<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Folks:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>First of all a very big THANK YOU to Peter Schober and Chad La Joie for their invaluable suggestions. Adding my jar file to the $IDP_HOME/lib location, as well as to the war file made a big difference. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>By looking at the user-contributed project for x509 external authentication I have progressed to the point where I am both arriving at my External Auth servlet, and getting the following messages in my idp-process.log file:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>11:41:51.900 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:514] - Completing user authentication process<o:p></o:p></p><p class=MsoNormal>11:41:51.900 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:585] - Validating authentication was performed successfully<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I am now confused by the behavior of the login.jsp in my idp webapp. After a “successful” authentication indication in the idp-process.lig file (above) I wind up on the error.jsp page in the idp project. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>The process flow goes like this:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Hit the “protected URL”.<o:p></o:p></p><p class=MsoNormal>Get to the login page<o:p></o:p></p><p class=MsoNormal>Enter a user id and password<o:p></o:p></p><p class=MsoNormal>Hit submit<o:p></o:p></p><p class=MsoNormal>Logs indicate a successful trip through my external handler servlet and successful auth by Auth Engine<o:p></o:p></p><p class=MsoNormal>Land on error .jsp page.<o:p></o:p></p><p class=MsoNormal>(if I pull down the “recent destinations menu in firefox and re-send to the last url, I see the page I originally expected)<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>My suspicion is that there is missing information in the request or response object from the servlet, before returning control to the AuthEngine class. The “repeat send” behavior suggests that there’s an SSO token hanging around for me somewhere. But examining the processing done in the x509 object doesn’t provide me with a clue as to what specific field in the Request or Response object needs to be se in order to let the Login.jsp page know that the Authentication really took place successfully. I would have guessed that once the Authentication Engine is logging a successful auth result, it would have placed an indication of that success into the appropriate object. This is probably my lack of web application programming knowledge but I’m stumped.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>If anyone has experience with this kind of thing, I could really use a hint.<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Best regards,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Martin pardee<o:p></o:p></p><p class=MsoNormal><a href="mailto:mlp@research.att.com">mlp@research.att.com</a><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>PS – <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>My servlet’s service() method looks like this:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal> protected void service(HttpServletRequest request, HttpServletResponse response)<o:p></o:p></p><p class=MsoNormal> throws ServletException, IOException<o:p></o:p></p><p class=MsoNormal> {<o:p></o:p></p><p class=MsoNormal> String username = request.getParameter("j_username");<o:p></o:p></p><p class=MsoNormal> String password = request.getParameter("j_password");<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal> if ((username == null) || (password == null)) {<o:p></o:p></p><p class=MsoNormal> redirectToLoginPage(request, response);<o:p></o:p></p><p class=MsoNormal> return;<o:p></o:p></p><p class=MsoNormal> }<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal> Subject subject = new Subject();<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal> Set<Principal> principals = subject.getPrincipals();<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal> // Add the public credentials of the subject<o:p></o:p></p><p class=MsoNormal> Set publicCredentials = subject.getPublicCredentials();<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal> request.setAttribute(LoginHandler.SUBJECT_KEY, subject);<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal> request.setAttribute(LoginHandler.AUTHENTICATION_METHOD_KEY, "urn:oasis:names:tc:SAML:2.0:ac:classes:SAFE");<o:p></o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal> AuthenticationEngine.returnToAuthenticationEngine(request, response); <o:p></o:p></p><p class=MsoNormal>}<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal> <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>