Ex: Re: idp 5.11 with Jetty 12, duo fail

[Paul B. Henson]

> From: Cantor, Scott <cantor.2 at osu.edu>
> Sent: Monday, March 25, 2024 1:03 PM
> 
> Without much more than that, I got the testbed to run and did a full test that
> included Duo (using the new passwordless mode we're working on), so it
> certainly had that plugin plus scripting plus the OIDC common plugin in the
> classpath.

Thanks, I really appreciate you taking the time to try and reproduce this.

> So...I wouldn't bet a lot of money on it, but I'd probably bet a few bucks, that
> you're experiencing a local corruption issue with the war of some kind that's
> probably something to do with duplicated jars.

I wiped my testbed and just did a clean install directly from the distribution with the default config and verified I could get to the login prompt for the hello app. Then I added the plug-in, without changing anything else, and again got that error. I confirmed there was only one copy of the jar file in the war:

idp-dev-01-swap war # unzip -l idp.war | grep -i duo
    39182  03-25-2024 15:51   WEB-INF/lib/idp-plugin-duo-api-2.0.0.jar
    89505  03-25-2024 15:51   WEB-INF/lib/idp-plugin-duo-impl-2.0.0.jar
    40312  03-25-2024 15:51   WEB-INF/lib/idp-plugin-duo-nimbus-client-impl-2.0.0.jar

but it turned out there were indeed two of them in the jetty working directory where it had extracted the war:

idp-dev-01-swap jetty-127_0_0_1-80-idp_war-_idp-any-10824638488520165161 # find | grep -i duo
./webapp/WEB-INF/lib/idp-plugin-duo-nimbus-client-impl-2.0.0.jar
./webapp/WEB-INF/lib/idp-plugin-duo-impl-2.0.0.jar
./webapp/WEB-INF/lib/idp-plugin-duo-api-2.0.0.jar
./webinf/WEB-INF/lib/idp-plugin-duo-nimbus-client-impl-2.0.0.jar
./webinf/WEB-INF/lib/idp-plugin-duo-impl-2.0.0.jar
./webinf/WEB-INF/lib/idp-plugin-duo-api-2.0.0.jar

One in a webapp directory and one in a webinf directory?

webapp/WEB-INF/lib and webinf/WEB-INF/lib appear to be the identical set of jar files. Looking at my existing production jetty 9 system, there is only a webinf directory in the temporary area, not a webapp directory.

I see you updated the java-idp-jetty-base repo, I will compare what you committed to my configuration and try to sort out why my side is broken. I do see you went with ee10 instead of ee9, given jetty 11 was ee9 I assumed that was a safer bet than ee10, but maybe I was wrong…

Thanks much again…