Uploaded image for project: 'PicketLink'
  1. PicketLink
  2. PLINK-553

Single Logout fails with a blank screen, if session has expired in SP

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • PLINK_2.7.0.Beta1
    • PLINK_2.5.2.FInal, PLINK_2.6.0.Final
    • SAML
    • None

    Description

      The following exception is thrown (plink 2.5.2) and a white page shows:

      14:51:12,148 WARN  [org.picketlink.common] (http-/127.0.0.1:8080-1) Check addJceProvider method of org.picketlink.identity.federation.core.util.ProvidersUtil for more info.
14:58:22,796 ERROR [org.picketlink.common] (http-/127.0.0.1:8080-1) Unexpected error: org.picketlink.common.exceptions.ProcessingException: PL00022: Principal Not Found
        at org.picketlink.common.DefaultPicketLinkLogger.samlHandlerPrincipalNotFoundError(DefaultPicketLinkLogger.java:1526)
        at org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler$SPLogOutHandler.generateSAMLRequest(SAML2LogOutHandler.java:363) [picketlink-federation-2.5.2.Final.jar:]
        at org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler.generateSAMLRequest(SAML2LogOutHandler.java:94) [picketlink-federation-2.5.2.Final.jar:]
        at org.picketlink.identity.federation.web.process.ServiceProviderBaseProcessor.process(ServiceProviderBaseProcessor.java:177) [picketlink-federation-2.5.2.Final.jar:]
        at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.generalUserRequest(AbstractSPFormAuthenticator.java:603) [picketlink-jbas7-2.5.2.Final.jar:2.5.2.Final]
        at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.authenticate(AbstractSPFormAuthenticator.java:328) [picketlink-jbas7-2.5.2.Final.jar:2.5.2.Final]
        at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.authenticate(AbstractSPFormAuthenticator.java:261) [picketlink-jbas7-2.5.2.Final.jar:2.5.2.Final]
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:447) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:169) [jboss-as-web-7.2.0.CP04.jar:7.2.0.CP04]
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:145) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:97) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:102) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:336) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:653) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:920) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at java.lang.Thread.run(Thread.java:744) [rt.jar:1.7.0_45]

14:58:22,813 ERROR [org.apache.catalina.connector] (http-/127.0.0.1:8080-1) JBWEB001018: An exception or error occurred in the container during the request processing: java.lang.RuntimeException: Error during processing the SAML Handler Chain.
        at org.picketlink.common.DefaultPicketLinkLogger.samlHandlerChainProcessingError(DefaultPicketLinkLogger.java:1625)
        at org.picketlink.identity.federation.web.process.ServiceProviderBaseProcessor.process(ServiceProviderBaseProcessor.java:183) [picketlink-federation-2.5.2.Final.jar:]
        at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.generalUserRequest(AbstractSPFormAuthenticator.java:603) [picketlink-jbas7-2.5.2.Final.jar:2.5.2.Final]
        at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.authenticate(AbstractSPFormAuthenticator.java:328) [picketlink-jbas7-2.5.2.Final.jar:2.5.2.Final]
        at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.authenticate(AbstractSPFormAuthenticator.java:261) [picketlink-jbas7-2.5.2.Final.jar:2.5.2.Final]
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:447) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:169) [jboss-as-web-7.2.0.CP04.jar:7.2.0.CP04]
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:145) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:97) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:102) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:336) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:653) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:920) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at java.lang.Thread.run(Thread.java:744) [rt.jar:1.7.0_45]
Caused by: org.picketlink.common.exceptions.ProcessingException: PL00022: Principal Not Found
        at org.picketlink.common.DefaultPicketLinkLogger.samlHandlerPrincipalNotFoundError(DefaultPicketLinkLogger.java:1526)
        at org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler$SPLogOutHandler.generateSAMLRequest(SAML2LogOutHandler.java:363) [picketlink-federation-2.5.2.Final.jar:]
        at org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler.generateSAMLRequest(SAML2LogOutHandler.java:94) [picketlink-federation-2.5.2.Final.jar:]
        at org.picketlink.identity.federation.web.process.ServiceProviderBaseProcessor.process(ServiceProviderBaseProcessor.java:177) [picketlink-federation-2.5.2.Final.jar:]
        ... 13 more

