[gatein-issues] [JBoss JIRA] Commented: (GTNPORTAL-992) Generic SSO documentation issues

Marek Posolda (JIRA) jira-events at lists.jboss.org
Mon Mar 29 04:58:39 EDT 2010 

    [ https://jira.jboss.org/jira/browse/GTNPORTAL-992?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12522499#action_12522499 ] 

Marek Posolda commented on GTNPORTAL-992:
-----------------------------------------

No I don't have it working with josso1.8.2-rev1573. 

I did a configuration of JOSSO on tomcat and I was able to login in JOSSO console. There are some changes in file josso-gateway-config.xml between josso-181 and josso-182. So I didn't copy josso-gateway-config.xml from GATEIN_SSO_HOME but I directly updated file TOMCAT_HOME/lib/josso-gateway-config.xml.

So authentication was successfull but I had problems on GateIn side with verifying josso ticket. After login into JOSSO I was redirected to GateIn portal login screen and I saw exceptions in GateIn server.log:

In tomcat log is this:

- Mon Mar 29 09:27:40 CEST 2010 - sso-session - info - root - createSession=success - ssoSessionId=5D13E7C099A8FC9442B4932DBD3763F6
- Mon Mar 29 09:27:40 CEST 2010 - sso-user - info - root - authenticationSuccess=success - authScheme=basic-authentication,ssoSessionId=5D13E7C099A8FC9442B4932DBD3763F6

But in GateIn log this:


