Issues with IdP 5.0 upgrade

[Diego Figueroa]

Thank you Peter for the information.

> OS / distribution and version?
> Tomcat distribution and version?
> File system permissions? Account Tomcat / the JVM runs as?
> SELinux?
> Systemd protections?

Ubuntu 22.04.4 LTS
OpenJDK 64-Bit Server VM Corretto-17.0.11.9.1 (build 17.0.11+9-LTS, mixed mode, sharing)
All files are owned by the shib user who runs Tomcat, All folders are 700, files are 600 except the executables are 700.
No SELinux
No systemd protections

Yesterday, I poked some more and when I try to look at /idp/index.jsp or /idp/error.jsp I alternate between these two exceptions when reloading:


org.apache.jasper.JasperException: /error.jsp (line: [7], column: [4]) Unable to load tag handler class [org.springframework.web.servlet.tags.MessageTag] for tag [spring:message]
        org.apache.jasper.compiler.DefaultErrorHandler.jspError(DefaultErrorHandler.java:41)
        org.apache.jasper.compiler.ErrorDispatcher.dispatch(ErrorDispatcher.java:299)
        org.apache.jasper.compiler.ErrorDispatcher.jspError(ErrorDispatcher.java:99)
        org.apache.jasper.compiler.Parser.parseCustomTag(Parser.java:1245)
        org.apache.jasper.compiler.Parser.parseElements(Parser.java:1475)
        org.apache.jasper.compiler.Parser.parse(Parser.java:144)
        org.apache.jasper.compiler.ParserController.doParse(ParserController.java:245)
        org.apache.jasper.compiler.ParserController.parse(ParserController.java:106)
        org.apache.jasper.compiler.Compiler.generateJava(Compiler.java:207)
        org.apache.jasper.compiler.Compiler.compile(Compiler.java:392)
        org.apache.jasper.compiler.Compiler.compile(Compiler.java:368)
        org.apache.jasper.compiler.Compiler.compile(Compiler.java:352)
        org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:603)
        org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:399)
        org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:379)
        org.apache.jasper.servlet.JspServlet.service(JspServlet.java:327)
        javax.servlet.http.HttpServlet.service(HttpServlet.java:623)
        org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:51)

and

org.apache.jasper.JasperException: org.apache.jasper.JasperException: java.lang.ClassNotFoundException: org.apache.jsp.error_jsp
        org.apache.jasper.servlet.JspServletWrapper.handleJspException(JspServletWrapper.java:589)
        org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:425)
        org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:379)
        org.apache.jasper.servlet.JspServlet.service(JspServlet.java:327)
        javax.servlet.http.HttpServlet.service(HttpServlet.java:623)
        org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:51)

For the former error I do see spring.tld file has the MessageTag tag defined in it.

Thank you,

Diego

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Peter Schober via users <users at shibboleth.net>
Sent: May 14, 2024 5:13 AM
To: users at shibboleth.net <users at shibboleth.net>
Cc: Peter Schober <peter.schober at univie.ac.at>
Subject: Re: Issues with IdP 5.0 upgrade

Diego Figueroa via users <users at shibboleth.net> [2024-05-13 19:30 CEST]:
> I started Tomcat after copying the new war file to the webapps
> folder and I am getting no errors in catalina.out and only this
> warning:

Why copy the war file somewhere else? Just point Tomcat to it with a
Deployment Context Fragment e.g. /etc/tomcat10/Catalina/localhost/idp.xml

<Context docBase="/opt/shibboleth-idp/war/idp.war"
    privileged="true"
    antiResourceLocking="false"
    swallowOutput="true">
    <JarScanner>
      <JarScanFilter defaultTldScan="false" />
    </JarScanner>
</Context>

> However, all the IdP logs are empty and if I try to hit any of the
> known IdP URLs (e.g., idp/shibboleth) I get a 404 from Tomcat even
> though the IdP war file was expanded.

OS / distribution and version?
Tomcat distribution and version?
File system permissions? Account Tomcat / the JVM runs as?
SELinux?
Systemd protections?

-peter
--
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240514/9394d86e/attachment.htm>