<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>Update. This has been resolved and all appears to be working as expected at this time. The resolution was to downgrade the following jars as indicated in the shibboleth-identityprovider-2.4.0/lib directory and then run the install script. </div>
<div>
<div>- downgraded bcprov-jdk15-1.46.jar to bcprov-jdk15-1.45.jar</div>
<div>- downgraded xmlsec-1.5.4.jar to xmlsec-1.4.5.jar</div>
<div>- downgraded xmltooling-1.4.0.jar to xmltooling-1.3.3.jar</div>
</div>
<div><br>
</div>
<div>Apparently, the new jars are not compatible with my architecture: RHEL5, JBoss_5_1_0_GA and /opt/java/jdk1.6.0_22. In troubleshooting, I did try the install with the latest jdk, but even then I still got the same error. Did not try with RHEL6 or updated
version of JBoss. </div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span><Hall>, Gerry <<a href="mailto:gerry.hall@emory.edu">gerry.hall@emory.edu</a>><br>
<span style="font-weight:bold">Date: </span>Thursday, December 26, 2013 10:37 AM<br>
<span style="font-weight:bold">To: </span>Shib Users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br>
<span style="font-weight:bold">Subject: </span>IdP Error after upgrading to version 2.4.0<br>
</div>
<div><br>
</div>
<blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;">
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>
<div>I am having a problem after upgrading to IdP version 2.4.0 from version 2.3.5 that I hope that someone can offer advice on. </div>
<div><br>
</div>
<div>About a month ago, I upgraded my SP's to version 2.5.2. I tested and all seemed to be fine. This week I started the upgrade of the IdP's from version 2.3.5 to version 2.4.0. I went thru the steps as documented on the shibboleth wiki, and again all appeared
to be fine during the upgrade (no errors). I then deployed the new 2.4.0 idp.war file. However, I know get the following error when I try to authenticate using the new 2.4.0 IdP (this is from the idp-process.log). Rolling back to IdP version 2.3.5, and
all works as expected. </div>
<div><br>
</div>
<div>This may not be true, but it seems to be a problem related to the cipher. Has anyone else seem this and if so, can you offer advice on how to resolve? The IdP is running on RHEL5 (64-bit) and jboss-5.1.0.GA with java jdk1.6.0_22.</div>
<div><br>
</div>
<div>
<div>07:44:36.480 - INFO [Shibboleth-Access:73] - 20131226T124436Z|170.140.202.40|login.emory.edu:4443|/profile/SAML2/Redirect/SSO|</div>
<div>07:44:55.353 - INFO [Shibboleth-Access:73] - 20131226T124455Z|170.140.202.40|login.emory.edu:4443|/profile/SAML2/Redirect/SSO|</div>
<div>07:44:56.013 - ERROR [edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet:88] - Error occurred while processing request</div>
<div>java.lang.IllegalArgumentException: unknown parameter type.</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.bouncycastle.jce.provider.JCERSACipher.engineInit(Unknown Source) ~[bcprov-jdk15-1.46.jar:1.46.0]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at javax.crypto.Cipher.a(DashoA13*..) ~[na:1.6]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at javax.crypto.Cipher.a(DashoA13*..) ~[na:1.6]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at javax.crypto.Cipher.init(DashoA13*..) ~[na:1.6]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at javax.crypto.Cipher.init(DashoA13*..) ~[na:1.6]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.xml.security.encryption.XMLCipher.encryptKey(XMLCipher.java:1354) ~[xmlsec.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.xml.security.encryption.XMLCipher.encryptKey(XMLCipher.java:1297) ~[xmlsec.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.opensaml.xml.encryption.Encrypter.encryptKey(Encrypter.java:346) ~[xmltooling-1.4.0.jar:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.opensaml.xml.encryption.Encrypter.encryptKey(Encrypter.java:287) ~[xmltooling-1.4.0.jar:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.opensaml.xml.encryption.Encrypter.encryptKey(Encrypter.java:263) ~[xmltooling-1.4.0.jar:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.opensaml.saml2.encryption.Encrypter.encrypt(Encrypter.java:358) ~[opensaml-2.6.0.jar:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.opensaml.saml2.encryption.Encrypter.encrypt(Encrypter.java:258) ~[opensaml-2.6.0.jar:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler.buildResponse(AbstractSAML2ProfileHandler.java:287) ~[shibboleth-identityprovider-2.4.0.jar:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.completeAuthenticationRequest(SSOProfileHandler.java:319) ~[shibboleth-identityprovider-2.4.0.jar:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:173) ~[shibboleth-identityprovider-2.4.0.jar:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.processRequest(SSOProfileHandler.java:90) ~[shibboleth-identityprovider-2.4.0.jar:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet.service(ProfileRequestDispatcherServlet.java:83) ~[shibboleth-common-1.4.0.jar:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at javax.servlet.http.HttpServlet.service(HttpServlet.java:717) [servlet-api.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at edu.internet2.middleware.shibboleth.idp.util.NoCacheFilter.doFilter(NoCacheFilter.java:50) [shibboleth-identityprovider-2.4.0.jar:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilter(IdPSessionFilter.java:87) [shibboleth-identityprovider-2.4.0.jar:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at edu.internet2.middleware.shibboleth.common.log.SLF4JMDCCleanupFilter.doFilter(SLF4JMDCCleanupFilter.java:52) [shibboleth-common-1.4.0.jar:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(Unknown Source) [jboss-web-service.jar!/:5.1.0.GA (build: SVNTag=JBoss_5_1_0_GA date=20090723)]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:235) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(Unknown Source) [jboss-web-service.jar!/:5.1.0.GA (build: SVNTag=JBoss_5_1_0_GA date=20090723)]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.jboss.web.tomcat.security.JaccContextValve.invoke(Unknown Source) [jboss-web-service.jar!/:5.1.0.GA (build: SVNTag=JBoss_5_1_0_GA date=20090723)]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.process(Unknown Source) [jboss-web-service.jar!/:5.1.0.GA (build: SVNTag=JBoss_5_1_0_GA date=20090723)]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.invoke(Unknown Source) [jboss-web-service.jar!/:5.1.0.GA (build: SVNTag=JBoss_5_1_0_GA date=20090723)]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(Unknown Source) [jboss-web-service.jar!/:5.1.0.GA (build: SVNTag=JBoss_5_1_0_GA date=20090723)]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:330) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:436) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.coyote.ajp.AjpProtocol$AjpConnectionHandler.process(AjpProtocol.java:384) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447) [jbossweb.jar!/:na]</div>
<div><span class="Apple-tab-span" style="white-space: pre; "></span>at java.lang.Thread.run(Thread.java:662) [na:1.6.0_22]</div>
<div>07:45:17.013 - INFO [Shibboleth-Access:73] - 20131226T124517Z|170.140.202.40|login.emory.edu:4443|/profile/SAML2/Redirect/SSO|</div>
<div>07:45:17.070 - INFO [Shibboleth-Access:73] - 20131226T124517Z|170.140.202.40|login.emory.edu:4443|/profile/SAML2/Redirect/SSO|</div>
</div>
</div>
</div>
</div>
</blockquote>
</span><br>
<hr>
<font face="Arial" color="Gray" size="1"><br>
This e-mail message (including any attachments) is for the sole use of<br>
the intended recipient(s) and may contain confidential and privileged<br>
information. If the reader of this message is not the intended<br>
recipient, you are hereby notified that any dissemination, distribution<br>
or copying of this message (including any attachments) is strictly<br>
prohibited.<br>
<br>
If you have received this message in error, please contact<br>
the sender by reply e-mail message and destroy all copies of the<br>
original message (including attachments).<br>
</font>
</body>
</html>