2010-03-29 09:27:40,675 DEBUG [org.jboss.security.integration.JNDIBasedSecurityManagement] setCachePolicy, c=org.jboss.util.TimedCachePolicy at 1ffcf18
2010-03-29 09:27:40,743 INFO  [org.josso.agent.Lookup] Init resourceName <josso-agent-config.xml>
2010-03-29 09:27:40,843 INFO  [org.apache.xbean.spring.context.ClassPathXmlApplicationContext] Refreshing org.apache.xbean.spring.context.ClassPathXmlApplicationContext at 10696e4: display name [org.apache.xbea
n.spring.context.ClassPathXmlApplicationContext at 10696e4]; startup date [Mon Mar 29 09:27:40 CEST 2010]; root of context hierarchy
2010-03-29 09:27:40,996 INFO  [org.apache.xbean.spring.context.v2.XBeanXmlBeanDefinitionReader] Loading XML bean definitions from class path resource [josso-agent-config.xml]
2010-03-29 09:27:40,998 DEBUG [org.springframework.beans.factory.xml.DefaultDocumentLoader] Using JAXP provider [org.apache.xerces.jaxp.DocumentBuilderFactoryImpl]
2010-03-29 09:27:41,184 INFO  [org.apache.xbean.spring.context.ClassPathXmlApplicationContext] Bean factory for application context [org.apache.xbean.spring.context.ClassPathXmlApplicationContext at 10696e4]: o
rg.springframework.beans.factory.support.DefaultListableBeanFactory at 1c7889d
2010-03-29 09:27:41,209 INFO  [org.springframework.beans.factory.support.DefaultListableBeanFactory] Pre-instantiating singletons in org.springframework.beans.factory.support.DefaultListableBeanFactory at 1c788
9d: defining beans [josso-tomcat60-agent]; root of factory hierarchy
2010-03-29 09:27:41,211 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] Creating shared instance of singleton bean 'josso-tomcat60-agent'
2010-03-29 09:27:41,212 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] Creating instance of bean 'josso-tomcat60-agent'
2010-03-29 09:27:41,249 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] Eagerly caching bean 'josso-tomcat60-agent' to allow for resolving potential circular references
2010-03-29 09:27:41,297 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] Creating instance of bean '(inner bean)'
2010-03-29 09:27:41,298 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] Finished creating instance of bean '(inner bean)'
2010-03-29 09:27:41,298 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] Creating instance of bean '(inner bean)#1'
2010-03-29 09:27:41,298 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] Creating instance of bean 'agent:partner-app#dc4e90'
2010-03-29 09:27:41,298 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] Finished creating instance of bean 'agent:partner-app#dc4e90'
2010-03-29 09:27:41,301 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] Finished creating instance of bean '(inner bean)#1'
2010-03-29 09:27:41,301 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] Creating instance of bean 'agent:vhost-parameters-builder#1ede117'
2010-03-29 09:27:41,301 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] Finished creating instance of bean 'agent:vhost-parameters-builder#1ede117'
2010-03-29 09:27:41,301 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] Creating instance of bean 'agent:appctx-parameters-builder#1751533'
2010-03-29 09:27:41,301 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] Finished creating instance of bean 'agent:appctx-parameters-builder#1751533'
2010-03-29 09:27:41,301 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] Finished creating instance of bean 'josso-tomcat60-agent'
2010-03-29 09:27:41,302 INFO  [org.josso.agent.Lookup] Using ComponentKeeper : org.josso.agent.config.SpringComponentKeeperImpl
2010-03-29 09:27:41,302 DEBUG [org.springframework.beans.factory.support.DefaultListableBeanFactory] Returning cached instance of singleton bean 'josso-tomcat60-agent'
2010-03-29 09:27:41,878 DEBUG [org.josso.gateway.WebserviceGatewayServiceLocator] Using SSOSessionManager endpoint 'http://localhost:8888/josso/services/SSOSessionManager'
2010-03-29 09:27:41,931 DEBUG [org.josso.gateway.WebserviceGatewayServiceLocator] Using SSOIdentityManager endpoint 'http://localhost:8888/josso/services/SSOIdentityManager'
2010-03-29 09:27:41,968 DEBUG [org.josso.gateway.WebserviceGatewayServiceLocator] Using SSOIdentityProvider endpoint 'http://localhost:8888/josso/services/SSOIdentityProvider'
2010-03-29 09:27:41,989 DEBUG [org.josso.gateway.identity.service.WebserviceSSOIdentityProvider] [resolveAuthenticationAssertion()] : 86192F5FA0D28534
2010-03-29 09:27:42,447 DEBUG [org.gatein.sso.agent.josso.GateInSSOAgent] The AXIS engine could not find a target service to invoke!  targetService is SSOIdentityProvider
org.josso.gateway.identity.exceptions.IdentityProvisioningException: The AXIS engine could not find a target service to invoke!  targetService is SSOIdentityProvider
        at org.josso.gateway.identity.service.WebserviceSSOIdentityProvider.resolveAuthenticationAssertion(WebserviceSSOIdentityProvider.java:109)
        at org.josso.agent.AbstractSSOAgent.resolveAssertion(AbstractSSOAgent.java:386)
        at org.josso.agent.AbstractSSOAgent.processRequest(AbstractSSOAgent.java:292)
        at org.gatein.sso.agent.josso.JOSSOAgent.validateTicket(JOSSOAgent.java:89)
        at org.gatein.sso.agent.GenericSSOAgent.processSSOToken(GenericSSOAgent.java:95)
        at org.gatein.sso.agent.GenericSSOAgent.doGet(GenericSSOAgent.java:66)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:617)
        at org.exoplatform.container.web.AbstractHttpServlet.onService(AbstractHttpServlet.java:167)
        at org.exoplatform.container.web.AbstractHttpServlet.service(AbstractHttpServlet.java:116)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:638)
        at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:444)
        at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:382)
        at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:310)
        at org.apache.catalina.authenticator.FormAuthenticator.forwardToLoginPage(FormAuthenticator.java:316)
        at org.apache.catalina.authenticator.FormAuthenticator.authenticate(FormAuthenticator.java:244)
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:491)
        at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:92)
        at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.process(SecurityContextEstablishmentValve.java:126)
        at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.invoke(SecurityContextEstablishmentValve.java:70)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:158)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:330)
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:829)
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:598)
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
        at java.lang.Thread.run(Thread.java:619)
Caused by: The AXIS engine could not find a target service to invoke!  targetService is SSOIdentityProvider
        at org.apache.axis.message.SOAPFaultBuilder.createFault(SOAPFaultBuilder.java:222)
        at org.apache.axis.message.SOAPFaultBuilder.endElement(SOAPFaultBuilder.java:129)
        at org.apache.axis.encoding.DeserializationContext.endElement(DeserializationContext.java:1087)
        at org.apache.xerces.parsers.AbstractSAXParser.endElement(Unknown Source)
        at org.apache.xerces.impl.XMLNSDocumentScannerImpl.scanEndElement(Unknown Source)
        at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl$FragmentContentDispatcher.dispatch(Unknown Source)
        at org.apache.xerces.impl.XMLDocumentFragmentScannerImpl.scanDocument(Unknown Source)
        at org.apache.xerces.parsers.XML11Configuration.parse(Unknown Source)
        at org.apache.xerces.parsers.XML11Configuration.parse(Unknown Source)
        at org.apache.xerces.parsers.XMLParser.parse(Unknown Source)
        at org.apache.xerces.parsers.AbstractSAXParser.parse(Unknown Source)
        at org.apache.xerces.jaxp.SAXParserImpl$JAXPSAXParser.parse(Unknown Source)
        at org.apache.xerces.jaxp.SAXParserImpl.parse(Unknown Source)
        at org.apache.axis.encoding.DeserializationContext.parse(DeserializationContext.java:227)
        at org.apache.axis.SOAPPart.getAsSOAPEnvelope(SOAPPart.java:696)
        at org.apache.axis.Message.getSOAPEnvelope(Message.java:435)
        at org.apache.axis.handlers.soap.MustUnderstandChecker.invoke(MustUnderstandChecker.java:62)
        at org.apache.axis.client.AxisClient.invoke(AxisClient.java:206)
        at org.apache.axis.client.Call.invokeEngine(Call.java:2784)
        at org.apache.axis.client.Call.invoke(Call.java:2767)
        at org.apache.axis.client.Call.invoke(Call.java:2443)
        at org.apache.axis.client.Call.invoke(Call.java:2366)
        at org.apache.axis.client.Call.invoke(Call.java:1812)
        at org.josso.gateway.ws._1_1.wsdl.soapbinding.SSOIdentityProviderBindingStub.resolveAuthenticationAssertion(SSOIdentityProviderBindingStub.java:250)
        at org.josso.gateway.identity.service.WebserviceSSOIdentityProvider.resolveAuthenticationAssertion(WebserviceSSOIdentityProvider.java:100)
        ... 30 more
2010-03-29 09:27:42,447 DEBUG [org.josso.gateway.identity.service.WebserviceSSOIdentityManager] [findUserInSession()] : null
2010-03-29 09:27:42,484 ERROR [org.apache.axis.encoding.ser.BeanSerializer] Exception:
java.io.IOException: Non nillable element 'ssoSessionId' is null.
        at org.apache.axis.encoding.ser.BeanSerializer.serialize(BeanSerializer.java:215)
        at org.apache.axis.encoding.SerializationContext.serializeActual(SerializationContext.java:1504)
        at org.apache.axis.encoding.SerializationContext.serialize(SerializationContext.java:980)
        at org.apache.axis.encoding.SerializationContext.outputMultiRefs(SerializationContext.java:1055)
        at org.apache.axis.message.SOAPBody.outputImpl(SOAPBody.java:145)
        at org.apache.axis.message.SOAPEnvelope.outputImpl(SOAPEnvelope.java:478)
        at org.apache.axis.message.MessageElement.output(MessageElement.java:1208)
        at org.apache.axis.SOAPPart.writeTo(SOAPPart.java:315)
        at org.apache.axis.SOAPPart.writeTo(SOAPPart.java:269)
        at org.apache.axis.SOAPPart.saveChanges(SOAPPart.java:530)
        at org.apache.axis.attachments.AttachmentsImpl.getAttachmentCount(AttachmentsImpl.java:554)
        at org.apache.axis.Message.getContentType(Message.java:486)
        at org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:343)
        at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:138)
        at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
        at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
        at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
        at org.apache.axis.client.AxisClient.invoke(AxisClient.java:165)
        at org.apache.axis.client.Call.invokeEngine(Call.java:2784)
        at org.apache.axis.client.Call.invoke(Call.java:2767)
        at org.apache.axis.client.Call.invoke(Call.java:2443)
        at org.apache.axis.client.Call.invoke(Call.java:2366)
        at org.apache.axis.client.Call.invoke(Call.java:1812)
        at org.josso.gateway.ws._1_1.wsdl.soapbinding.SSOIdentityManagerBindingStub.findUserInSession(SSOIdentityManagerBindingStub.java:345)
        at org.josso.gateway.identity.service.WebserviceSSOIdentityManager.findUserInSession(WebserviceSSOIdentityManager.java:119)
        at org.gatein.sso.agent.josso.GateInSSOAgent.authenticate(GateInSSOAgent.java:47)
        at org.josso.agent.AbstractSSOAgent.processRequest(AbstractSSOAgent.java:335)
        at org.gatein.sso.agent.josso.JOSSOAgent.validateTicket(JOSSOAgent.java:89)
        at org.gatein.sso.agent.GenericSSOAgent.processSSOToken(GenericSSOAgent.java:95)
        at org.gatein.sso.agent.GenericSSOAgent.doGet(GenericSSOAgent.java:66)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:617)
        at org.exoplatform.container.web.AbstractHttpServlet.onService(AbstractHttpServlet.java:167)
        at org.exoplatform.container.web.AbstractHttpServlet.service(AbstractHttpServlet.java:116)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:638)
        at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:444)
        at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:382)
        at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:310)
        at org.apache.catalina.authenticator.FormAuthenticator.forwardToLoginPage(FormAuthenticator.java:316)
        at org.apache.catalina.authenticator.FormAuthenticator.authenticate(FormAuthenticator.java:244)
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:491)
        at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:92)

