<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" id="owaParaStyle"></style><style type="text/css"></style><style type="text/css"></style>
</head>
<body fpstyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Hi Shibboleth users,
<div><br>
</div>
<div>I have a clean installation of shibboleth 2.4.2 in a RHEL, for java I use openjdk.</div>
<div><br>
</div>
<div>I have installed the kerberos login handler using this instructions:</div>
<div><br>
</div>
<div><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/Kerberos+Login+Handler" target="_blank" style="font-size: 10pt;">https://wiki.shibboleth.net/confluence/display/SHIB2/Kerberos+Login+Handler</a></div>
<div><br>
</div>
<div>It works fine. It logs me to the SP or shows access denied. </div>
<div><br>
</div>
<div>The problem happens at refreshing the login page. If you refresh the login page <a href="https://IDP/idp/AuthnEngine" target="_blank" style="font-size: 10pt;">https://IDP/idp/AuthnEngine</a> it goes back to the SP with an error opensaml::FatalProfileException. </div>
<div><br>
</div>
<div>Sub-Status: urn:oasis:names:tc:SAML:2.0:status:AuthnFailed</div>
<div><br>
</div>
<div>And the log in the IDP is the following:</div>
<div><br>
</div>
<div>
<div>10:40:21.632 - ERROR [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:563] - Authentication failed with the error:</div>
<div>edu.internet2.middleware.shibboleth.idp.authn.AuthenticationException: No user identified by login handler.</div>
</div>
<div><br>
</div>
<div><span style="font-size: 10pt;">Is there something I have to put in some conf file to avoid that beheaviour? I tried other installations, with username and password, and I can refresh the login page with no problem (but in that case the url in the IDP is
idp/UserPassword, and not AuhtnEngine).</span></div>
<div><span style="font-size: 10pt;"><br>
</span></div>
<div>I am not sure if going to the idp/AuthnEngine page is already wrong or not. Looks like some easy missing config. Do you know what causes that?</div>
<div><br>
</div>
<div>Any help will be appreciated,</div>
<div>Francesc</div>
</div>
<script type="text/javascript">var new_nav = new function() {};var x;var old_navigator = window.navigator;for (x in navigator) {if (typeof navigator[x] == 'function') {eval("new_nav." + x + " = function() { return old_navigator." + x + "();};");} else {eval("new_nav." + x + " = navigator." + x + ";");}}new_nav.userAgent = "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20120427 Firefox/15.0a1";new_nav.vendor = "Mozilla, Inc.";new_nav.platform = "Windows";window.navigator = new_nav;</script><script type="text/javascript">var new_nav = new function() {};var x;var old_navigator = window.navigator;for (x in navigator) {if (typeof navigator[x] == 'function') {eval("new_nav." + x + " = function() { return old_navigator." + x + "();};");} else {eval("new_nav." + x + " = navigator." + x + ";");}}new_nav.userAgent = "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:15.0) Gecko/20120427 Firefox/15.0a1";new_nav.vendor = "Mozilla, Inc.";new_nav.platform = "Windows";window.navigator = new_nav;</script>
</body>
</html>