      The following exception is thrown (plink 2.6.0) and a white page shows:

      16:36:16,136 ERROR [org.picketlink.common] (http-/127.0.0.1:8080-3) Unexpected error: org.picketlink.common.exceptions.ProcessingException: PL00022: Principal Not Found
	at org.picketlink.common.DefaultPicketLinkLogger.samlHandlerPrincipalNotFoundError(DefaultPicketLinkLogger.java:1525)
	at org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler$SPLogOutHandler.generateSAMLRequest(SAML2LogOutHandler.java:396) [picketlink-federation-2.6.0.Final.jar:]
	at org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler.generateSAMLRequest(SAML2LogOutHandler.java:95) [picketlink-federation-2.6.0.Final.jar:]
	at org.picketlink.identity.federation.web.process.ServiceProviderBaseProcessor.process(ServiceProviderBaseProcessor.java:178) [picketlink-federation-2.6.0.Final.jar:]
	at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.generalUserRequest(AbstractSPFormAuthenticator.java:667) [picketlink-jbas7-2.6.0.Final.jar:2.6.0.Final]
	at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.authenticate(AbstractSPFormAuthenticator.java:328) [picketlink-jbas7-2.6.0.Final.jar:2.6.0.Final]
	at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.authenticate(AbstractSPFormAuthenticator.java:260) [picketlink-jbas7-2.6.0.Final.jar:2.6.0.Final]
	at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:447) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:169) [jboss-as-web-7.2.0.CP04.jar:7.2.0.CP04]
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:145) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:97) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:102) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:336) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:653) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:920) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at java.lang.Thread.run(Thread.java:744) [rt.jar:1.7.0_45]

16:36:16,151 ERROR [org.apache.catalina.connector] (http-/127.0.0.1:8080-3) JBWEB001018: An exception or error occurred in the container during the request processing: java.lang.RuntimeException: Error during processing the SAML Handler Chain.
	at org.picketlink.common.DefaultPicketLinkLogger.samlHandlerChainProcessingError(DefaultPicketLinkLogger.java:1624)
	at org.picketlink.identity.federation.web.process.ServiceProviderBaseProcessor.process(ServiceProviderBaseProcessor.java:184) [picketlink-federation-2.6.0.Final.jar:]
	at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.generalUserRequest(AbstractSPFormAuthenticator.java:667) [picketlink-jbas7-2.6.0.Final.jar:2.6.0.Final]
	at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.authenticate(AbstractSPFormAuthenticator.java:328) [picketlink-jbas7-2.6.0.Final.jar:2.6.0.Final]
	at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.authenticate(AbstractSPFormAuthenticator.java:260) [picketlink-jbas7-2.6.0.Final.jar:2.6.0.Final]
	at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:447) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:169) [jboss-as-web-7.2.0.CP04.jar:7.2.0.CP04]
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:145) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:97) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:102) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:336) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:653) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:920) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at java.lang.Thread.run(Thread.java:744) [rt.jar:1.7.0_45]
Caused by: org.picketlink.common.exceptions.ProcessingException: PL00022: Principal Not Found
	at org.picketlink.common.DefaultPicketLinkLogger.samlHandlerPrincipalNotFoundError(DefaultPicketLinkLogger.java:1525)
	at org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler$SPLogOutHandler.generateSAMLRequest(SAML2LogOutHandler.java:396) [picketlink-federation-2.6.0.Final.jar:]
	at org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler.generateSAMLRequest(SAML2LogOutHandler.java:95) [picketlink-federation-2.6.0.Final.jar:]
	at org.picketlink.identity.federation.web.process.ServiceProviderBaseProcessor.process(ServiceProviderBaseProcessor.java:178) [picketlink-federation-2.6.0.Final.jar:]
	... 13 more

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem that impairs or prevents the functions of the product. PLINK-640 doing a global logout after the sp session is expired results in errors

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved
          relates to

          Enhancement - An enhancement to or refactoring of existing functionality that is not configurable by an end user (typically a change made by an internal team that affects users) PLINK-572 Show error page if SP session expired and user tries GLO

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved

          Activity

            People

              psilva@redhat.com Pedro Igor Craveiro
              alpapad_jira Alexander Papadakis (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: