Ignoring NameIDFormat metadata that includes the 'unspecified' format
izoret at cines.fr
izoret at cines.fr
Wed Feb 7 15:11:52 UTC 2024
Thanks for your reply,
For one field ("mail") , i'v relase/comment the call on my attribute-resolver.xml (it's the right thing ?)
so for the moment i want test with only mail ..
--
<!--
<AttributeDefinition id="mail" xsi:type="Template">
<InputAttributeDefinition ref="uid" />
<Template>
<![CDATA[
${uid}@%{idp.scope}
]]>
</Template>
</AttributeDefinition>
-->
--
And add this 2 beans at the end of saml-nameid.xml
<!-- SAML 2 NameID Generation -->
<util:list id="shibboleth.SAML2NameIDGenerators">
<ref bean="shibboleth.SAML2TransientGenerator" />
<!-- Uncommenting this bean requires configuration in saml-nameid.properties. -->
<!-- <ref bean="shibboleth.SAML2PersistentGenerator" /> -->
<bean parent="shibboleth.SAML2AttributeSourcedGenerator"
p:omitQualifiers="true"
p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
p:attributeSourceIds="#{ {'mail'} }" />
</util:list>
<!-- SAML 1 NameIdentifier Generation -->
<util:list id="shibboleth.SAML1NameIdentifierGenerators">
<ref bean="shibboleth.SAML1TransientGenerator" />
<bean parent="shibboleth.SAML1AttributeSourcedGenerator"
p:omitQualifiers="true"
p:format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress"
p:attributeSourceIds="#{ {'mail'} }" />
</util:list>
Now, the SP give the same than before, without the mail .. :
The SP Log :
[root at hancock conf]# service tomcat stop
root at hancock conf]# > /opt/shibboleth-idp/logs/idp-process.log
[root at hancock conf]# service tomcat start
[root at hancock conf]# tail -f /opt/shibboleth-idp/logs/idp-process.log
2024-02-07 16:07:34,814 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.LoggingService': Reload interval set to: PT5M, starting refresh thread
2024-02-07 16:07:34,864 - - INFO [net.shibboleth.utilities.java.support.xml.BasicParserPool:648] - XMLSecurityManager of type 'com.sun.org.apache.xerces.internal.utils.XMLSecurityManager' is installed
2024-02-07 16:07:34,866 - - INFO [org.opensaml.core.config.InitializationService:49] - Initializing OpenSAML using the Java Services API
2024-02-07 16:07:35,678 - - INFO [org.opensaml.xmlsec.algorithm.AlgorithmRegistry:256] - Algorithm failed runtime support check, will not be usable: http://www.w3.org/2001/04/xmlenc#ripemd160
2024-02-07 16:07:35,682 - - INFO [org.opensaml.xmlsec.algorithm.AlgorithmRegistry:256] - Algorithm failed runtime support check, will not be usable: http://www.w3.org/2001/04/xmldsig-more#hmac-ripemd160
2024-02-07 16:07:35,694 - - INFO [org.opensaml.xmlsec.algorithm.AlgorithmRegistry:256] - Algorithm failed runtime support check, will not be usable: http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160
2024-02-07 16:07:35,886 - - INFO [net.shibboleth.utilities.java.support.security.impl.BasicKeystoreKeyStrategy:377] - Loading initial default key: secret1
2024-02-07 16:07:36,004 - - INFO [net.shibboleth.utilities.java.support.security.impl.BasicKeystoreKeyStrategy:389] - Default key updated to secret1
2024-02-07 16:07:36,224 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.AttributeRegistryService': Performing initial load
2024-02-07 16:07:36,226 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.AttributeRegistryService': Reloading service configuration
2024-02-07 16:07:36,462 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.AttributeRegistryService': Completed reload and swapped in latest configuration for service 'shibboleth.AttributeRegistryService'
2024-02-07 16:07:36,463 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.AttributeRegistryService': Reload complete
2024-02-07 16:07:36,463 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.AttributeRegistryService': Reload interval set to: PT15M, starting refresh thread
2024-02-07 16:07:36,468 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.MetadataResolverService': Performing initial load
2024-02-07 16:07:36,469 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.MetadataResolverService': Reloading service configuration
2024-02-07 16:07:36,811 - - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:591] - Metadata Resolver FileBackedHTTPMetadataResolver LockSelf: New metadata successfully loaded for 'https://multipass-preprod.cines.fr/saml2/metadata'
2024-02-07 16:07:36,812 - - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:396] - Metadata Resolver FileBackedHTTPMetadataResolver LockSelf: Next refresh cycle for metadata provider 'https://multipass-preprod.cines.fr/saml2/metadata' will occur on '2024-02-07T15:07:41.811515Z' ('2024-02-07T16:07:41.811515+01:00[Europe/Paris]' local time)
2024-02-07 16:07:36,818 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.MetadataResolverService': Completed reload and swapped in latest configuration for service 'shibboleth.MetadataResolverService'
2024-02-07 16:07:36,818 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.MetadataResolverService': Reload complete
2024-02-07 16:07:36,904 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.AttributeFilterService': Performing initial load
2024-02-07 16:07:36,911 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.AttributeFilterService': Reloading service configuration
2024-02-07 16:07:37,004 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.AttributeFilterService': Completed reload and swapped in latest configuration for service 'shibboleth.AttributeFilterService'
