<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri","sans-serif";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoPlainText">I set up all the configuration as detailed in the documents Benjamin referenced. When I log in from a web browser, no errors are logged but I'm still not seeing the username in the request/session headers. When I try to run aacli, there's
still nothing in the log, but on the console I'm seeing the stack trace below. I'm not really sure why aacli would need ServletRequest. Does anybody know what might be going on?<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Thanks,<o:p></o:p></p>
<p class="MsoPlainText">Eric Stein<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">attribute-resolver.xml:<o:p></o:p></p>
<p class="MsoPlainText"><span style="font-family:"Courier New""><resolver:AttributeDefinition xsi:type="ad:Simple" id="uid" sourceAttributeID="my_user"><o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:"Courier New""> <resolver:Dependency ref="ATTRIBUTE_DATA_CONNECTOR" /><o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:"Courier New""></resolver:AttributeDefinition><o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:"Courier New""><resolver:DataConnector xsi:type="RelationalDatabase"
<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:"Courier New""> xmlns="urn:mace:shibboleth:2.0:resolver:dc"<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:"Courier New""> id="ATTRIBUTE_DATA_CONNECTOR"<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:"Courier New""> queryUsesStoredProcedure="false"<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:"Courier New""> noResultIsError="true"><o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:"Courier New""> <ApplicationManagedConnection jdbcDriver="net.sourceforge.jtds.jdbc.Driver"<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:"Courier New""> jdbcURL="jdbc:jtds:sqlserver://my_database_server:1433/my_database"<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:"Courier New""> jdbcUserName="db_username"<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:"Courier New""> jdbcPassword="db_password" /><o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:"Courier New""> <QueryTemplate><o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:"Courier New""> <![CDATA[<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:"Courier New""> SELECT my_user FROM my_user_table WHERE my_user='$requestContext.principalName'<o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:"Courier New""> ]]><o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:"Courier New""> </QueryTemplate><o:p></o:p></span></p>
<p class="MsoPlainText"><span style="font-family:"Courier New""></resolver:DataConnector><o:p></o:p></span></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">C:\Users\steine\Desktop>c:\shibboleth-2.3.8\bin\aacli.bat --principal steine<o:p></o:p></p>
<p class="MsoPlainText">Exception in thread "main" org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'shibboleth.HandlerManager': Initialization of bean failed; nested exception is java.lang.NoClassDefFoundError: javax/servlet/ServletRequest<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:480)<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory$1.run(AbstractAutowireCapableBeanFactory.java:409)<o:p></o:p></p>
<p class="MsoPlainText"> at java.security.AccessController.doPrivileged(Native Method)<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:380)<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:264)<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222)<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:261)<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:185)<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:164)<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:429)<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:728)<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:380)<o:p></o:p></p>
<p class="MsoPlainText"> at edu.internet2.middleware.shibboleth.common.attribute.AttributeAuthorityCLI.loadConfigurations(AttributeAuthorityCLI.java:206)<o:p></o:p></p>
<p class="MsoPlainText"> at edu.internet2.middleware.shibboleth.common.attribute.AttributeAuthorityCLI.main(AttributeAuthorityCLI.java:95)<o:p></o:p></p>
<p class="MsoPlainText">Caused by: java.lang.NoClassDefFoundError: javax/servlet/ServletRequest<o:p></o:p></p>
<p class="MsoPlainText"> at java.lang.Class.getDeclaredMethods0(Native Method)<o:p></o:p></p>
<p class="MsoPlainText"> at java.lang.Class.privateGetDeclaredMethods(Unknown Source)<o:p></o:p></p>
<p class="MsoPlainText"> at java.lang.Class.privateGetPublicMethods(Unknown Source)<o:p></o:p></p>
<p class="MsoPlainText"> at java.lang.Class.getMethods(Unknown Source)<o:p></o:p></p>
<p class="MsoPlainText"> at java.beans.Introspector.getPublicDeclaredMethods(Unknown Source)<o:p></o:p></p>
<p class="MsoPlainText"> at java.beans.Introspector.getTargetMethodInfo(Unknown Source)<o:p></o:p></p>
<p class="MsoPlainText"> at java.beans.Introspector.getBeanInfo(Unknown Source)<o:p></o:p></p>
