<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi, <br>
<br>
I have configured IdP v3 to use LDAP and have linked an SP to use
that IdP, when logging in with valid credentials the SP reports back
<b>"The username you entered cannot be identified."</b><span
style="color: rgb(182, 22, 1); font-family: Verdana, Geneva,
sans-serif; font-size: 14px; font-style: normal; font-variant:
normal; font-weight: normal; letter-spacing: normal; line-height:
21px; orphans: 2; text-align: start; text-indent: 0px;
text-transform: none; white-space: normal; widows: 2;
word-spacing: 0px; -webkit-text-size-adjust: auto;
-webkit-text-stroke-width: 0px; background-color: rgb(255, 255,
255); display: inline !important; float: none; "> </span>and logs
in idp-warn.log as "Profile Action
ValidateUsernamePasswordAgainstLDAP: Login by 'user1' failed" - IdP
seems to load LDAP correctly.<br>
<br>
Any pointers? I've listed the
idp-warn.log/idp.properties/ldap.properties.<br>
<br>
2016-03-15 12:47:54,971 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:258]
- Service 'shibboleth.AttributeResolverService': Reloading service
configuration<br>
2016-03-15 12:47:54,973 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/attribute-resolver.xml]<br>
2016-03-15 12:47:54,985 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id:
eduPersonPrincipalName<br>
2016-03-15 12:47:54,986 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP<br>
2016-03-15 12:47:54,986 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id: uid<br>
2016-03-15 12:47:54,986 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP<br>
2016-03-15 12:47:54,987 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id: mail<br>
2016-03-15 12:47:54,987 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP<br>
2016-03-15 12:47:54,987 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id:
givenName<br>
2016-03-15 12:47:54,987 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP<br>
2016-03-15 12:47:54,988 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id:
surname<br>
2016-03-15 12:47:54,988 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP<br>
2016-03-15 12:47:54,988 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id:
commonName<br>
2016-03-15 12:47:54,988 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP<br>
2016-03-15 12:47:54,989 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for DataConnector plugin with id: myLDAP<br>
2016-03-15 12:47:54,989 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:577]
- Refreshing ApplicationContext:shibboleth.AttributeResolverService:
startup date [Tue Mar 15 12:47:54 GMT 2016]; parent: Root
WebApplicationContext<br>
2016-03-15 12:47:55,126 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:378] -
Service 'shibboleth.AttributeResolverService': Completed reload and
swapped in latest configuration for service
'shibboleth.AttributeResolverService'<br>
2016-03-15 12:47:55,127 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:957]
- Closing ApplicationContext:shibboleth.AttributeResolverService:
startup date [Tue Mar 15 11:49:23 GMT 2016]; parent: Root
WebApplicationContext<br>
2016-03-15 12:47:55,144 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:385] -
Service 'shibboleth.AttributeResolverService': Reload complete<br>
2016-03-15 12:47:55,148 - INFO [Shibboleth-Audit.Reload:241] -
20160315T124755Z||||<a class="moz-txt-link-freetext" href="http://shibboleth.net/ns/profiles/reload-service-configuration">http://shibboleth.net/ns/profiles/reload-service-configuration</a>|||||||||<br>
2016-03-15 12:48:18,214 - INFO
[net.shibboleth.ext.spring.context.DelimiterAwareApplicationContext:957]
- Closing WebApplicationContext for namespace 'idp-servlet': startup
date [Tue Mar 15 11:49:25 GMT 2016]; parent: Root
WebApplicationContext<br>
2016-03-15 12:48:18,248 - INFO
[net.shibboleth.ext.spring.context.DelimiterAwareApplicationContext:957]
- Closing Root WebApplicationContext: startup date [Tue Mar 15
11:49:20 GMT 2016]; root of context hierarchy<br>
2016-03-15 12:48:18,251 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:207]
- Service 'shibboleth.AttributeFilterService': Starting shutdown<br>
2016-03-15 12:48:18,251 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:216]
- Service 'shibboleth.AttributeFilterService': Completing shutdown<br>