2024-02-07 16:07:37,004 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.AttributeFilterService': Reload complete
2024-02-07 16:07:37,005 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.AttributeFilterService': Reload interval set to: PT15M, starting refresh thread
2024-02-07 16:07:37,010 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.AttributeResolverService': Performing initial load
2024-02-07 16:07:37,011 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.AttributeResolverService': Reloading service configuration
2024-02-07 16:07:37,286 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.AttributeResolverService': Completed reload and swapped in latest configuration for service 'shibboleth.AttributeResolverService'
2024-02-07 16:07:37,287 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.AttributeResolverService': Reload complete
2024-02-07 16:07:37,287 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.AttributeResolverService': Reload interval set to: PT15M, starting refresh thread
2024-02-07 16:07:37,293 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.NameIdentifierGenerationService': Performing initial load
2024-02-07 16:07:37,294 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.NameIdentifierGenerationService': Reloading service configuration
2024-02-07 16:07:37,356 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.NameIdentifierGenerationService': Completed reload and swapped in latest configuration for service 'shibboleth.NameIdentifierGenerationService'
2024-02-07 16:07:37,357 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.NameIdentifierGenerationService': Reload complete
2024-02-07 16:07:37,358 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.NameIdentifierGenerationService': Reload interval set to: PT15M, starting refresh thread
2024-02-07 16:07:37,362 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.RelyingPartyResolverService': Performing initial load
2024-02-07 16:07:37,362 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.RelyingPartyResolverService': Reloading service configuration
2024-02-07 16:07:37,797 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.RelyingPartyResolverService': Completed reload and swapped in latest configuration for service 'shibboleth.RelyingPartyResolverService'
2024-02-07 16:07:37,798 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.RelyingPartyResolverService': Reload complete
2024-02-07 16:07:37,798 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.RelyingPartyResolverService': Reload interval set to: PT15M, starting refresh thread
2024-02-07 16:07:37,801 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.ReloadableAccessControlService': Performing initial load
2024-02-07 16:07:37,801 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.ReloadableAccessControlService': Reloading service configuration
2024-02-07 16:07:37,820 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.ReloadableAccessControlService': Completed reload and swapped in latest configuration for service 'shibboleth.ReloadableAccessControlService'
2024-02-07 16:07:37,820 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.ReloadableAccessControlService': Reload complete
2024-02-07 16:07:37,820 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.ReloadableAccessControlService': Reload interval set to: PT5M, starting refresh thread
2024-02-07 16:07:37,828 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.ReloadableCASServiceRegistry': Performing initial load
2024-02-07 16:07:37,829 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.ReloadableCASServiceRegistry': Reloading service configuration
2024-02-07 16:07:37,835 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.ReloadableCASServiceRegistry': Completed reload and swapped in latest configuration for service 'shibboleth.ReloadableCASServiceRegistry'
2024-02-07 16:07:37,835 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.ReloadableCASServiceRegistry': Reload complete
2024-02-07 16:07:37,835 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.ReloadableCASServiceRegistry': Reload interval set to: PT15M, starting refresh thread
2024-02-07 16:07:37,838 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.ManagedBeanService': Performing initial load
2024-02-07 16:07:37,839 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.ManagedBeanService': Reloading service configuration
2024-02-07 16:07:37,839 - - INFO [net.shibboleth.ext.spring.util.ApplicationContextBuilder:346] - Skipping non-existent resource: ServletContext resource [/opt/shibboleth-idp/conf/managed-beans.xml]
2024-02-07 16:07:37,840 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.ManagedBeanService': Completed reload and swapped in latest configuration for service 'shibboleth.ManagedBeanService'
2024-02-07 16:07:37,841 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.ManagedBeanService': Reload complete
2024-02-07 16:07:37,842 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.ManagedBeanService': Reload interval set to: PT15M, starting refresh thread
2024-02-07 16:07:38,050 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:55] - Shibboleth IdP Version 4.3.1
2024-02-07 16:07:38,051 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:56] - Java version='11.0.21' vendor='Red Hat, Inc.'
2024-02-07 16:07:38,052 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:69] - No Plugins Loaded
2024-02-07 16:07:38,067 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:100] - Enabled Modules:
2024-02-07 16:07:38,068 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] - Password Authentication
2024-02-07 16:07:38,069 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] - Hello World
2024-02-07 16:07:38,923 - - INFO [net.shibboleth.idp.authn.impl.RemoteUserAuthServlet:214] - RemoteUserAuthServlet will process REMOTE_USER, along with attributes [] and headers []
2024-02-07 16:07:42,198 - - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:591] - Metadata Resolver FileBackedHTTPMetadataResolver LockSelf: New metadata successfully loaded for 'https://multipass-preprod.cines.fr/saml2/metadata'
2024-02-07 16:07:42,198 - - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:396] - Metadata Resolver FileBackedHTTPMetadataResolver LockSelf: Next refresh cycle for metadata provider 'https://multipass-preprod.cines.fr/saml2/metadata' will occur on '2024-02-07T18:07:41.908076Z' ('2024-02-07T19:07:41.908076+01:00[Europe/Paris]' local time)
after uncomment this on saml-nameid.properties :
idp.nameid.saml2.default = urn:oasis:names:tc:SAML:2.0:nameid-format:transient
If on saml-nameid.xml
i uncomment the ref bean : <ref bean="shibboleth.SAML2PersistentGenerator" />
I've an error on log :
[root at hancock conf]# service tomcat stop
root at hancock conf]# > /opt/shibboleth-idp/logs/idp-process.log
[root at hancock conf]# service tomcat start
Redirecting to /bin/systemctl start tomcat.service
[root at hancock conf]# tail -f /opt/shibboleth-idp/logs/idp-process.log
2024-02-07 15:58:50,256 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.LoggingService': Reload interval set to: PT5M, starting refresh thread
2024-02-07 15:58:50,315 - - INFO [net.shibboleth.utilities.java.support.xml.BasicParserPool:648] - XMLSecurityManager of type 'com.sun.org.apache.xerces.internal.utils.XMLSecurityManager' is installed
2024-02-07 15:58:50,316 - - INFO [org.opensaml.core.config.InitializationService:49] - Initializing OpenSAML using the Java Services API
2024-02-07 15:58:51,194 - - INFO [org.opensaml.xmlsec.algorithm.AlgorithmRegistry:256] - Algorithm failed runtime support check, will not be usable: http://www.w3.org/2001/04/xmlenc#ripemd160
2024-02-07 15:58:51,199 - - INFO [org.opensaml.xmlsec.algorithm.AlgorithmRegistry:256] - Algorithm failed runtime support check, will not be usable: http://www.w3.org/2001/04/xmldsig-more#hmac-ripemd160
2024-02-07 15:58:51,208 - - INFO [org.opensaml.xmlsec.algorithm.AlgorithmRegistry:256] - Algorithm failed runtime support check, will not be usable: http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160
2024-02-07 15:58:51,370 - - INFO [net.shibboleth.utilities.java.support.security.impl.BasicKeystoreKeyStrategy:377] - Loading initial default key: secret1
2024-02-07 15:58:51,508 - - INFO [net.shibboleth.utilities.java.support.security.impl.BasicKeystoreKeyStrategy:389] - Default key updated to secret1
2024-02-07 15:58:51,737 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.AttributeRegistryService': Performing initial load
2024-02-07 15:58:51,737 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.AttributeRegistryService': Reloading service configuration
2024-02-07 15:58:52,017 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.AttributeRegistryService': Completed reload and swapped in latest configuration for service 'shibboleth.AttributeRegistryService'
2024-02-07 15:58:52,019 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.AttributeRegistryService': Reload complete
2024-02-07 15:58:52,019 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.AttributeRegistryService': Reload interval set to: PT15M, starting refresh thread
2024-02-07 15:58:52,025 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.MetadataResolverService': Performing initial load
2024-02-07 15:58:52,025 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.MetadataResolverService': Reloading service configuration
2024-02-07 15:58:52,306 - - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:591] - Metadata Resolver FileBackedHTTPMetadataResolver LockSelf: New metadata successfully loaded for 'https://multipass-preprod.cines.fr/saml2/metadata'
2024-02-07 15:58:52,307 - - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:396] - Metadata Resolver FileBackedHTTPMetadataResolver LockSelf: Next refresh cycle for metadata provider 'https://multipass-preprod.cines.fr/saml2/metadata' will occur on '2024-02-07T14:58:57.306470Z' ('2024-02-07T15:58:57.306470+01:00[Europe/Paris]' local time)
2024-02-07 15:58:52,312 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.MetadataResolverService': Completed reload and swapped in latest configuration for service 'shibboleth.MetadataResolverService'
