<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap:break-word; font-size:14px; font-family:Calibri,sans-serif">
<div style="color:rgb(0,0,0)">
<div>
<div><br>
</div>
</div>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="color:rgb(0,0,0)"><br>
</div>
<div>
<div style="word-wrap:break-word; font-family:Calibri,sans-serif">
<div>
<div>
<div style="color:rgb(0,0,0); font-size:14px">Good Day,</div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div style="color:rgb(0,0,0); font-size:14px">I would like to ask for some assistance for a newbie to Shibboleth authentication integration for Confluence. I appreciate any assistance that I receive. Thanks</div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div style="color:rgb(0,0,0); font-size:14px">********</div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div style="color:rgb(0,0,0); font-size:14px">We are running a IDP with shibboleth-2.3.1-0 on RHEL 5.6 x86_64, and Confluence connects via it's SP on RHEL 5.2 x86_64 through the remoteUserAuthenticator.jar and configuration files. We were operating fine with
remoteAuth1.7.3 and Confluence3.4, but stepping up to remoteAuth2.1.14 and Confluence4.2.4 breaks. I see this in the logging :</div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div style="color:rgb(0,0,0)">
<div><span class="Apple-style-span" style="font-size:10px"><font class="Apple-style-span" color="#0000ff">loginFailed Login failed for user null. request=com.atlassian.plugin.servlet.PluginHttpRequestWrapper@78d59bc7, username=null, remoteHost=10.110.27.153,
remoteIP=10.110.27.153, reason=NoUsername</font></span></div>
<div><span class="Apple-style-span" style="font-size:10px"><font class="Apple-style-span" color="#0000ff">2012-06-15 10:00:48,422 DEBUG [http-8090-1] [confluence.authentication.shibboleth.RemoteUserAuthenticator] loginFailed Login failed for user null. request=com.atlassian.plugin.servlet.PluginHttpRequestWrapper@78d59bc7,
username=null, remoteHost=10.110.27.153, remoteIP=10.110.27.153, reason=NoUsername</font></span></div>
<div><span class="Apple-style-span" style="font-size:10px"><font class="Apple-style-span" color="#0000ff">2012-06-15 10:00:48,426 DEBUG [http-8090-1] [confluence.authentication.shibboleth.RemoteUserAuthenticator] getUser Authenticator is returning null from
call to public Principal getUser(HttpServletRequest request, HttpServletResponse response)</font></span></div>
<div><span class="Apple-style-span" style="font-size:10px"><font class="Apple-style-span" color="#0000ff">2012-06-15 10:00:48,426 DEBUG [http-8090-1] [confluence.authentication.shibboleth.RemoteUserAuthenticator] getUser Authenticator is returning null from
call to public Principal getUser(HttpServletRequest request, HttpServletResponse response)</font></span></div>
</div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div style="color:rgb(0,0,0); font-size:14px">As far as configuration, I will remove as much extraneous verbiage to cut down on space :</div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div style="color:rgb(0,0,0); font-size:14px"><span class="Apple-style-span" style="background-color:transparent"><font class="Apple-style-span" color="#ff0000">[remoteUserAuthenticator.properties]</font></span></div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">create.users=false</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">update.info=false</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">update.last.login.date=true</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">reload.config=false</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">reload.config.check.interval=5000</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">default.roles=confluence-users</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">#header.fullname=CONF_FULL_NAME</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">#header.email=CONF_EMAIL</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">#header.remote_user=REMOTE_USER</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">header.fullname = X-Shib-cn</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">header.email = X-Shib-mail</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">header.remote_user = X-Shib-remoteUser</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">username.convertcase=true</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">update.roles=true</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">convert.to.utf8=false</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">dynamicroles.auto_create_role=false</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">dynamicroles.output.tolowercase=true</span></div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div style="color:rgb(0,0,0); font-size:14px"><font class="Apple-style-span" color="#ff0000">[seraph-config.xml]</font></div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"><security-config></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <parameters></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <init-param></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <param-name>login.url</param-name></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <param-value>/emory-login/?os_destination=${originalurl}</param-value></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> </init-param></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <init-param></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <param-name>link.login.url</param-name></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <param-value>/emory-login/</param-value></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> </init-param></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <init-param></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <param-name>cookie.encoding</param-name></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <param-value>cNf</param-value></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> </init-param></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <init-param></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <param-name>login.cookie.key</param-name></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <param-value>seraph.confluence</param-value></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> </init-param></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"><br>
</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <!--only basic authentication available--></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <init-param></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <param-name>authentication.type</param-name></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <param-value>os_authType</param-value></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> </init-param></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> </span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <!-- Invalidate session on login to prevent session fixation attack --></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <init-param></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <param-name>invalidate.session.on.login</param-name></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <param-value>true</param-value></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> </init-param></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <!-- Add names for session attributes that must not be copied to a new session when the old one gets invalidated.</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> Currently it is empty (i.e. all attributes will be copied). --></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <init-param></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <param-name>invalidate.session.exclude.list</param-name></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <param-value></param-value></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> </init-param></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> </parameters></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"><br>
