IdP v5 upgrade - OpenSAML initialization error(?)

Tue Apr 16 11:35:01 UTC 2024

Hi,

I'm working on an upgrade from v4.3.1 (tomcat9) to 5.1.0 (tomcat10).

After resolving all the Deprecated warnings in v4.3.1 (and switching to Java 17), I did the IdP upgrade to v5.1.0 (and switched over to tomcat10) and went through all the configuration files with a corresponding "idpnew510" version, either replacing or updating the existing (v4) config files.

In v4 we were using remote user authentication with a Java Servlet Filter carrying out the authentication (via our University Portal) - that Servlet filter was written in Java 8 and is therefore not compatible with the jakarta framework - as we are binning this and (eventually) moving to using Azure AD for authentication, I've been trying to set up LDAP based (via AD) authentication in the first instance (which we had working in IdP v4 as a fall back for remote user authentication if our Portal was not available) . . .

However, when I try and start up the IdP it is failing at the "Initialzing OpenSAML" stage, throwing this error:

2024-04-16 10:34:31,254 - INFO [org.opensaml.core.config.InitializationService:47] - Initializing OpenSAML using the Java Services API
2024-04-16 10:34:31,262 - DEBUG [org.springframework.jndi.JndiTemplate:155] - Looking up JNDI object with name [java:comp/env/opensaml.config.partitionName]
2024-04-16 10:34:31,268 - DEBUG [org.springframework.jndi.JndiLocatorDelegate:102] - Converted JNDI name [java:comp/env/opensaml.config.partitionName] not found - trying original name [opensaml.config.partitionName]. javax.naming.NameNotFoundException: Name [opensaml.config.partitionName] is not bound in this Context. Unable to find [opensaml.config.partitionName].

- it then seems to get stuck in a loop, repeatedly churning out the following until Tomcat is stopped:

2024-04-16 10:34:31,268 - DEBUG [org.springframework.jndi.JndiTemplate:155] - Looking up JNDI object with name [opensaml.config.partitionName]
2024-04-16 10:34:31,268 - DEBUG [org.springframework.jndi.JndiPropertySource:101] - JNDI lookup for name [opensaml.config.partitionName] threw NamingException with message: Name [opensaml.config.partitionName] is not bound in this Context. Unable to find [opensaml.config.partitionName].. Returning null.
2024-04-16 10:34:31,271 - DEBUG [org.springframework.jndi.JndiTemplate:155] - Looking up JNDI object with name [java:comp/env/opensaml.config.partitionName]
2024-04-16 10:34:31,272 - DEBUG [org.springframework.jndi.JndiLocatorDelegate:102] - Converted JNDI name [java:comp/env/opensaml.config.partitionName] not found - trying original name [opensaml.config.partitionName]. javax.naming.NameNotFoundException: Name [opensaml.config.partitionName] is not bound in this Context. Unable to find [opensaml.config.partitionName].
2024-04-16 10:34:31,272 - DEBUG [org.springframework.jndi.JndiTemplate:155] - Looking up JNDI object with name [opensaml.config.partitionName]

. . . ad nauseum until tomcat is stopped

My feeling is that I've messed up with the LDAP configuration (switching from the old v4 config to the v5 config?) but I have no evidence for that other than the JNDI reference in the logs (?) - so I've reviewed the LDAP authentication docs and double checked the configuration but I can't see anything overtly wrong so I'm stumped . . .

Does anyone know the cause of the error I'm seeing? And, more importantly, have any suggestions how to resolve the issue (or where to look for potential mis-configuration)?

Apologies if this is covered somewhere, but my searching of the docs and the mailing list archive didn't turn anything up . . . :-(

Many thanks in advance,

Mike

Michael White
Senior Developer
Product Development
Information Services
University of Stirling
Stirling
FK9 4LA

Tel: +44 (0) 1786 466877
Email: michael.white at stir.ac.uk<mailto:michael.white at stir.ac.uk>
Web: Information Services<https://www.stir.ac.uk/about/professional-services/information-services-and-library/>

My normal working hours are: Mon-Fri, 8.30-4.30
[Facebook icon]<https://www.facebook.com/stirlinglibrary/> [X icon] <https://x.com/isstirling>  [Instagram icon] <https://www.instagram.com/universityofstirling/>  [Youtbue icon] <https://www.youtube.com/user/UniversityOfStirling>
[Banner]<https://www.stir.ac.uk/>

[cid:image006.png at 01DA8FFA.411C4A60]

________________________________
Scotland's University for Sporting Excellence
The University of Stirling is a charity registered in Scotland, number SC 011159
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240416/9edd81fa/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 2429 bytes
Desc: image001.png
URL: <http://shibboleth.net/pipermail/users/attachments/20240416/9edd81fa/attachment.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 2356 bytes
Desc: image002.png
URL: <http://shibboleth.net/pipermail/users/attachments/20240416/9edd81fa/attachment-0001.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 2903 bytes
Desc: image003.png
URL: <http://shibboleth.net/pipermail/users/attachments/20240416/9edd81fa/attachment-0002.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image004.png
Type: image/png
Size: 602 bytes
Desc: image004.png
URL: <http://shibboleth.net/pipermail/users/attachments/20240416/9edd81fa/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image005.png
Type: image/png
Size: 4440 bytes
Desc: image005.png
URL: <http://shibboleth.net/pipermail/users/attachments/20240416/9edd81fa/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image006.png
Type: image/png
Size: 64707 bytes
Desc: image006.png
URL: <http://shibboleth.net/pipermail/users/attachments/20240416/9edd81fa/attachment-0005.png>