Skip to Content.
Sympa Menu

shibboleth-dev - Re: [Shib-Dev] New IdP v2.2 Snapshot Available

Subject: Shibboleth Developers

List archive

Re: [Shib-Dev] New IdP v2.2 Snapshot Available


Chronological Thread 
  • From: Yang Xiang <>
  • To:
  • Subject: Re: [Shib-Dev] New IdP v2.2 Snapshot Available
  • Date: Fri, 02 Jul 2010 14:44:31 +0200

Hi,

I installed the v2.2 snapshot today and got some errors regarding
REMOTE_USER. The same configuration (of IdP and SP) worked fine with IdP
v2.1.5. Following are the error messages:
----------------------------------
14:02:23.471 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:459]
- Resolving attributes for principal 'yang' for SAML request from relying
party 'http://localhost/test-sp1'
14:02:23.472 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:118]
- shibboleth.AttributeResolver resolving attributes for principal yang
14:02:23.472 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:249]
- Specific attributes for principal yang were not requested, resolving all
attributes.
14:02:23.472 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:285]
- Resolving attribute transientId for principal yang
14:02:23.473 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:307]
- Resolved attribute transientId containing 1 values
14:02:23.474 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.ShibbolethAttributeResolver:136]
- shibboleth.AttributeResolver resolved, for principal yang, the attributes:
[transientId]
14:02:23.474 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:70]
- shibboleth.AttributeFilterEngine filtering 1 attributes for principal yang
14:02:23.474 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:122]
- Evaluating if filter policy releaseTransientIdToAnyone is active for
principal yang
14:02:23.474 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:131]
- Filter policy releaseTransientIdToAnyone is active for principal yang
14:02:23.475 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:156]
- Processing permit value rule for attribute transientId for principal yang
14:02:23.475 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:106]
- Filtered attributes for principal yang. The following attributes remain:
[transientId]
14:02:23.477 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:487]
- Creating attribute statement in response to SAML request
'_155999400e33f99c476b5b28cac39a52' from relying party
'http://localhost/test-sp1'
14:02:23.477 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.provider.ShibbolethSAML2AttributeAuthority:225]
- Attribute transientId was not encoded because no SAML2AttributeEncoder was
attached to it.
14:02:23.478 - DEBUG
[edu.internet2.middleware.shibboleth.common.attribute.provider.ShibbolethSAML2AttributeAuthority:127]
- No attributes remained after encoding and filtering by value, no attribute
statement built
14:02:23.482 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler:825]
- Attemping to build NameID for principal 'yang' in response to request from
relying party 'http://localhost/test-sp1
14:02:23.482 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:514]
- Relying party 'http://localhost/test-sp1' supports the name formats:
[urn:mace:shibboleth:1.0:nameIdentifier]
14:02:23.482 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:446]
- Relying party 'http://localhost/test-sp1' supports the name formats:
[urn:mace:shibboleth:1.0:nameIdentifier]
14:02:23.482 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:458]
- No attributes for principal 'yang' supports encoding into a supported
NameIdentifier format for relying party 'http://localhost/test-sp1'
14:02:23.487 - ERROR
[edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet:88]
- Error occured while processing request
java.lang.NullPointerException: null
at
edu.internet2.middleware.shibboleth.idp.profile.saml2.AbstractSAML2ProfileHandler.buildNameId(AbstractSAML2ProfileHandler.java:837)
[shibboleth-identityprovider-2.2.0-SNAPSHOT.jar:na]
at
edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler.buildNameId(SSOProfileHandler.java:584)
[shibboleth-identityprovider-2.2.0-SNAPSHOT.jar:na]

---------------

I just noticed that the error was caused by the method
edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler.selectNameIDAttributeAndEncoder(Class<T>,
BaseSAMLProfileRequestContext) while no encoder could be found.

This is not a config error, isn't it?

Yang





Archive powered by MHonArc 2.6.16.

Top of Page