2024-02-07 15:58:52,313 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.MetadataResolverService': Reload complete
2024-02-07 15:58:52,393 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.AttributeFilterService': Performing initial load
2024-02-07 15:58:52,393 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.AttributeFilterService': Reloading service configuration
2024-02-07 15:58:52,475 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.AttributeFilterService': Completed reload and swapped in latest configuration for service 'shibboleth.AttributeFilterService'
2024-02-07 15:58:52,476 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.AttributeFilterService': Reload complete
2024-02-07 15:58:52,477 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.AttributeFilterService': Reload interval set to: PT15M, starting refresh thread
2024-02-07 15:58:52,484 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.AttributeResolverService': Performing initial load
2024-02-07 15:58:52,484 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.AttributeResolverService': Reloading service configuration
2024-02-07 15:58:52,750 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.AttributeResolverService': Completed reload and swapped in latest configuration for service 'shibboleth.AttributeResolverService'
2024-02-07 15:58:52,751 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.AttributeResolverService': Reload complete
2024-02-07 15:58:52,752 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.AttributeResolverService': Reload interval set to: PT15M, starting refresh thread
2024-02-07 15:58:52,760 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.NameIdentifierGenerationService': Performing initial load
2024-02-07 15:58:52,761 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.NameIdentifierGenerationService': Reloading service configuration
2024-02-07 15:58:52,810 - - WARN [net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:591] - Exception encountered during context initialization - cancelling refresh attempt: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.SAML2NameIDGenerators': Cannot resolve reference to bean 'shibboleth.SAML2PersistentGenerator' while setting bean property 'sourceList' with key [1]; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.SAML2PersistentGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Cannot resolve reference to bean '#{'shibboleth.ComputedPersistentIdGenerator'.trim()}' while setting bean property 'persistentIdStore'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.ComputedPersistentIdGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Global salt and salt lookup strategy cannot both be null
2024-02-07 15:58:52,812 - - ERROR [net.shibboleth.utilities.java.support.service.AbstractReloadableService:182] - Service 'shibboleth.NameIdentifierGenerationService': Initial load failed
net.shibboleth.utilities.java.support.service.ServiceException: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.SAML2NameIDGenerators': Cannot resolve reference to bean 'shibboleth.SAML2PersistentGenerator' while setting bean property 'sourceList' with key [1]; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.SAML2PersistentGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Cannot resolve reference to bean '#{'shibboleth.ComputedPersistentIdGenerator'.trim()}' while setting bean property 'persistentIdStore'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.ComputedPersistentIdGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Global salt and salt lookup strategy cannot both be null
at net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:377)
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.SAML2NameIDGenerators': Cannot resolve reference to bean 'shibboleth.SAML2PersistentGenerator' while setting bean property 'sourceList' with key [1]; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.SAML2PersistentGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Cannot resolve reference to bean '#{'shibboleth.ComputedPersistentIdGenerator'.trim()}' while setting bean property 'persistentIdStore'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.ComputedPersistentIdGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Global salt and salt lookup strategy cannot both be null
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:342)
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.SAML2PersistentGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Cannot resolve reference to bean '#{'shibboleth.ComputedPersistentIdGenerator'.trim()}' while setting bean property 'persistentIdStore'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.ComputedPersistentIdGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Global salt and salt lookup strategy cannot both be null
