Shibboleth Developers

["Mahabalagiri, Datta" <>]

I got it working finally. Included these in the boot 
<additional-boot-jar-classes> section.

                <include>java.util.LinkedList</include>
                <include>java.util.Collections$SynchronizedSet</include>
                <include>java.util.Vector</include>
                <include>java.util.Collections$EmptyList</include>
                <include>java.util.ArrayList</include>
                <include>java.util.concurrent.ConcurrentHashMap</include>
                <include>java.lang.StackTraceElement</include>
                <include>java.util.HashSet</include>
                <include>java.util.AbstractSet</include>
                <include>javax.security.auth.Subject</include>
                <include>javax.security.auth.Subject$ClassSet</include>
                <include>javax.security.auth.Subject$SecureSet</include>
                <include>javax.security.auth.x500.X500Principal</include>
                
<include>javax.security.auth.kerberos.KerberosPrincipal</include>

One or two may be unnecessary. I haven't narrowed down yet. But at least it 
is working now.

Datta


-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Mahabalagiri, Datta
Sent: Thursday, August 19, 2010 12:57 PM
To: 

Subject: RE: [Shib-Dev] 2.2.0-SNAPSHOT tc-config

I still can't get it to work. I tried instrumenting all classes (*..*), still 
no luck. I am running out of ideas.

Ideas, anyone?

Thanks.
Datta



-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Kevin P. Foote
Sent: Tuesday, August 17, 2010 10:53 AM
To: 

Subject: RE: [Shib-Dev] 2.2.0-SNAPSHOT tc-config


Datta..

Sorry.
Yea.. I highly edited that last xml in the last message..

for 2.2.0-SNAPSHOT  paired with TC ..

The following need to be added to <additional-boot-jar-classes> section

 - java.util.AbstractSet
 - javax.security.auth.Subject$ClassSet

The following need to be added to <instrumented-classes> section with
<honor-transient>true</honor-transient> declared ..

 - org.apache.commons.logging.impl.SLF4JLocationAwareLog
 - edu.vt.middleware.ldap.bean.UnorderedLdapBeanFactory
 - 
edu.vt.middleware.ldap.bean.UnorderedLdapBeanFactory$UnorderedLdapAttributes
 - edu.vt.middleware.ldap.bean.AbstractLdapAttributes
 - edu.vt.middleware.ldap.bean.AbstractLdapBean

This is of course if your using LDAP. Not completely sure on that SLF4J
include.. but my staging setup is working just fine.

------
thanks
  kevin.foote

On Mon, 16 Aug 2010, Mahabalagiri, Datta wrote:

-> Kevin,
-> I appreciate your quick response.
-> I still can't get it to work. I am getting the same exception. Did you 
mark any of the instrumented classes as transient?
->
-> Here is the logs:
-> 2010-08-16-16:42:46.748 TRACE   Attempting to retrieve IdP session cookie.
-> 2010-08-16-16:42:46.749 TRACE   Found IdP session cookie.
-> 2010-08-16-16:42:46.799 TRACE   Updating IdP session activity time and 
adding session object to the request
-> 2010-08-16-16:42:46.816 INFO    
20100816T234246Z|164.67.133.206|shbpreview.ais.ucla.edu:443|/profile/Shibboleth/SSO|
-> 2010-08-16-16:42:46.828 DEBUG   shibboleth.HandlerManager: Looking up 
profile handler for request path: /Shibboleth/SSO
-> 2010-08-16-16:42:46.828 DEBUG   shibboleth.HandlerManager: Located profile 
handler of the following type for the request path: 
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfileHandler
-> 2010-08-16-16:42:46.828 DEBUG   Processing incoming request
-> 2010-08-16-16:42:46.828 DEBUG   Incoming request does not contain a login 
context, processing as first leg of request
-> 2010-08-16-16:42:46.829 DEBUG   Decoding message with decoder binding 
urn:mace:shibboleth:1.0:profiles:AuthnRequest
-> 2010-08-16-16:42:46.830 DEBUG   Looking up relying party configuration for 
https://mi14.dev.ais.ucla.edu/shibboleth-sp
-> 2010-08-16-16:42:46.830 DEBUG   No custom relying party configuration 
found for https://mi14.dev.ais.ucla.edu/shibboleth-sp, looking up 
configuration based on metadata groups.
-> 2010-08-16-16:42:46.830 DEBUG   No custom or group-based relying party 
configuration found for https://mi14.dev.ais.ucla.edu/shibboleth-sp. Using 
default relying party configuration.
-> 2010-08-16-16:42:46.831 DEBUG   Decoded Shibboleth SSO request from 
relying party 'https://mi14.dev.ais.ucla.edu/shibboleth-sp'
-> 2010-08-16-16:42:46.832 DEBUG   Looking up relying party configuration for 
https://mi14.dev.ais.ucla.edu/shibboleth-sp
-> 2010-08-16-16:42:46.833 DEBUG   No custom relying party configuration 
found for https://mi14.dev.ais.ucla.edu/shibboleth-sp, looking up 
configuration based on metadata groups.
-> 2010-08-16-16:42:46.833 DEBUG   No custom or group-based relying party 
configuration found for https://mi14.dev.ais.ucla.edu/shibboleth-sp. Using 
default relying party configuration.
-> 2010-08-16-16:42:46.844 DEBUG   Processing incoming request
-> 2010-08-16-16:42:46.844 DEBUG   Beginning user authentication process.
-> 2010-08-16-16:42:46.856 ERROR   Error occured while processing request
-> java.lang.NullPointerException: null
->         at javax.security.auth.Subject$ClassSet.<init>(Subject.java:1311) 
[na:1.6.0_13]
->         at javax.security.auth.Subject.getPrincipals(Subject.java:592) 
[na:1.6.0_13]
->         at 
edu.internet2.middleware.shibboleth.idp.session.impl.SessionImpl.__tc_wrapped_getPrincipalName(SessionImpl.java:98)
 [shibboleth-identityprovider-2.2.0-SNAPSHOT.jar:na]
->         at 
edu.internet2.middleware.shibboleth.idp.session.impl.SessionImpl.getPrincipalName(SessionImpl.java)
 [shibboleth-identityprovider-2.2.0-SNAPSHOT.jar:na]
->         at 
edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine.startUserAuthentication(AuthenticationEngine.java:231)
 [shibboleth-identityprovider-2.2.0-SNAPSHOT.jar:na]
->         at 
edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine.service(AuthenticationEngine.java:210)
 [shibboleth-identityprovider-2.2.0-SNAPSHOT.jar:na]
->         at javax.servlet.http.HttpServlet.service(HttpServlet.java:717) 
[servlet-api.jar:na]
->         at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
 [catalina.jar:na]
->         at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
 [catalina.jar:na]
->         at 
org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:630)
 [catalina.jar:na]
->         at 
org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:436)
 [catalina.jar:na]
->         at 
org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:374)
 [catalina.jar:na]
->         at 
org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302)
 [catalina.jar:na]
->         at 
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfileHandler.performAuthentication(ShibbolethSSOProfileHandler.java:160)
 [shibboleth-identityprovider-2.2.0-SNAPSHOT.jar:na]
->         at 
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfileHandler.processRequest(ShibbolethSSOProfileHandler.java:119)
 [shibboleth-identityprovider-2.2.0-SNAPSHOT.jar:na]
->         at 
edu.internet2.middleware.shibboleth.idp.profile.saml1.ShibbolethSSOProfileHandler.processRequest(ShibbolethSSOProfileHandler.java:1)
 [shibboleth-identityprovider-2.2.0-SNAPSHOT.jar:na]
->         at 
edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet.service(ProfileRequestDispatcherServlet.java:83)
 [shibboleth-common-1.2.0.jar:na]
->         at javax.servlet.http.HttpServlet.service(HttpServlet.java:717) 
[servlet-api.jar:na]
->         at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
 [catalina.jar:na]
->         at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
 [catalina.jar:na]
->         at 
edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter.doFilter(IdPSessionFilter.java:77)
 [shibboleth-identityprovider-2.2.0-SNAPSHOT.jar:na]
->         at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
 [catalina.jar:na]
->         at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
 [catalina.jar:na]
->         at 
edu.internet2.middleware.shibboleth.common.log.SLF4JMDCCleanupFilter.doFilter(SLF4JMDCCleanupFilter.java:51)
 [shibboleth-common-1.2.0.jar:na]
->         at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
 [catalina.jar:na]
->         at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
 [catalina.jar:na]
->         at 
edu.ucla.iamucla.tsunami.custom.RequestIdFilter.doFilter(RequestIdFilter.java:65)
 [RequestIdFilter.class:na]
->         at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
 [catalina.jar:na]
->         at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
 [catalina.jar:na]
->         at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
 [catalina.jar:na]
->         at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
 [catalina.jar:na]
->         at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128) 
[catalina.jar:na]
->         at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) 
[catalina.jar:na]
->         at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
 [catalina.jar:na]
->         at 
org.terracotta.modules.tomcat.tomcat_5_5.SessionValve55.invoke(SessionValve55.java:73)
 [na:na]
->         at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:286) 
[catalina.jar:na]
->         at 
org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190) 
[tomcat-coyote.jar:na]
->         at 
org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:283) 
[tomcat-coyote.jar:na]
->         at 
org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:767) 
[tomcat-coyote.jar:na]
->         at 
org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:697) 
[tomcat-coyote.jar:na]
->         at 
org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:889)
 [tomcat-coyote.jar:na]
->         at 
org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:690)
 [tomcat-coyote.jar:na]
->         at java.lang.Thread.run(Thread.java:619) [na:1.6.0_13]
->
-> Thanks.
-> Datta