2016-03-15 12:48:18,252 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:957]
- Closing ApplicationContext:shibboleth.MetadataResolverService:
startup date [Tue Mar 15 11:49:24 GMT 2016]; parent: Root
WebApplicationContext<br>
2016-03-15 12:48:18,253 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:207]
- Service 'shibboleth.MetadataResolverService': Starting shutdown<br>
2016-03-15 12:48:18,253 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:216]
- Service 'shibboleth.MetadataResolverService': Completing shutdown<br>
2016-03-15 12:48:18,253 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:957]
- Closing ApplicationContext:shibboleth.AttributeResolverService:
startup date [Tue Mar 15 12:47:54 GMT 2016]; parent: Root
WebApplicationContext<br>
2016-03-15 12:48:18,258 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:207]
- Service 'shibboleth.AttributeResolverService': Starting shutdown<br>
2016-03-15 12:48:18,258 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:216]
- Service 'shibboleth.AttributeResolverService': Completing shutdown<br>
2016-03-15 12:48:18,261 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:957]
- Closing
ApplicationContext:shibboleth.NameIdentifierGenerationService:
startup date [Tue Mar 15 11:49:24 GMT 2016]; parent: Root
WebApplicationContext<br>
2016-03-15 12:48:18,263 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:207]
- Service 'shibboleth.NameIdentifierGenerationService': Starting
shutdown<br>
2016-03-15 12:48:18,263 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:216]
- Service 'shibboleth.NameIdentifierGenerationService': Completing
shutdown<br>
2016-03-15 12:48:18,264 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:957]
- Closing ApplicationContext:shibboleth.RelyingPartyResolverService:
startup date [Tue Mar 15 11:49:24 GMT 2016]; parent: Root
WebApplicationContext<br>
2016-03-15 12:48:18,265 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:207]
- Service 'shibboleth.RelyingPartyResolverService': Starting
shutdown<br>
2016-03-15 12:48:18,265 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:216]
- Service 'shibboleth.RelyingPartyResolverService': Completing
shutdown<br>
2016-03-15 12:48:18,265 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:957]
- Closing
ApplicationContext:shibboleth.ReloadableAccessControlService:
startup date [Tue Mar 15 11:49:24 GMT 2016]; parent: Root
WebApplicationContext<br>
2016-03-15 12:48:18,266 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:207]
- Service 'shibboleth.ReloadableAccessControlService': Starting
shutdown<br>
2016-03-15 12:48:18,271 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:216]
- Service 'shibboleth.ReloadableAccessControlService': Completing
shutdown<br>
2016-03-15 12:48:18,272 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:957]
- Closing
ApplicationContext:shibboleth.ReloadableCASServiceRegistry: startup
date [Tue Mar 15 11:49:24 GMT 2016]; parent: Root
WebApplicationContext<br>
2016-03-15 12:48:18,272 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:207]
- Service 'shibboleth.ReloadableCASServiceRegistry': Starting
shutdown<br>
2016-03-15 12:48:18,272 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:216]
- Service 'shibboleth.ReloadableCASServiceRegistry': Completing
shutdown<br>
2016-03-15 12:48:18,283 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:207]
- Service 'shibboleth.LoggingService': Starting shutdown<br>
2016-03-15 12:48:18,283 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:216]
- Service 'shibboleth.LoggingService': Completing shutdown<br>
2016-03-15 12:48:27,082 - INFO
[net.shibboleth.idp.log.LogbackLoggingService:240] - Shibboleth IdP
Version 3.2.1<br>
2016-03-15 12:48:27,086 - INFO
[net.shibboleth.idp.log.LogbackLoggingService:241] - Java
version='1.8.0_73' vendor='Oracle Corporation'<br>
2016-03-15 12:48:27,091 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:199]
- Service 'shibboleth.LoggingService': Reload time set to: 300000,
starting refresh thread<br>
2016-03-15 12:48:27,115 - INFO
[org.opensaml.core.config.InitializationService:48] - Initializing
OpenSAML using the Java Services API<br>
2016-03-15 12:48:27,626 - INFO
[org.opensaml.xmlsec.algorithm.AlgorithmRegistry:206] - Algorithm
failed runtime support check, will not be usable:
<a class="moz-txt-link-freetext" href="http://www.w3.org/2001/04/xmlenc#ripemd160">http://www.w3.org/2001/04/xmlenc#ripemd160</a><br>
2016-03-15 12:48:27,630 - INFO
[org.opensaml.xmlsec.algorithm.AlgorithmRegistry:206] - Algorithm
failed runtime support check, will not be usable:
<a class="moz-txt-link-freetext" href="http://www.w3.org/2001/04/xmldsig-more#hmac-ripemd160">http://www.w3.org/2001/04/xmldsig-more#hmac-ripemd160</a><br>
2016-03-15 12:48:27,639 - INFO
[org.opensaml.xmlsec.algorithm.AlgorithmRegistry:206] - Algorithm
failed runtime support check, will not be usable:
<a class="moz-txt-link-freetext" href="http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160">http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160</a><br>
2016-03-15 12:48:27,965 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:172]
- Service 'shibboleth.AttributeFilterService': Performing initial
load<br>
2016-03-15 12:48:27,966 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:258]
- Service 'shibboleth.AttributeFilterService': Reloading service
configuration<br>
2016-03-15 12:48:27,970 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/attribute-filter.xml]<br>
2016-03-15 12:48:28,007 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:577]
- Refreshing ApplicationContext:shibboleth.AttributeFilterService:
startup date [Tue Mar 15 12:48:28 GMT 2016]; parent: Root
WebApplicationContext<br>
2016-03-15 12:48:28,035 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:378] -
Service 'shibboleth.AttributeFilterService': Completed reload and
swapped in latest configuration for service
'shibboleth.AttributeFilterService'<br>
2016-03-15 12:48:28,036 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:385] -
Service 'shibboleth.AttributeFilterService': Reload complete<br>
2016-03-15 12:48:28,043 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:199]
- Service 'shibboleth.AttributeFilterService': Reload time set to:
900000, starting refresh thread<br>
2016-03-15 12:48:28,047 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:172]
- Service 'shibboleth.AttributeResolverService': Performing initial
load<br>
2016-03-15 12:48:28,047 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:258]
- Service 'shibboleth.AttributeResolverService': Reloading service
configuration<br>
2016-03-15 12:48:28,053 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/attribute-resolver.xml]<br>
2016-03-15 12:48:28,079 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id:
eduPersonPrincipalName<br>
2016-03-15 12:48:28,080 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP<br>
2016-03-15 12:48:28,086 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id: uid<br>
2016-03-15 12:48:28,087 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP<br>
2016-03-15 12:48:28,088 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id: mail<br>
2016-03-15 12:48:28,088 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP<br>
2016-03-15 12:48:28,088 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id:
givenName<br>
2016-03-15 12:48:28,089 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP<br>
2016-03-15 12:48:28,089 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id:
surname<br>
2016-03-15 12:48:28,089 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP<br>
2016-03-15 12:48:28,095 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id:
commonName<br>
2016-03-15 12:48:28,095 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP<br>
2016-03-15 12:48:28,100 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for DataConnector plugin with id: myLDAP<br>
2016-03-15 12:48:28,123 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:577]
- Refreshing ApplicationContext:shibboleth.AttributeResolverService:
startup date [Tue Mar 15 12:48:28 GMT 2016]; parent: Root
WebApplicationContext<br>
2016-03-15 12:48:28,616 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:378] -
Service 'shibboleth.AttributeResolverService': Completed reload and
swapped in latest configuration for service
'shibboleth.AttributeResolverService'<br>
2016-03-15 12:48:28,616 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:385] -
Service 'shibboleth.AttributeResolverService': Reload complete<br>
2016-03-15 12:48:28,616 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:199]
- Service 'shibboleth.AttributeResolverService': Reload time set to:
900000, starting refresh thread<br>
2016-03-15 12:48:28,622 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:172]
- Service 'shibboleth.NameIdentifierGenerationService': Performing
initial load<br>
2016-03-15 12:48:28,622 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:258]
- Service 'shibboleth.NameIdentifierGenerationService': Reloading
service configuration<br>
2016-03-15 12:48:28,627 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/saml-nameid.xml]<br>
2016-03-15 12:48:28,648 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/system/conf/saml-nameid-system.xml]<br>
2016-03-15 12:48:28,658 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:577]
- Refreshing
ApplicationContext:shibboleth.NameIdentifierGenerationService:
startup date [Tue Mar 15 12:48:28 GMT 2016]; parent: Root
WebApplicationContext<br>
2016-03-15 12:48:28,720 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:378] -
Service 'shibboleth.NameIdentifierGenerationService': Completed
reload and swapped in latest configuration for service
'shibboleth.NameIdentifierGenerationService'<br>
2016-03-15 12:48:28,722 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:385] -
Service 'shibboleth.NameIdentifierGenerationService': Reload
complete<br>
2016-03-15 12:48:28,723 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:199]
- Service 'shibboleth.NameIdentifierGenerationService': Reload time
set to: 900000, starting refresh thread<br>
2016-03-15 12:48:28,727 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:172]
- Service 'shibboleth.RelyingPartyResolverService': Performing
initial load<br>
2016-03-15 12:48:28,728 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:258]
- Service 'shibboleth.RelyingPartyResolverService': Reloading
service configuration<br>
2016-03-15 12:48:28,736 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/relying-party.xml]<br>
2016-03-15 12:48:28,751 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/credentials.xml]<br>
2016-03-15 12:48:28,761 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/system/conf/relying-party-system.xml]<br>
2016-03-15 12:48:28,779 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:577]
- Refreshing
ApplicationContext:shibboleth.RelyingPartyResolverService: startup
date [Tue Mar 15 12:48:28 GMT 2016]; parent: Root
WebApplicationContext<br>
2016-03-15 12:48:28,947 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:172]
- Service 'shibboleth.MetadataResolverService': Performing initial
load<br>
2016-03-15 12:48:28,947 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:258]
- Service 'shibboleth.MetadataResolverService': Reloading service
configuration<br>
2016-03-15 12:48:28,948 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/metadata-providers.xml]<br>
2016-03-15 12:48:28,988 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/system/conf/metadata-providers-system.xml]<br>
2016-03-15 12:48:28,997 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:577]
- Refreshing ApplicationContext:shibboleth.MetadataResolverService:
startup date [Tue Mar 15 12:48:28 GMT 2016]; parent: Root
WebApplicationContext<br>
2016-03-15 12:48:29,071 - INFO
[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:465]
- New metadata successfully loaded for
'/opt/shibboleth-idp/metadata/sp-metadata.xml'<br>
2016-03-15 12:48:29,084 - INFO
[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:306]
- Next refresh cycle for metadata provider
'/opt/shibboleth-idp/metadata/sp-metadata.xml' will occur on
'2016-03-15T15:48:29.037Z' ('2016-03-15T15:48:29.037Z' local time)<br>
2016-03-15 12:48:29,088 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:378] -
Service 'shibboleth.MetadataResolverService': Completed reload and
swapped in latest configuration for service
'shibboleth.MetadataResolverService'<br>
2016-03-15 12:48:29,088 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:385] -
Service 'shibboleth.MetadataResolverService': Reload complete<br>
2016-03-15 12:48:29,162 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:378] -
Service 'shibboleth.RelyingPartyResolverService': Completed reload
and swapped in latest configuration for service
'shibboleth.RelyingPartyResolverService'<br>
2016-03-15 12:48:29,162 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:385] -
