Shibboleth Developers

["Kevin P. Foote" <>]

I did a drop in replacement on this .. (as requested) on a TC enabled
IdP.

Looks like my login is successfull then the return to the authentication
engine.

Attached idp-process.log snip


If I take TC out of the picture all works as expected.


------
thanks
  kevin.foote

On Fri, 19 Feb 2010, Daniel Fisher wrote:

-> Per Chad's previous note, a snapshot release of the 2.2 IDP is now 
available.
-> I encourage everyone who uses an LDAP for either authentication or 
attribute
-> resolution to test this release.
-> 
-> Here is the link to get started:
-> https://spaces.internet2.edu/display/SHIB2/vtldap3Upgrade
-> 
-> If anyone performs any load testing, please post your results to the list.
-> Thanks.
-> 
-> --Daniel Fisher
-> 
-> 10:02:55.938 - ERROR 
[edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:190] - 
Unable to return control back to authentication engine
javax.servlet.ServletException: Servlet execution threw an exception
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:313)
 [catalina.jar:na]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
 [catalina.jar:na]
        at 
org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:646)
 [catalina.jar:na]
        at 
org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:436)
 [catalina.jar:na]
        at 
org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:374)
 [catalina.jar:na]
        at 
org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302)
 [catalina.jar:na]
        at 
edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine.forwardRequest(AuthenticationEngine.java:185)
 [shibboleth-identityprovide
r-2.2.0-SNAPSHOT.jar:na]
        at 
edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine.returnToAuthenticationEngine(AuthenticationEngine.java:149)
 [shibboleth-i
dentityprovider-2.2.0-SNAPSHOT.jar:na]
        at 
edu.internet2.middleware.shibboleth.idp.authn.provider.UsernamePasswordLoginServlet.service(UsernamePasswordLoginServlet.java:106)
 [shibbole
th-identityprovider-2.2.0-SNAPSHOT.jar:na]
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717) 
[servlet-api.jar:na]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
 [catalina.jar:na]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
 [catalina.jar:na]
        at 
edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilter(IdPSessionFilter.java:77)
 [shibboleth-identityprovider-2.2.0-SNAPS
HOT.jar:na]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
 [catalina.jar:na]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
 [catalina.jar:na]
        at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:219)
 [catalina.jar:na]
        at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
 [catalina.jar:na]
        at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128) 
[catalina.jar:na]
        at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) 
[catalina.jar:na]
        at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
 [catalina.jar:na]
        at 
org.terracotta.modules.tomcat.tomcat_5_5.SessionValve55.invoke(SessionValve55.java:57)
 [na:na]
        at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293) 
[catalina.jar:na]
        at 
org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190) 
[tomcat-coyote.jar:na]
        at 
org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291) 
[tomcat-coyote.jar:na]
        at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:769) 
[tomcat-coyote.jar:na]
        at 
org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:698) 
[tomcat-coyote.jar:na]
        at 
org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:891)
 [tomcat-coyote.jar:na]
        at 
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:690)
 [tomcat-coyote.jar:na]
        at java.lang.Thread.run(Thread.java:619) [na:1.6.0_16]
Caused by: com.tc.exception.TCNonPortableObjectError: 
*******************************************************************************
Attempt to share an instance of a non-portable class referenced by a portable 
class. This
unshareable class has not been included for sharing in the configuration.

For more information on this issue, please visit our Troubleshooting Guide at:
http://terracotta.org/kit/troubleshooting

Referring class        : edu.vt.middleware.ldap.jaas.LdapPrincipal
Referring field        : edu.vt.middleware.ldap.jaas.LdapPrincipal.attributes
Non-portable field name: edu.vt.middleware.ldap.jaas.LdapPrincipal.attributes
Thread                 : TP-Processor8
JVM ID                 : VM(102)
Non-included classes   : 
edu.vt.middleware.ldap.bean.UnorderedLdapBeanFactory$UnorderedLdapAttributes, 
edu.vt.middleware.ldap.bean.AbstractLdapAttribut
es, edu.vt.middleware.ldap.bean.AbstractLdapBean

Under most circumstances, you should only be adding classes for your
application. If you are adding classes for frameworks or code not written by
you, then you should consider finding a Terracotta Integration Module (TIM)
that matches the framework you are using.