2010-03-29 09:27:42,488 WARN  [org.apache.axis.attachments.AttachmentsImpl] Exception:
AxisFault
 faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException
 faultSubcode: 
 faultString: java.io.IOException: java.io.IOException: Non nillable element 'ssoSessionId' is null.
 faultActor: 
 faultNode: 
 faultDetail: 
        {http://xml.apache.org/axis/}stackTrace:java.io.IOException: java.io.IOException: Non nillable element 'ssoSessionId' is null.
        at org.apache.axis.encoding.ser.BeanSerializer.serialize(BeanSerializer.java:275)
        at org.apache.axis.encoding.SerializationContext.serializeActual(SerializationContext.java:1504)
        at org.apache.axis.encoding.SerializationContext.serialize(SerializationContext.java:980)
        at org.apache.axis.encoding.SerializationContext.outputMultiRefs(SerializationContext.java:1055)
        at org.apache.axis.message.SOAPBody.outputImpl(SOAPBody.java:145)
        at org.apache.axis.message.SOAPEnvelope.outputImpl(SOAPEnvelope.java:478)
        at org.apache.axis.message.MessageElement.output(MessageElement.java:1208)
        at org.apache.axis.SOAPPart.writeTo(SOAPPart.java:315)
        at org.apache.axis.SOAPPart.writeTo(SOAPPart.java:269)
        at org.apache.axis.SOAPPart.saveChanges(SOAPPart.java:530)
        at org.apache.axis.attachments.AttachmentsImpl.getAttachmentCount(AttachmentsImpl.java:554)
        at org.apache.axis.Message.getContentType(Message.java:486)
        at org.apache.axis.transport.http.HTTPSender.writeToSocket(HTTPSender.java:343)
        at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:138)
        at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
        at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
        at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
        at org.apache.axis.client.AxisClient.invoke(AxisClient.java:165)
        at org.apache.axis.client.Call.invokeEngine(Call.java:2784)
        at org.apache.axis.client.Call.invoke(Call.java:2767)
        at org.apache.axis.client.Call.invoke(Call.java:2443)
        at org.apache.axis.client.Call.invoke(Call.java:2366)
        at org.apache.axis.client.Call.invoke(Call.java:1812)
        at org.josso.gateway.ws._1_1.wsdl.soapbinding.SSOIdentityManagerBindingStub.findUserInSession(SSOIdentityManagerBindingStub.java:345)
        at org.josso.gateway.identity.service.WebserviceSSOIdentityManager.findUserInSession(WebserviceSSOIdentityManager.java:119)
        at org.gatein.sso.agent.josso.GateInSSOAgent.authenticate(GateInSSOAgent.java:47)
        at org.josso.agent.AbstractSSOAgent.processRequest(AbstractSSOAgent.java:335)
        at org.gatein.sso.agent.josso.JOSSOAgent.validateTicket(JOSSOAgent.java:89)
        at org.gatein.sso.agent.GenericSSOAgent.processSSOToken(GenericSSOAgent.java:95)
        at org.gatein.sso.agent.GenericSSOAgent.doGet(GenericSSOAgent.java:66)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:617)
        at org.exoplatform.container.web.AbstractHttpServlet.onService(AbstractHttpServlet.java:167)
        at org.exoplatform.container.web.AbstractHttpServlet.service(AbstractHttpServlet.java:116)




