed, Jan 18, 2023 at 10:51 AM Jeff Chapin <jeff.chapin at uni.edu> wrote:

> Frustratingly, catalina.out (which is something I had not thought to look
> in before), only lists one value for idp.duo.oidc.clientId, and it appears
> to be correct.
>
> That said, I think this is the right track -- I see in catalina.out that
> idp.duo config values are being loaded (and not just idp.duo.oidc values)
> so there appear to be unexpected config files being loaded....
>
> Thanks for the pointer,
> Jeff
>
> On Wed, Jan 18, 2023 at 10:33 AM Cantor, Scott <cantor.2 at osu.edu> wrote:
>
>> The error pretty concretely means your client ID/secret are wrong, no
>> matter what checking was done.
>>
>> I'd probably look for duplicate properties and/or not loading the right
>> set of property files. The servlet container logging tends to be where all
>> that gets noted since it's pre-startup.
>>
>> -- Scott
>>
>>
>>
>>
>>
>>
>>
>
> --
>
> Jeff Chapin,
>
> Panther eSports Adviser
> Systems/Applications Administrator
> ITS-IS, University of Northern Iowa
> Phone: 319-273-3162 Email: Jeff.Chapin at uni.edu
>


-- 

Jeff Chapin,

Panther eSports Adviser
Systems/Applications Administrator
ITS-IS, University of Northern Iowa
Phone: 319-273-3162 Email: Jeff.Chapin at uni.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230118/8aa6ac93/attachment.htm>