<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix"><br>
Hi Paul,<br>
<br>
The mechanism for endorsement in Glassfish is to place jars in the
~/glassfish3/glassfish/lib/endorsed directory.<br>
<br>
FWIW endorsing alone did not work for me. What was the key step
was the renaming (or removal) of the META-INF/services directory
in the xercesImpl-2.10.0.jar used by Glassfish. The reason is that
Glassfish gets into ClassLoader confusion when classes mentioned
in META-INF/services are loaded by JAXP API instead of the ones
that are provided by the JDK. Note I did try endrosement alone
without the META-INF/services directory hack and it gave the
error:<br>
<br>
<span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;"
id="docs-internal-guid-67ebb44e-58b6-dadc-540f-e075edbbe516">
javax.xml.stream.FactoryConfigurationError: Provider
com.ctc.wstx.stax.WstxInputFactory not found</span><br>
<br>
Lastly, I copied the xercesImpl-2.10.0.jar (with rename of
META-ING/services directory) and <span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;"
id="docs-internal-guid-67ebb44e-58b6-dadc-540f-e075edbbe516"><span
style="font-size:15px;font-family:Arial;color:#000000;background-color:transparent;font-weight:normal;font-style:normal;font-variant:normal;text-decoration:none;vertical-align:baseline;"
id="docs-internal-guid-67ebb44e-58c8-012c-a4d3-4b06bf5e529b">xml-apis-2.10.0.jar
to </span></span>~/glassfish3/glassfish/domains/domain1/lib
rather than the ~/glassfish3/glassfish/lib/endorsed directory to
limit the scope and impact of these jars to only my specific SP,
IdP and OpenLDAP webapps in my Glassfish domain domain1.<br>
<br>
BTW, see my recent message that I have successfully deployed IdP
in Glassfish 3.2.2.2. Thanks for your kind help.<br>
<br>
<br>
On 06/19/2013 12:00 PM, Paul Hethmon wrote:<br>
</div>
<blockquote
cite="mid:CDE74D06.34A91%25paul.hethmon@clareitysecurity.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<div>Farrukh,</div>
<div><br>
</div>
<div>You must endorse Xerces/Xalan by whatever method Glassfish
wants:</div>
<div><br>
</div>
<div><a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPTroubleshootingCommonErrors">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPTroubleshootingCommonErrors</a></div>
<div><br>
</div>
<div>Paul</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt;
text-align:left; color:black; BORDER-BOTTOM: medium none;
BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT:
0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid;
BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Farrukh Najmi
<<a moz-do-not-send="true"
href="mailto:farrukh@wellfleetsoftware.com">farrukh@wellfleetsoftware.com</a>><br>
<span style="font-weight:bold">Reply-To: </span>Shibboleth
Users <<a moz-do-not-send="true"
href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br>
<span style="font-weight:bold">Date: </span>Wednesday, June
19, 2013 11:36 AM<br>
<span style="font-weight:bold">To: </span>Shibboleth Users
<<a moz-do-not-send="true"
href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br>
<span style="font-weight:bold">Subject: </span>Re: Deploy
Shib2 IdP in Glassfish 3<br>
</div>
<div><br>
</div>
<span style="color: rgb(0, 0, 0); font-family: Arial; font-size:
15px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: normal; orphans:
2; text-align: -webkit-auto; text-indent: 0px; text-transform:
none; white-space: normal; widows: 2; word-spacing: 0px;
-webkit-text-size-adjust: auto; -webkit-text-stroke-width:
0px; background-color: rgb(255, 255, 255); display: inline
!important; float: none; ">What I have gathered so far is that
direct use of xerces classes in opensaml (and possibly IdP) is
not a good fit with Glassfish which expects that JAXP
implementation provided by the JDK to be used. The kludge /
workaround I list above seems to work though I need to test
this further. The open question is whether Shib projects can
and should consider removing the explicit dependency on xerces
and instead rely on standard JAXP API.<span
class="Apple-converted-space"> </span></span><br
class="kix-line-break" style="color: rgb(0, 0, 0);
font-family: Arial; font-size: 15px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: normal; orphans: 2; text-align:
-webkit-auto; text-indent: 0px; text-transform: none;
white-space: normal; widows: 2; word-spacing: 0px;
-webkit-text-size-adjust: auto; -webkit-text-stroke-width:
0px; background-color: rgb(255, 255, 255); ">
</span>
<br>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Regards,
Farrukh Najmi
Web: <a class="moz-txt-link-freetext" href="http://www.wellfleetsoftware.com">http://www.wellfleetsoftware.com</a>
</pre>
</body>
</html>