<p class="MsoPlainText"> at java.beans.Introspector.getBeanInfo(Unknown Source)<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.beans.CachedIntrospectionResults.<init>(CachedIntrospectionResults.java:220)<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.beans.CachedIntrospectionResults.forClass(CachedIntrospectionResults.java:144)<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.beans.BeanWrapperImpl.getCachedIntrospectionResults(BeanWrapperImpl.java:252)<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.beans.BeanWrapperImpl.getPropertyDescriptorInternal(BeanWrapperImpl.java:282)<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.beans.BeanWrapperImpl.isWritableProperty(BeanWrapperImpl.java:333)<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.applyPropertyValues(AbstractAutowireCapableBeanFactory.java:1247)<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.populateBean(AbstractAutowireCapableBeanFactory.java:1010)<o:p></o:p></p>
<p class="MsoPlainText"> at org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:472)<o:p></o:p></p>
<p class="MsoPlainText"> ... 13 more<o:p></o:p></p>
<p class="MsoPlainText">Caused by: java.lang.ClassNotFoundException: javax.servlet.ServletRequest<o:p></o:p></p>
<p class="MsoPlainText"> at java.net.URLClassLoader$1.run(Unknown Source)<o:p></o:p></p>
<p class="MsoPlainText"> at java.security.AccessController.doPrivileged(Native Method)<o:p></o:p></p>
<p class="MsoPlainText"> at java.net.URLClassLoader.findClass(Unknown Source)<o:p></o:p></p>
<p class="MsoPlainText"> at java.lang.ClassLoader.loadClass(Unknown Source)<o:p></o:p></p>
<p class="MsoPlainText"> at sun.misc.Launcher$AppClassLoader.loadClass(Unknown Source)<o:p></o:p></p>
<p class="MsoPlainText"> at java.lang.ClassLoader.loadClass(Unknown Source)<o:p></o:p></p>
<p class="MsoPlainText"> ... 29 more<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">-----Original Message-----<br>
From: users-bounces@shibboleth.net [mailto:users-bounces@shibboleth.net] On Behalf Of Mosior, Benjamin<br>
Sent: Tuesday, April 09, 2013 8:40 AM<br>
To: Shib Users<br>
Subject: RE: Providing attributes from CAS</p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Eric,<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Take a look at the CAS documentation on the topic: <a href="https://wiki.jasig.org/display/CASUM/Shibboleth-CAS+Integration">
<span style="color:windowtext;text-decoration:none">https://wiki.jasig.org/display/CASUM/Shibboleth-CAS+Integration</span></a><o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">The LoginHandler stanza that is added to the IdP's handler.xml facilitates the transfer of the CAS username to the Shibboleth IdP via the RemoteUser authentication method. The IdP then has the CAS-returned username. Yay.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Next, the IdP needs to use that username to look up attributes. This is where the ResolverRDBMSDataConnector you mention below comes into play. You'll essentially have to form an SQL query such as: SELECT * FROM PEOPLE WHERE userid='$requestContext.principalName'
(an example from the page you linked below). That $requestContext.principalName is the username CAS passed to Shibboleth.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">The next step from there would be to define which attributes to resolve and how/when to release them. You'll want to follow the basic flow of this page:
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAddAttribute"><span style="color:windowtext;text-decoration:none">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAddAttribute</span></a><o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Benjamin Mosior<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">-----Original Message-----<o:p></o:p></p>
<p class="MsoPlainText">From: <a href="mailto:users-bounces@shibboleth.net"><span style="color:windowtext;text-decoration:none">users-bounces@shibboleth.net</span></a>
<a href="mailto:[mailto:users-bounces@shibboleth.net]"><span style="color:windowtext;text-decoration:none">[mailto:users-bounces@shibboleth.net]</span></a> On Behalf Of Stein, Eric<o:p></o:p></p>
<p class="MsoPlainText">Sent: Tuesday, April 09, 2013 8:16 AM<o:p></o:p></p>
<p class="MsoPlainText">To: Shib Users<o:p></o:p></p>
<p class="MsoPlainText">Subject: RE: Providing attributes from CAS<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">I did find <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverRDBMSDataConnector">
<span style="color:windowtext;text-decoration:none">https://wiki.shibboleth.net/confluence/display/SHIB2/ResolverRDBMSDataConnector</span></a>, which looks like what I should be using for all the other attributes. I'm still really not clear on how to get access
to the username. How do I take it from the authentication step?<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Thanks,<o:p></o:p></p>
<p class="MsoPlainText">Eric<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">--<o:p></o:p></p>
<p class="MsoPlainText">To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
<span style="color:windowtext;text-decoration:none">users-unsubscribe@shibboleth.net</span></a><o:p></o:p></p>
</div>
</body>
</html>