Service 'shibboleth.RelyingPartyResolverService': Reload complete<br>
2016-03-15 12:48:29,162 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:199]
- Service 'shibboleth.RelyingPartyResolverService': Reload time set
to: 900000, starting refresh thread<br>
2016-03-15 12:48:29,165 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:172]
- Service 'shibboleth.ReloadableAccessControlService': Performing
initial load<br>
2016-03-15 12:48:29,165 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:258]
- Service 'shibboleth.ReloadableAccessControlService': Reloading
service configuration<br>
2016-03-15 12:48:29,167 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/access-control.xml]<br>
2016-03-15 12:48:29,182 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/system/conf/access-control-system.xml]<br>
2016-03-15 12:48:29,191 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:577]
- Refreshing
ApplicationContext:shibboleth.ReloadableAccessControlService:
startup date [Tue Mar 15 12:48:29 GMT 2016]; parent: Root
WebApplicationContext<br>
2016-03-15 12:48:29,204 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:378] -
Service 'shibboleth.ReloadableAccessControlService': Completed
reload and swapped in latest configuration for service
'shibboleth.ReloadableAccessControlService'<br>
2016-03-15 12:48:29,204 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:385] -
Service 'shibboleth.ReloadableAccessControlService': Reload complete<br>
2016-03-15 12:48:29,204 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:199]
- Service 'shibboleth.ReloadableAccessControlService': Reload time
set to: 300000, starting refresh thread<br>
2016-03-15 12:48:29,208 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:172]
- Service 'shibboleth.ReloadableCASServiceRegistry': Performing
initial load<br>
2016-03-15 12:48:29,208 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:258]
- Service 'shibboleth.ReloadableCASServiceRegistry': Reloading
service configuration<br>
2016-03-15 12:48:29,210 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/cas-protocol.xml]<br>
2016-03-15 12:48:29,217 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:577]
- Refreshing
ApplicationContext:shibboleth.ReloadableCASServiceRegistry: startup
date [Tue Mar 15 12:48:29 GMT 2016]; parent: Root
WebApplicationContext<br>
2016-03-15 12:48:29,229 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:378] -
Service 'shibboleth.ReloadableCASServiceRegistry': Completed reload
and swapped in latest configuration for service
'shibboleth.ReloadableCASServiceRegistry'<br>
2016-03-15 12:48:29,229 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:385] -
Service 'shibboleth.ReloadableCASServiceRegistry': Reload complete<br>
2016-03-15 12:48:29,229 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:199]
- Service 'shibboleth.ReloadableCASServiceRegistry': Reload time set
to: 900000, starting refresh thread<br>
2016-03-15 12:48:29,405 - INFO
[net.shibboleth.ext.spring.context.DelimiterAwareApplicationContext:577]
- Refreshing WebApplicationContext for namespace 'idp-servlet':
startup date [Tue Mar 15 12:48:29 GMT 2016]; parent: Root
WebApplicationContext<br>
2016-03-15 12:48:29,886 - INFO
[net.shibboleth.idp.authn.impl.RemoteUserAuthServlet:193] -
RemoteUserAuthServlet will process REMOTE_USER, along with
attributes [] and headers []<br>
2016-03-15 12:48:34,785 - ERROR [org.apache.velocity:96] -
ResourceManager : unable to find resource 'status.vm' in any
resource loader.<br>
<b>2016-03-15 12:50:11,928 - INFO
[net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:152]
- Profile Action ValidateUsernamePasswordAgainstLDAP: Login by
'user1' failed</b><b><br>
</b><b>2016-03-15 12:50:18,282 - INFO
[net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:152]
- Profile Action ValidateUsernamePasswordAgainstLDAP: Login by
'domain\user1' failed</b><br>
<br>
<br>
<br>
<br>
idp.properties<br>
<br>
# Load any additional property resources from a comma-delimited list<br>
idp.additionalProperties= /conf/ldap.properties,
/conf/saml-nameid.properties, /conf/services.properties<br>
<br>
# Set the entityID of the IdP<br>
idp.entityID= <a class="moz-txt-link-freetext" href="https://shibv3-idp.ebi.ac.uk/idp/shibboleth">https://shibv3-idp.ebi.ac.uk/idp/shibboleth</a><br>
<br>
# Set the scope used in the attribute resolver for scoped attributes<br>
idp.scope= ebi.ac.uk<br>