</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <rolemapper class="com.atlassian.confluence.security.ConfluenceRoleMapper"/></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <controller class="com.atlassian.confluence.setup.seraph.ConfluenceSecurityController"/></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <authenticator class="shibauth.confluence.authentication.shibboleth.RemoteUserAuthenticator"/></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"><br>
</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <!--</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <authenticator class="com.atlassian.confluence.user.ConfluenceAuthenticator"/></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> --></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"><br>
</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <services></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <service class="com.atlassian.seraph.service.PathService"></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <init-param></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <param-name>config.file</param-name></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <param-value>seraph-paths.xml</param-value></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> </init-param></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> </service></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> </services></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"><br>
</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> <elevatedsecurityguard class="com.atlassian.confluence.security.seraph.ConfluenceElevatedSecurityGuard"/></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"><br>
</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"></security-config></span></div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div style="color:rgb(0,0,0)">
<div style="font-size:14px"><font class="Apple-style-span" color="#ff0000">[proxy_ajp.conf]</font></div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div>
<div style="color:rgb(0,0,0); font-size:14px">LoadModule proxy_ajp_module modules/mod_proxy_ajp.so</div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div style="color:rgb(0,0,0); font-size:14px">ProxyPass /Shibboleth.sso !</div>
<div style="color:rgb(0,0,0); font-size:14px">ProxyPass /emory-login !</div>
<div style="color:rgb(0,0,0); font-size:14px">ProxyPass / ajp://localhost:8009/</div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div style="color:rgb(0,0,0); font-size:14px">ErrorDocument 503 /emory-login/error.html</div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div style="font-size:14px"><font class="Apple-style-span" color="#ff0000">[shib.conf]</font></div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div style="color:rgb(0,0,0)">
<div style="color:rgb(0,0,0); font-size:14px">LoadModule mod_shib /usr/lib64/shibboleth/mod_shib_22.so</div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"><Location /></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> AuthType shibboleth</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> require shibboleth</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> ShibUseHeaders On</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"></Location></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"><br>
</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"><Location /emory-login/shib/></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> ShibRequireSession On</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"> require valid-user</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"></Location></span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"><br>
</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"># Convert Shib's environment variables into HTTP headers, so that</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px"># they'll be passed to Tomcat</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">RequestHeader set X-Shib-businessCategory %{businessCategory}e</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">RequestHeader set X-Shib-cn %{cn}e</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">RequestHeader set X-Shib-departmentNumber %{departmentNumber}e</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">RequestHeader set X-Shib-description %{description}e</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">RequestHeader set X-Shib-employeeType %{employeeType}e</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">RequestHeader set X-Shib-givenName %{givenName}e</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">RequestHeader set X-Shib-mail %{mail}e</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">RequestHeader set X-Shib-organizationalStatus %{organizationalStatus}e</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">RequestHeader set X-Shib-ou %{ou}e</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">RequestHeader set X-Shib-postalAddress %{postalAddress}e</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">RequestHeader set X-Shib-sn %{sn}e</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">RequestHeader set X-Shib-telephoneNumber %{telephoneNumber}e</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">RequestHeader set X-Shib-title %{title}e</span></div>
<div style="color:rgb(0,0,0)"><span class="Apple-style-span" style="font-size:10px">RequestHeader set X-Shib-remoteUser %{AUTHENTICATE_UID}e env=AUTHENTICATE_UID</span></div>
</div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
<div style="color:rgb(0,0,0); font-size:14px"><br>
</div>
</div>
</div>
</div>
</div>
<div style="color:rgb(0,0,0); font-size:14px">
<p style="margin-top:0px; margin-right:0px; margin-bottom:0px; margin-left:0px; font:normal normal normal 12px/normal 'Times New Roman'">
<font class="Apple-style-span" face="Times New Roman">Regards,</font></p>
<font class="Apple-style-span" face="Times New Roman">
<p style="margin-top:0px; margin-right:0px; margin-bottom:0px; margin-left:0px; font:normal normal normal 12px/normal 'Times New Roman'; min-height:15px">
<br>
</p>
<p style="margin-top:0px; margin-right:0px; margin-bottom:0px; margin-left:0px; font:normal normal normal 12px/normal 'Times New Roman'">
<span style="text-decoration:underline">Lyndon-Michael Gordon</span></p>
<p style="margin-top:0px; margin-right:0px; margin-bottom:0px; margin-left:0px; font:normal normal normal 9px/normal Arial">
System Administrator</p>
<p style="margin-top:0px; margin-right:0px; margin-bottom:0px; margin-left:0px; font:normal normal normal 9px/normal Arial">
Emory University Technology Services (UTS) </p>
<p style="margin-top:0px; margin-right:0px; margin-bottom:0px; margin-left:0px; font:normal normal normal 9px/normal Arial">
Integration Group</p>
<p style="margin-top:0px; margin-right:0px; margin-bottom:0px; margin-left:0px; font:normal normal normal 9px/normal Arial">
(p) : 404-712-1567</p>
</font>
<div><span class="Apple-style-span" style="font-family:Arial; font-size:9px">(e) : </span><span class="Apple-style-span" style="font-family:Arial; font-size:9px"><a href="mailto:Lyndon-Michael.Gordon@emory.edu" style="color:blue; text-decoration:underline">Lyndon-Michael.Gordon@emory.edu</a></span></div>
<div><br>
</div>
<div><br>
</div>
</div>
</div>
</div>
</div>
</div>
</span><br>
<hr>
<font face="Arial" color="Gray" size="1"><br>
This e-mail message (including any attachments) is for the sole use of<br>
the intended recipient(s) and may contain confidential and privileged<br>
information. If the reader of this message is not the intended<br>
recipient, you are hereby notified that any dissemination, distribution<br>
or copying of this message (including any attachments) is strictly<br>
prohibited.<br>
<br>
If you have received this message in error, please contact<br>
the sender by reply e-mail message and destroy all copies of the<br>
original message (including attachments).<br>
</font>
</body>
</html>