Shibboleth Developers

[Barbara Jensen <>]

I've been hunting down this problem today, and here's what I came up
with:

The database on alliance.colorado.edu seems to be setup correctly.  In
order to test this, I made the internet2 Handle Service point at the
colorado database, and it could insert new handle entries and see the
table just fine.  However, this brought about another problem, when
the Shire servlet would error right after the handle was inserted.  A
peek in shib1's error log gave

Caught a SAML exception: Bad Handle or Handle Service Problem:
                    HandleException: getHandleEntry() cannot find
                    matching record

even when the particular handle WAS in the database, and (i'm pretty
sure) access levels were correct.  

I was not able to get the colorado site past a null pointer exception,
and my next lame guess is that the problem lies elsewhere in the web
server configuration.  Possibly not reading in the database drivers 
correctly? 

Scott, Parvis: could you give me some ideas on what could be giving me
the above error from shib1?  

thanks,
barbara


> From: 
> <>
> Date: Fri, 10 May 2002 10:01:32 -0400
> 
> > 
> > From: "Dan Jones" 
> > <>
> > Date: 2002/05/09 Thu PM 05:04:43 EDT
> > To: "'Steven Carmody'" 
> > <>
> > Subject: RE: java program, check shib configuration
> > 
> > When we first ran CheckXML.java it could not connect to the mysql
> > database.  We modified the privileges for the shib account to allow it
> > access from any host rather than just the local host.  We now get the
> > following output:
> > 
> > alliance:/home/alliance/easter> rjava CheckXML
> > /usr/local/tomcat/webapps/shibb/WEB-INF/web.xml
> > Reading /usr/local/tomcat/webapps/shibb/WEB-INF/web.xml...
> > Trying to connect to MySQL database at alliance.colorado.edu as user
> > shib with password shib
> > url jdbc:mysql://alliance.colorado.edu/shib?user=shib&password=shib
> > Connection succeeded
> > 
> > However, access from the I2 shib demo site "University of Colorado,
> > direct to Colorado Handle Server" link results in the following output
> > after the authentication:
> > 
> > Shibboleth Handle Request
> > Request for Target URL:
> > http://80-search.epnet.com.p-p-f.dilbert2.cis.brown.edu:8080/shiblogin.a
> > sp?custid=s8986063
> > SHIRE URL:
> > http://dilbert2.cis.brown.edu:1080/shibdest/servlet/ShireServlet
> > Remote Address: 128.138.113.195
> > Authentication Type: UWNetID
> > Handle request sent
> > Handle 1c1fce2-edb778fedd-37B5A139A515C68DCF963AD065794C21 
> > issued to user jonesdr at Thu May 09 17:03:29 MDT 2002 and expiring at
> > Thu May 09 17:26:49 MDT 2002
> > Handle Server Failed with: java.lang.NullPointerException 
> > 
> > Thanks - Dan
> > 
> 
> 
> 

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at 

    http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--