<br>
# Settings for internal AES encryption key<br>
idp.sealer.storeResource= %{idp.home}/credentials/sealer.jks<br>
idp.sealer.versionResource= %{idp.home}/credentials/sealer.kver<br>
idp.sealer.storePassword= xxxxxx<br>
idp.sealer.keyPassword= xxxxxx<br>
<br>
# Settings for public/private signing and encryption key(s)<br>
# During decryption key rollover, point the ".2" properties at a
second<br>
# keypair, uncomment in credentials.xml, then publish it in your
metadata.<br>
idp.signing.key= %{idp.home}/credentials/idp-signing.key<br>
idp.signing.cert= %{idp.home}/credentials/idp-signing.crt<br>
idp.encryption.key= %{idp.home}/credentials/idp-encryption.key<br>
idp.encryption.cert= %{idp.home}/credentials/idp-encryption.crt<br>
<br>
# Name of access control policy for various admin flows<br>
idp.status.accessPolicy= AccessByIPAddress<br>
idp.resolvertest.accessPolicy= AccessByIPAddress<br>
idp.reload.accessPolicy= AccessByIPAddress<br>
<br>
# Comma-delimited languages to use if not match can be found with
the<br>
# browser-supported languages, defaults to an empty list.<br>
idp.ui.fallbackLanguages= en,fr,de<br>
<br>
---------<br>
ldap.properties<br>
<br>
# LDAP authentication configuration, see authn/ldap-authn-config.xml<br>
# Note, this doesn't apply to the use of JAAS<br>
<br>
## Authenticator strategy, either anonSearchAuthenticator,
bindSearchAuthenticator, directAuthenticator, adAuthenticator<br>
idp.authn.LDAP.authenticator =
bindSearchAuthenticator<br>
<br>
## Connection properties ##<br>
idp.authn.LDAP.ldapURL =
<a class="moz-txt-link-freetext" href="ldaps://xxxx1.ebi.ac.uk:636">ldaps://xxxx1.ebi.ac.uk:636</a> \<br>
<a class="moz-txt-link-freetext" href="ldaps://xxxx2.ebi.ac.uk:636">ldaps://xxxx2.ebi.ac.uk:636</a> <br>
idp.authn.LDAP.useStartTLS = false<br>
idp.authn.LDAP.useSSL = true<br>
<br>
## SSL configuration, either jvmTrust, certificateTrust, or
keyStoreTrust<br>
idp.authn.LDAP.sslConfig = certificateTrust<br>
## If using certificateTrust above, set to the trusted certificate's
path<br>
idp.authn.LDAP.trustCertificates =
%{idp.home}/credentials/ldap-server.crt<br>
idp.authn.LDAP.trustCertificates =
/etc/pki/tls/certs/ca-bundle.crt<br>
## If using keyStoreTrust above, set to the truststore path<br>
idp.authn.LDAP.trustStore =
%{idp.home}/credentials/ldap-server.truststore<br>
<br>
## Return attributes during authentication<br>
## NOTE: there is a separate property used for attribute resolution<br>
idp.authn.LDAP.returnAttributes =
passwordExpirationTime,loginGraceRemaining<br>
<br>
## DN resolution properties ##<br>
<br>
# Search DN resolution, used by anonSearchAuthenticator,
bindSearchAuthenticator<br>
# for AD: CN=Users,DC=example,DC=org<br>
idp.authn.LDAP.baseDN =
ou=people,dc=ebi,dc=ac,dc=uk<br>
idp.authn.LDAP.subtreeSearch = true<br>
idp.authn.LDAP.userFilter =
(&(uid={0})(eduPersonAffiliation=*)) <br>
# bind search configuration<br>
# for AD: <a class="moz-txt-link-abbreviated" href="mailto:idp.authn.LDAP.bindDN=adminuser@domain.com">idp.authn.LDAP.bindDN=adminuser@domain.com</a><br>
idp.authn.LDAP.bindDN =
uid=xxxxxxxxxx,ou=people,dc=ebi,dc=ac,dc=uk<br>
idp.authn.LDAP.bindDNCredential = xxxxxxxxxxxx <br>
<br>
# Format DN resolution, used by directAuthenticator, adAuthenticator<br>
# for AD use <a class="moz-txt-link-abbreviated" href="mailto:idp.authn.LDAP.dnFormat=%s@domain.com">idp.authn.LDAP.dnFormat=%s@domain.com</a><br>
idp.authn.LDAP.dnFormat =
uid=%s,ou=people,dc=example,dc=org<br>
<br>
# LDAP attribute configuration, see attribute-resolver.xml<br>
# Note, this likely won't apply to the use of legacy V2 resolver
configurations<br>
idp.attribute.resolver.LDAP.ldapURL =
%{idp.authn.LDAP.ldapURL}<br>
idp.attribute.resolver.LDAP.baseDN =
%{idp.authn.LDAP.baseDN:undefined}<br>
idp.attribute.resolver.LDAP.bindDN =
%{idp.authn.LDAP.bindDN:undefined}<br>
idp.attribute.resolver.LDAP.bindDNCredential =
%{idp.authn.LDAP.bindDNCredential:undefined}<br>
idp.attribute.resolver.LDAP.useStartTLS =
%{idp.authn.LDAP.useStartTLS:true}<br>
idp.attribute.resolver.LDAP.trustCertificates =
%{idp.authn.LDAP.trustCertificates:undefined}<br>
idp.attribute.resolver.LDAP.searchFilter =
(uid=$resolutionContext.principal)<br>
idp.attribute.resolver.LDAP.returnAttributes = cn,sn,uid,mail<br>
<br>
<br>
<br>
<br>
</body>
</html>