Loading...

Type: Bug
Resolution: Done
Priority: Major
Fix Version/s: PLINK_2.7.0.Beta1
Affects Version/s: PLINK_2.5.2.FInal, PLINK_2.6.0.Final
Component/s: SAML
Labels:
None

Steps to Reproduce:

Hide

Deploy the attached wars and follow the link:

http://localhost:8080/sp01/?GLO=true

As an alternative, navigate to any sp, login, return to the sp and wait for a few minutes for the session to expire. Then hit the logout link

Show
Deploy the attached wars and follow the link: http://localhost:8080/sp01/?GLO=true As an alternative, navigate to any sp, login, return to the sp and wait for a few minutes for the session to expire. Then hit the logout link
Git Pull Request:
https://github.com/picketlink/picketlink/pull/375
Bugzilla References:
https://bugzilla.redhat.com/show_bug.cgi?id=1217228, https://bugzilla.redhat.com/show_bug.cgi?id=1217246

The following exception is thrown (plink 2.5.2) and a white page shows:

14:51:12,148 WARN  [org.picketlink.common] (http-/127.0.0.1:8080-1) Check addJceProvider method of org.picketlink.identity.federation.core.util.ProvidersUtil for more info.
14:58:22,796 ERROR [org.picketlink.common] (http-/127.0.0.1:8080-1) Unexpected error: org.picketlink.common.exceptions.ProcessingException: PL00022: Principal Not Found
        at org.picketlink.common.DefaultPicketLinkLogger.samlHandlerPrincipalNotFoundError(DefaultPicketLinkLogger.java:1526)
        at org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler$SPLogOutHandler.generateSAMLRequest(SAML2LogOutHandler.java:363) [picketlink-federation-2.5.2.Final.jar:]
        at org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler.generateSAMLRequest(SAML2LogOutHandler.java:94) [picketlink-federation-2.5.2.Final.jar:]
        at org.picketlink.identity.federation.web.process.ServiceProviderBaseProcessor.process(ServiceProviderBaseProcessor.java:177) [picketlink-federation-2.5.2.Final.jar:]
        at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.generalUserRequest(AbstractSPFormAuthenticator.java:603) [picketlink-jbas7-2.5.2.Final.jar:2.5.2.Final]
        at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.authenticate(AbstractSPFormAuthenticator.java:328) [picketlink-jbas7-2.5.2.Final.jar:2.5.2.Final]
        at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.authenticate(AbstractSPFormAuthenticator.java:261) [picketlink-jbas7-2.5.2.Final.jar:2.5.2.Final]
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:447) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:169) [jboss-as-web-7.2.0.CP04.jar:7.2.0.CP04]
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:145) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:97) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:102) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:336) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:653) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:920) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at java.lang.Thread.run(Thread.java:744) [rt.jar:1.7.0_45]

14:58:22,813 ERROR [org.apache.catalina.connector] (http-/127.0.0.1:8080-1) JBWEB001018: An exception or error occurred in the container during the request processing: java.lang.RuntimeException: Error during processing the SAML Handler Chain.
        at org.picketlink.common.DefaultPicketLinkLogger.samlHandlerChainProcessingError(DefaultPicketLinkLogger.java:1625)
        at org.picketlink.identity.federation.web.process.ServiceProviderBaseProcessor.process(ServiceProviderBaseProcessor.java:183) [picketlink-federation-2.5.2.Final.jar:]
        at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.generalUserRequest(AbstractSPFormAuthenticator.java:603) [picketlink-jbas7-2.5.2.Final.jar:2.5.2.Final]
        at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.authenticate(AbstractSPFormAuthenticator.java:328) [picketlink-jbas7-2.5.2.Final.jar:2.5.2.Final]
        at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.authenticate(AbstractSPFormAuthenticator.java:261) [picketlink-jbas7-2.5.2.Final.jar:2.5.2.Final]
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:447) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:169) [jboss-as-web-7.2.0.CP04.jar:7.2.0.CP04]
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:145) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:97) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:102) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:336) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:653) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:920) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
        at java.lang.Thread.run(Thread.java:744) [rt.jar:1.7.0_45]
Caused by: org.picketlink.common.exceptions.ProcessingException: PL00022: Principal Not Found
        at org.picketlink.common.DefaultPicketLinkLogger.samlHandlerPrincipalNotFoundError(DefaultPicketLinkLogger.java:1526)
        at org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler$SPLogOutHandler.generateSAMLRequest(SAML2LogOutHandler.java:363) [picketlink-federation-2.5.2.Final.jar:]
        at org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler.generateSAMLRequest(SAML2LogOutHandler.java:94) [picketlink-federation-2.5.2.Final.jar:]
        at org.picketlink.identity.federation.web.process.ServiceProviderBaseProcessor.process(ServiceProviderBaseProcessor.java:177) [picketlink-federation-2.5.2.Final.jar:]
        ... 13 more