at org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:342)
Caused by: org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.ComputedPersistentIdGenerator' defined in class path resource [net/shibboleth/idp/conf/saml-nameid-system.xml]: Invocation of init method failed; nested exception is net.shibboleth.utilities.java.support.component.ComponentInitializationException: Global salt and salt lookup strategy cannot both be null
at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1804)
Caused by: net.shibboleth.utilities.java.support.component.ComponentInitializationException: Global salt and salt lookup strategy cannot both be null
at net.shibboleth.idp.attribute.impl.ComputedPairwiseIdStore.doInitialize(ComputedPairwiseIdStore.java:274)
2024-02-07 15:58:52,816 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:187] - Service 'shibboleth.NameIdentifierGenerationService': Continuing to poll configuration
2024-02-07 15:58:52,817 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.NameIdentifierGenerationService': Reload interval set to: PT15M, starting refresh thread
2024-02-07 15:58:52,821 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.RelyingPartyResolverService': Performing initial load
2024-02-07 15:58:52,822 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.RelyingPartyResolverService': Reloading service configuration
2024-02-07 15:58:53,296 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.RelyingPartyResolverService': Completed reload and swapped in latest configuration for service 'shibboleth.RelyingPartyResolverService'
2024-02-07 15:58:53,297 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.RelyingPartyResolverService': Reload complete
2024-02-07 15:58:53,298 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.RelyingPartyResolverService': Reload interval set to: PT15M, starting refresh thread
2024-02-07 15:58:53,301 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.ReloadableAccessControlService': Performing initial load
2024-02-07 15:58:53,301 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.ReloadableAccessControlService': Reloading service configuration
2024-02-07 15:58:53,328 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.ReloadableAccessControlService': Completed reload and swapped in latest configuration for service 'shibboleth.ReloadableAccessControlService'
2024-02-07 15:58:53,328 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.ReloadableAccessControlService': Reload complete
2024-02-07 15:58:53,329 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.ReloadableAccessControlService': Reload interval set to: PT5M, starting refresh thread
2024-02-07 15:58:53,337 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.ReloadableCASServiceRegistry': Performing initial load
2024-02-07 15:58:53,338 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.ReloadableCASServiceRegistry': Reloading service configuration
2024-02-07 15:58:53,347 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.ReloadableCASServiceRegistry': Completed reload and swapped in latest configuration for service 'shibboleth.ReloadableCASServiceRegistry'
2024-02-07 15:58:53,347 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.ReloadableCASServiceRegistry': Reload complete
2024-02-07 15:58:53,348 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.ReloadableCASServiceRegistry': Reload interval set to: PT15M, starting refresh thread
2024-02-07 15:58:53,351 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:173] - Service 'shibboleth.ManagedBeanService': Performing initial load
2024-02-07 15:58:53,352 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:259] - Service 'shibboleth.ManagedBeanService': Reloading service configuration
2024-02-07 15:58:53,353 - - INFO [net.shibboleth.ext.spring.util.ApplicationContextBuilder:346] - Skipping non-existent resource: ServletContext resource [/opt/shibboleth-idp/conf/managed-beans.xml]
2024-02-07 15:58:53,355 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:421] - Service 'shibboleth.ManagedBeanService': Completed reload and swapped in latest configuration for service 'shibboleth.ManagedBeanService'
2024-02-07 15:58:53,355 - - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:428] - Service 'shibboleth.ManagedBeanService': Reload complete
2024-02-07 15:58:53,356 - - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:200] - Service 'shibboleth.ManagedBeanService': Reload interval set to: PT15M, starting refresh thread
2024-02-07 15:58:53,562 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:55] - Shibboleth IdP Version 4.3.1
2024-02-07 15:58:53,563 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:56] - Java version='11.0.21' vendor='Red Hat, Inc.'
