IdP5 upgrade - SecurityConfigurationLookupStrategy error

Thu Aug 29 01:01:58 UTC 2024

I am working on upgrading to IdP5 and am stuck on this error when relying-party.xml gets loaded. I configured a SecurityConfigurationLookupStrategy to work through the process of switching to a new signing certificate. This configuration worked fine with IdP4 but IdP5 won't accept it. Checking the IdP5 docs I don't see anything out of line. Here is the error in the logs:

2024-08-28T16:58:39.316366782-06:00 stderr F tomcat;catalina.out;dev;nothing 2024-08-28 22:58:39,316 [main] WARN  net.shibboleth.shared.spring.context.FilesystemGenericApplicationContext- Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.BeanCreationE
xception: Error creating bean with name 'msu.SecurityConfigurationLookupStrategy' defined in file [/opt/shibboleth-idp/conf/relying-party.xml]: Expression parsing failed
2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-process.log;dev;nothing;2024-08-28 22:58:39,317 - ERROR [net.shibboleth.shared.service.AbstractReloadableService:179] - Service 'shibboleth.RelyingPartyResolverService': Initial load failed
2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-process.log;dev;nothing;net.shibboleth.shared.service.ServiceException: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'msu.SecurityConfigurationLookupStrategy' defined in file [/opt/shibboleth-idp/conf/relying-party.xm
l]: Expression parsing failed
2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-process.log;dev;nothing;      at net.shibboleth.shared.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:375)
2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-process.log;dev;nothing;Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'msu.SecurityConfigurationLookupStrategy' defined in file [/opt/shibboleth-idp/conf/relying-party.xml]: Expression parsing failed
2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-process.log;dev;nothing;      at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:607)
2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-process.log;dev;nothing;Caused by: org.springframework.beans.factory.BeanExpressionException: Expression parsing failed
2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-process.log;dev;nothing;      at org.springframework.context.expression.StandardBeanExpressionResolver.evaluate(StandardBeanExpressionResolver.java:186)
2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-process.log;dev;nothing;Caused by: org.springframework.expression.spel.SpelEvaluationException: EL1005E: Type cannot be found 'net.shibboleth.idp.profile.config.SecurityConfiguration'
2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-process.log;dev;nothing;      at org.springframework.expression.spel.support.StandardTypeLocator.findType(StandardTypeLocator.java:129)
2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-process.log;dev;nothing;2024-08-28 22:58:39,317 - INFO [net.shibboleth.shared.service.AbstractReloadableService:185] - Service 'shibboleth.RelyingPartyResolverService': Continuing to poll configuration
2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-warn.log;dev;nothing;2024-08-28 22:58:39,317 - ERROR [net.shibboleth.shared.service.AbstractReloadableService:179] - Service 'shibboleth.RelyingPartyResolverService': Initial load failed
2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-warn.log;dev;nothing;net.shibboleth.shared.service.ServiceException: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'msu.SecurityConfigurationLookupStrategy' defined in file [/opt/shibboleth-idp/conf/relying-party.xml]:
 Expression parsing failed
2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-warn.log;dev;nothing; at net.shibboleth.shared.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:375)                                                                                                                                   2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-warn.log;dev;nothing;Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'msu.SecurityConfigurationLookupStrategy' defined in file [/opt/shibboleth-idp/conf/relying-party.xml]: Expression parsing failed
2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-warn.log;dev;nothing; at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:607)
2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-warn.log;dev;nothing;Caused by: org.springframework.beans.factory.BeanExpressionException: Expression parsing failed
2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-warn.log;dev;nothing; at org.springframework.context.expression.StandardBeanExpressionResolver.evaluate(StandardBeanExpressionResolver.java:186)
2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-warn.log;dev;nothing;Caused by: org.springframework.expression.spel.SpelEvaluationException: EL1005E: Type cannot be found 'net.shibboleth.idp.profile.config.SecurityConfiguration'
2024-08-28T16:58:39.318539981-06:00 stderr F shib-idp;idp-warn.log;dev;nothing; at org.springframework.expression.spel.support.StandardTypeLocator.findType(StandardTypeLocator.java:129)

Here is what the specific bean looks like:

    <bean id="msu.SecurityConfigurationLookupStrategy" parent="shibboleth.MDDrivenBeanProperty" p:propertyName="securityConfiguration"
          p:propertyType="#{T(net.shibboleth.idp.profile.config.SecurityConfiguration)}" />

Thanks,

Jason Rosen
Montana State University
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240829/1f4c3455/attachment.htm>