The following exception is thrown (plink 2.6.0) and a white page shows:

16:36:16,136 ERROR [org.picketlink.common] (http-/127.0.0.1:8080-3) Unexpected error: org.picketlink.common.exceptions.ProcessingException: PL00022: Principal Not Found
	at org.picketlink.common.DefaultPicketLinkLogger.samlHandlerPrincipalNotFoundError(DefaultPicketLinkLogger.java:1525)
	at org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler$SPLogOutHandler.generateSAMLRequest(SAML2LogOutHandler.java:396) [picketlink-federation-2.6.0.Final.jar:]
	at org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler.generateSAMLRequest(SAML2LogOutHandler.java:95) [picketlink-federation-2.6.0.Final.jar:]
	at org.picketlink.identity.federation.web.process.ServiceProviderBaseProcessor.process(ServiceProviderBaseProcessor.java:178) [picketlink-federation-2.6.0.Final.jar:]
	at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.generalUserRequest(AbstractSPFormAuthenticator.java:667) [picketlink-jbas7-2.6.0.Final.jar:2.6.0.Final]
	at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.authenticate(AbstractSPFormAuthenticator.java:328) [picketlink-jbas7-2.6.0.Final.jar:2.6.0.Final]
	at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.authenticate(AbstractSPFormAuthenticator.java:260) [picketlink-jbas7-2.6.0.Final.jar:2.6.0.Final]
	at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:447) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:169) [jboss-as-web-7.2.0.CP04.jar:7.2.0.CP04]
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:145) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:97) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:102) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:336) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:653) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:920) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at java.lang.Thread.run(Thread.java:744) [rt.jar:1.7.0_45]

16:36:16,151 ERROR [org.apache.catalina.connector] (http-/127.0.0.1:8080-3) JBWEB001018: An exception or error occurred in the container during the request processing: java.lang.RuntimeException: Error during processing the SAML Handler Chain.
	at org.picketlink.common.DefaultPicketLinkLogger.samlHandlerChainProcessingError(DefaultPicketLinkLogger.java:1624)
	at org.picketlink.identity.federation.web.process.ServiceProviderBaseProcessor.process(ServiceProviderBaseProcessor.java:184) [picketlink-federation-2.6.0.Final.jar:]
	at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.generalUserRequest(AbstractSPFormAuthenticator.java:667) [picketlink-jbas7-2.6.0.Final.jar:2.6.0.Final]
	at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.authenticate(AbstractSPFormAuthenticator.java:328) [picketlink-jbas7-2.6.0.Final.jar:2.6.0.Final]
	at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.authenticate(AbstractSPFormAuthenticator.java:260) [picketlink-jbas7-2.6.0.Final.jar:2.6.0.Final]
	at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:447) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:169) [jboss-as-web-7.2.0.CP04.jar:7.2.0.CP04]
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:145) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:97) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:102) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:336) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:653) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:920) [jbossweb-7.2.0.Final.jar:7.2.0.Final]
	at java.lang.Thread.run(Thread.java:744) [rt.jar:1.7.0_45]
Caused by: org.picketlink.common.exceptions.ProcessingException: PL00022: Principal Not Found
	at org.picketlink.common.DefaultPicketLinkLogger.samlHandlerPrincipalNotFoundError(DefaultPicketLinkLogger.java:1525)
	at org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler$SPLogOutHandler.generateSAMLRequest(SAML2LogOutHandler.java:396) [picketlink-federation-2.6.0.Final.jar:]
	at org.picketlink.identity.federation.web.handlers.saml2.SAML2LogOutHandler.generateSAMLRequest(SAML2LogOutHandler.java:95) [picketlink-federation-2.6.0.Final.jar:]
	at org.picketlink.identity.federation.web.process.ServiceProviderBaseProcessor.process(ServiceProviderBaseProcessor.java:178) [picketlink-federation-2.6.0.Final.jar:]
	... 13 more

- - Sort By Name
  - Sort By Date
  - Ascending
  - Descending
  - Thumbnails
  - List
  - Download All

deployments.zip
496 kB
2014/08/21 9:33 AM

is duplicated by

PLINK-640 doing a global logout after the sp session is expired results in errors

Resolved

relates to

PLINK-572 Show error page if SP session expired and user tries GLO

Resolved

Details

Description

Attachments

Attachments

Issue Links

Easy Agile Planning Poker

Activity

People

Dates