<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:23333338;
mso-list-type:hybrid;
mso-list-template-ids:-1716093830 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Good Afternoon,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">My IDP( which previously worked, and is version 2.3.6 on a Win Server 2008 R2 Box) is now no longer releasing attributes to SPs. I’ve attempted to fix it for the past two days, and my attempts have not been successful. I’m hoping you might
be able to shed some light on a fix, or tell me if a fresh install might be a better route.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Earlier this week Java was updated on the server, and afterwards I was unable to successfully start the Apache Tomcat Service. (To be fair, I’m
<i>assuming</i> the Java update caused the service to fail—I could be wrong. It’s not a live box yet, so it could have not been working for two months and no one would have been aware--in theory.)<o:p></o:p></p>
<p class="MsoNormal"><br>
To fix it I have:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo1"><![if !supportLists]><span style="mso-list:Ignore">1.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Uninstalled the new java.<o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo1"><![if !supportLists]><span style="mso-list:Ignore">2.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Resinstalled an old version. (JRE6, v34)<o:p></o:p></p>
<p class="MsoListParagraph" style="text-indent:-.25in;mso-list:l0 level1 lfo1"><![if !supportLists]><span style="mso-list:Ignore">3.<span style="font:7.0pt "Times New Roman"">
</span></span><![endif]>Imported copies of my certificates for my LDAP server into the Java’s key store because the old key store was deleted. (LDAP server is Active Directory)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I am now able to successfully start the Apache Tomcat Service on the server, and I can successfully authenticate with various SPs (TestShib, InCommon, Box) but…<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">… I cannot seem to pass attributes on to any of them.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The IDP audit Log shows:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">“20130201T190340Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|_ce87ff20d90e5753d37c8bfb7873d90f|https://sp.testshib.org/shibboleth-sp|urn:mace:shibboleth:2.0:profiles:saml2:sso|https://icarus.sdstate.edu/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_b9462eea45b03c3ff6e6349b60e8caff|andy.kanuch|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport<span style="background:yellow;mso-highlight:yellow">|||</span>_3c770b9fa285c7e8d4dd816689c5575e,|”<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">If I understand how the logging mechanism formats output, the attributes being passed should appear at near the end after PasswordProtectedTransport, right?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’ve confirmed the user/pass for the account that runs our LDAP queries, and tested it with an LDAP tool.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I ran ACCLI Command with the following: bin\aacli.bat --configDir=conf/ --principal=andy.kanuch --requester=https://sp.testshib.org/ (My first time, and I think the syntax is accurate.)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">It returns:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Exception in thread "main" org.springframework.beans.factory.BeanCreationExcepti<o:p></o:p></p>
<p class="MsoNormal">on: Error creating bean with name 'shibboleth.HandlerManager': Initialization of<o:p></o:p></p>
<p class="MsoNormal">bean failed; nested exception is java.lang.NoClassDefFoundError: javax/servlet/<o:p></o:p></p>
<p class="MsoNormal">ServletRequest<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.beans.factory.support.AbstractAutowireCapableBean…<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">(verbose, and then continues with…)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Caused by: java.lang.NoClassDefFoundError: javax/servlet/ServletRequest<o:p></o:p></p>
<p class="MsoNormal"> at java.lang.Class.getDeclaredMethods0(Native Method)<o:p></o:p></p>
<p class="MsoNormal"> at java.lang.Class.privateGetDeclaredMethods(Unknown Source)<o:p></o:p></p>
<p class="MsoNormal"> at java.lang.Class.privateGetPublicMethods(Unknown Source)<o:p></o:p></p>
<p class="MsoNormal"> at java.lang.Class.getMethods(Unknown Source)<o:p></o:p></p>
<p class="MsoNormal"> at java.beans.Introspector.getPublicDeclaredMethods(Unknown Source)<o:p></o:p></p>
<p class="MsoNormal"> at java.beans.Introspector.getTargetMethodInfo(Unknown Source)<o:p></o:p></p>
<p class="MsoNormal"> at java.beans.Introspector.getBeanInfo(Unknown Source)<o:p></o:p></p>
<p class="MsoNormal"> at java.beans.Introspector.getBeanInfo(Unknown Source)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.beans.CachedIntrospectionResults.<init>(CachedInt<o:p></o:p></p>
<p class="MsoNormal">rospectionResults.java:220)<o:p></o:p></p>
<p class="MsoNormal"> at org.springframework.beans.CachedIntrospectionResults.forClass(CachedI<o:p></o:p></p>
<p class="MsoNormal">ntrospectionResults.java:144)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Am I using the the AACLI tool as intended? (To see if an IDP is releasing attributes for a specific SP profile?) Maybe I reverted back to the wrong version of Java? Or is there something else you might suggestion I have done in error?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you for your time.<o:p></o:p></p>
</div>
</body>
</html>