<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Aug 3, 2015, at 8:35 PM, Paul Caskey <<a href="mailto:pcaskey@internet2.edu" class="">pcaskey@internet2.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div style="font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt;" class="">Yes, java remained at ver 8 for both 9.3 and 9.2, so it seems like a jetty issue.<br class=""><br class=""><br class=""></span></div></div></blockquote><div><br class=""></div>May not be the same issue, but in trying Jetty 9.3 last week, we couldn't seem to get the cookie handling to work right with JSESSIONID. At first, it wasn't being written out at all with the login page, so the IdP had no context to link the returned login page to, and just presented the login page again. We got jsessionid to get written out with the login page, but then Jetty wasn't returning it thru to the IdP on the way back in, at least not as the IdP expected it. So, again, the login page just kept being presented with no errors in the log. We then gave up, and went back to 9.2. Figured we'd just messed up jetty-base somehow, didn't yet have time to dig into it more.</div><div><br class=""><blockquote type="cite" class=""><div class=""><div style="font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt;" class=""><span style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 11pt;" class=""><br class=""><span style="" class="">-----Original Message-----<span class="Apple-converted-space"> </span><br class=""><b class="">From:</b><span class="Apple-converted-space"> </span>Cantor, Scott [<a href="mailto:cantor.2@osu.edu" class="">cantor.2@osu.edu</a>]<br class=""><b class="">Received:</b><span class="Apple-converted-space"> </span>Monday, 03 Aug 2015, 7:25PM<br class=""><b class="">To:</b><span class="Apple-converted-space"> </span>Shib Users [<a href="mailto:users@shibboleth.net" class="">users@shibboleth.net</a>]<br class=""><b class="">Subject:</b><span class="Apple-converted-space"> </span>Re: idp login issue connecting to ldap<br class=""><br class=""></span></span></div><font size="2" style="font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-size: 10pt;" class="">On 8/3/15, 8:13 PM, "users on behalf of Paul Caskey" <<a href="mailto:users-bounces@shibboleth.net" class="">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:pcaskey@internet2.edu" class="">pcaskey@internet2.edu</a>> wrote:<br class=""><br class=""><br class=""><br class="">>First, I have not read this entire thread, so my apologies if this is completely off-base, but it might be relevant. I was recently working on a new V3 IdP and ran into an issue where trying to login (via the normal login form) resulted in a simple re-display of the login page with no displayed errors and no messages written to idp-process.log, even with ldaptive and idp in DEBUG.<br class=""><br class="">Sounds similar.<br class=""><br class="">>I was running Jetty 9.3. I reverted to 9.2 and then started getting errors messages in idp-process.log. The errors basically indicated that I had not installed the JCE, which I had overlooked (error was invalid key length for the sealer key, IIRC). That IdP is now running fine on Jetty 9.2 (with JCE), I never went back to 9.3. <br class=""><br class="">I assume you mean "with full-strength policy files", the JCE is there regardless.<br class=""><br class="">That's more likely to be a Java 7 vs. 8 issue than Jetty (were you still on 8?), but more to the point I can't off-hand think of a connection between that component and this particular part of the system.<br class=""><br class="">The policy isn't supposed to matter for AES-128, but that never seems to be very consistent, and we just documented it as requiring the full-strength files regardless.<br class=""><br class="">-- Scott<br class=""><br class="">-- <br class="">To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" class="">users-unsubscribe@shibboleth.net</a><br class=""></span></font><span style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">--<span class="Apple-converted-space"> </span></span><br style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><span style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">To unsubscribe from this list send an email to<span class="Apple-converted-space"> </span></span><a href="mailto:users-unsubscribe@shibboleth.net" style="font-family: Helvetica; font-size: 14px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">users-unsubscribe@shibboleth.net</a></div></blockquote></div><br class=""><div class="">
<br class="">--<br class="">Michael A. Grady<br class="">IAM Architect, Unicon, Inc.
</div>
<br class=""></body></html>