As an example, if the non-portable class listed below is
net.sf.ehcache.CacheManager, you should consider using the ehcache TIM.

It is also possible that some or all of the classes above are truly
non-portable, the solution is then to mark the referring field as transient.
For more information on non-portable classes see the Troubleshooting Guide.

Action to take:

1) Reconfigure to include the unshareable classes
   * edit your tc-config.xml file
   * locate the <dso> element
   * add this snippet inside the <dso> element

       <instrumented-classes>
         <include>
           
<class-expression>edu.vt.middleware.ldap.bean.UnorderedLdapBeanFactory$UnorderedLdapAttributes</class-expression>
         </include>
         <include>
           
<class-expression>edu.vt.middleware.ldap.bean.AbstractLdapAttributes</class-expression>
         </include>
         <include>
           
<class-expression>edu.vt.middleware.ldap.bean.AbstractLdapBean</class-expression>
         </include>
       </instrumented-classes>

   * if there is already an <instrumented-classes> element present, simply add
     the new includes inside it

*******************************************************************************

        at 
com.tc.object.ClientObjectManagerImpl.throwNonPortableException(ClientObjectManagerImpl.java:783)
 [na:na]
        at 
com.tc.object.ClientObjectManagerImpl.checkPortabilityOfTraversedReference(ClientObjectManagerImpl.java:673)
 [na:na]
        at 
com.tc.object.ClientObjectManagerImpl.access$700(ClientObjectManagerImpl.java:82)
 [na:na]
        at 
com.tc.object.ClientObjectManagerImpl$NewObjectTraverseTest.checkPortability(ClientObjectManagerImpl.java:1055)
 [na:na]
        at com.tc.object.Traverser.addReferencedObjects(Traverser.java:46) 
[na:na]
        at com.tc.object.Traverser.traverse(Traverser.java:87) [na:na]
        at 
com.tc.object.ClientObjectManagerImpl.traverse(ClientObjectManagerImpl.java:946)
 [na:na]
        at 
com.tc.object.ClientObjectManagerImpl.create(ClientObjectManagerImpl.java:299)
 [na:na]
        at 
com.tc.object.ClientObjectManagerImpl.lookupOrCreateIfNecesary(ClientObjectManagerImpl.java:340)
 [na:na]
        at 
com.tc.object.ClientObjectManagerImpl.lookupOrCreate(ClientObjectManagerImpl.java:327)
 [na:na]
        at 
com.tc.object.tx.ClientTransactionManagerImpl.fieldChanged(ClientTransactionManagerImpl.java:418)
 [na:na]
        at 
com.tc.object.TCObjectImpl.objectFieldChanged(TCObjectImpl.java:331) [na:na]
        at 
edu.internet2.middleware.shibboleth.common.session.impl.AbstractSession.__tc_setsubject(AbstractSession.java)
 [shibboleth-common-1.2.0.jar:n
a]
        at 
edu.internet2.middleware.shibboleth.common.session.impl.AbstractSession.__tc_wrapped_setSubject(AbstractSession.java:72)
 [shibboleth-common-
1.2.0.jar:na]
        at 
edu.internet2.middleware.shibboleth.common.session.impl.AbstractSession.setSubject(AbstractSession.java)
 [shibboleth-common-1.2.0.jar:na]
        at 
edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine.updateUserSession(AuthenticationEngine.java:652)
 [shibboleth-identityprov
ider-2.2.0-SNAPSHOT.jar:na]
        at 
edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine.completeAuthentication(AuthenticationEngine.java:511)
 [shibboleth-identit
yprovider-2.2.0-SNAPSHOT.jar:na]
        at 
edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine.service(AuthenticationEngine.java:213)
 [shibboleth-identityprovider-2.2.0
-SNAPSHOT.jar:na]
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717) 
[servlet-api.jar:na]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
 [catalina.jar:na]
        ... 28 common frames omitted