2024-02-07 15:58:53,564 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:69] - No Plugins Loaded
2024-02-07 15:58:53,578 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:100] - Enabled Modules:
2024-02-07 15:58:53,578 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] - Password Authentication
2024-02-07 15:58:53,579 - - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:102] - Hello World
2024-02-07 15:58:54,553 - - INFO [net.shibboleth.idp.authn.impl.RemoteUserAuthServlet:214] - RemoteUserAuthServlet will process REMOTE_USER, along with attributes [] and headers []
2024-02-07 15:58:57,694 - - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:591] - Metadata Resolver FileBackedHTTPMetadataResolver LockSelf: New metadata successfully loaded for 'https://multipass-preprod.cines.fr/saml2/metadata'
2024-02-07 15:58:57,695 - - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:396] - Metadata Resolver FileBackedHTTPMetadataResolver LockSelf: Next refresh cycle for metadata provider 'https://multipass-preprod.cines.fr/saml2/metadata' will occur on '2024-02-07T17:58:57.403424Z' ('2024-02-07T18:58:57.403424+01:00[Europe/Paris]' local time)
----------------
attributes_sent_by_idp
urn:oid:2.5.4.4
0: "izoret"
urn:oid:2.5.4.42
0 "philippe"
urn:oid:1.3.6.1.1.1.1.1:
0 "25501"
upn_sent_by_idp : "AAdzZWNyZXQxZeIj7ngxkWk5Tj4m3bop3J9JiSA+Z3DytGzRR4ETuJVZB2h2AsfLXU31s+sl9+tcytAvR+PDBoGQ+TWFFnYDRfxUV3+BnnjBL85/Z0MhMOMMT0JYSuKXEVolm3rboSS5n1XRACMzbhaNKWZEFGzfHBWxxkA6w=="
lockself_errors
0: "'firstname' variable is required"
1: "'lastname' variable is required"
2: "'mail' variable is required. Can be skip if 'upn' is sent"
3: "'groups' variable is missing. Maybe you doesn't want to use it"
-----------
Wich logs can i give you .. Sp Logs ? IDP Logs ?
Regards,
Philippe.
De: "Nate Klingenstein" <ndk at sudonym.me>
À: "Shib Users" <users at shibboleth.net>
Envoyé: Mercredi 7 Février 2024 15:32:10
Objet: Re: Ignoring NameIDFormat metadata that includes the 'unspecified' format
Philippe,
upn_sent_by_idp"AAdzZWNyZXQxZeIj7ngxkWk5Tj4m3bop3J9JiSA+Z3DytGzRR4ETuJVZB2h2AsfLXU31s+sl9+tcytAvR+PDBoGQ+TWFFnYDRfxUV3+BnnjBL85/Z0MhMOMMT0JYSuKXEVolm3rboSS5n1XRACMzbhaNKWZEFGzfHBWxxkA6w=="
BQ_BEGIN
IDP seems doing the job, but not the SP.
BQ_END
This is indicative of the IdP sending a transientID rather than an unspecified ID, so I think the problem remains on your end for now.
First, you’ll need an unspecified NameID defined to release. This is done in same-nameid.xml, but it references attributes defined in the attribute resolver.
[ https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631672/CustomNameIDGenerationConfiguration#General-Procedure | https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631672/CustomNameIDGenerationConfiguration#General-Procedure ]
Then, you need the override in place. That may or may not be there; we can’t tell without seeing your logs.
Hope this helps,
Nate
--
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240207/1af36965/attachment.htm>
More information about the users
mailing list