> Generic SSO documentation issues
> --------------------------------
>
>                 Key: GTNPORTAL-992
>                 URL: https://jira.jboss.org/jira/browse/GTNPORTAL-992
>             Project: GateIn Portal
>          Issue Type: Sub-task
>      Security Level: Public(Everyone can see) 
>          Components: Documentation
>    Affects Versions: 3.0.0-GA
>         Environment: GateIn-3.0.0-GA+JBoss 5.1 bundle,
> Reference guide from trunk (revision 2305)
>            Reporter: Marek Posolda
>            Assignee: Luc Texier
>
> 1) Exact versions of SSO frameworks are not specified in reference guide, which seems to be potential problem. Because format of particular SSO framework or his configuration files can be changed and then integration with GateIn won't be successfull. For example: I did successfull integration with JOSSO-1.8.1+tomcat bundle. But latest version to download from http://sourceforge.net/projects/josso/files/ is JOSSO version 1.8.2-rev1573 and I felt into problems when I tried to integrate with this version. 
> 2) In reference guide (section 3.1.1 - prerequisisities) is mentioned variable SSO_HOME where are unzipped GateIn sso libs. But in later text in reference guide is this variable referenced as GATEIN_SSO. This can be potential confusion which can be seen for example in this forum https://community.jboss.org/thread/148332?tstart=0

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

More information about the gatein-issues mailing list