Hate to do this, but given that it was posted over the 4th weekend,
bumping. Anyone have any ideas / experience with OpenID in CAS 5.x?
On 06/30/2017 11:22 AM, Richard Frovarp wrote:
I'm trying to figure out how to use the OpenID protocol integration.
It seems like my best best for integrating one of the products we use.
Right now I am testing with the demo project from the PHP OpenID
project. This is against 5.1.1.
It at least partially appears to work if I can SSO right on through. I
say partially, as I don't quite understand the libraries and what is
exactly supposed to be happening. The PHP page indicates success, but
doesn't have any attributes. cas.log is empty of stack traces.
However, if I do an actual login, it doesn't work. PHP page throws a
warning, and cas.log has stack traces. Not sure what I'm missing. I
originally thought it was a problem with MFA, but the error also
triggers on a non-MFA account.
Below are the partial stack traces. I'm not sure where and how the
openid.mode is supposed to be set.
2017-06-30 11:13:39,643 ERROR
[org.apereo.cas.support.openid.authentication.principal.OpenIdServiceResponseBuilder]
- <Message exception : [0x100: Required parameter missing: openid.mode]>
org.openid4java.message.MessageException: 0x100: Required parameter
missing: openid.mode
at org.openid4java.message.Message.validate(Message.java:187)
~[openid4java-1.0.0.jar:?]
at
org.openid4java.message.AuthRequest.validate(AuthRequest.java:228)
~[openid4java-1.0.0.jar:?]
at
org.openid4java.message.AuthRequest.createAuthRequest(AuthRequest.java:115)
~[openid4java-1.0.0.jar:?]
at
org.apereo.cas.support.openid.authentication.principal.OpenIdServiceResponseBuilder.getAssociation(OpenIdServiceResponseBuilder.java:157)
~[cas-server-support-openid-5.1.1.jar:5.1.1]
at
org.apereo.cas.support.openid.authentication.principal.OpenIdServiceResponseBuilder.build(OpenIdServiceResponseBuilder.java:81)
~[cas-server-support-openid-5.1.1.jar:5.1.1]
at
org.apereo.cas.web.flow.RedirectToServiceAction.doExecute(RedirectToServiceAction.java:30)
~[cas-server-core-webflow-5.1.1.jar:5.1.1]
at
org.springframework.webflow.action.AbstractAction.execute(AbstractAction.java:188)
~[spring-webflow-2.4.4.RELEASE.jar:2.4.4.RELEASE]
2017-06-30 11:13:39,644 ERROR [org.openid4java.server.ServerManager] -
<Invalid authentication request; responding with a direct error message.>
org.openid4java.message.MessageException: 0x100: Required parameter
missing: openid.mode
at org.openid4java.message.Message.validate(Message.java:187)
~[openid4java-1.0.0.jar:?]
at
org.openid4java.message.AuthRequest.validate(AuthRequest.java:228)
~[openid4java-1.0.0.jar:?]
at
org.openid4java.message.AuthRequest.createAuthRequest(AuthRequest.java:115)
~[openid4java-1.0.0.jar:?]
at
org.openid4java.server.ServerManager.authResponse(ServerManager.java:641)
~[openid4java-1.0.0.jar:?]
at
org.openid4java.server.ServerManager.authResponse(ServerManager.java:550)
~[openid4java-1.0.0.jar:?]
at
org.openid4java.server.ServerManager$$FastClassBySpringCGLIB$$edae2866.invoke(<generated>)
~[openid4java-1.0.0.jar:?]
at
org.springframework.cglib.proxy.MethodProxy.invoke(MethodProxy.java:204)
~[spring-core-4.3.8.RELEASE.jar:4.3.8.RELEASE]
at
org.springframework.aop.framework.CglibAopProxy$CglibMethodInvocation.invokeJoinpoint(CglibAopProxy.java:738)
~[spring-aop-4.3.8.RELEASE.jar:4.3.8.RELEASE]
at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157)
~[spring-aop-4.3.8.RELEASE.jar:4.3.8.RELEASE]
at
org.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:133)
~[spring-aop-4.3.8.RELEASE.jar:4.3.8.RELEASE]
at
org.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:121)
~[spring-aop-4.3.8.RELEASE.jar:4.3.8.RELEASE]
at
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179)
~[spring-aop-4.3.8.RELEASE.jar:4.3.8.RELEASE]
at
org.springframework.aop.framework.CglibAopProxy$DynamicAdvisedInterceptor.intercept(CglibAopProxy.java:673)
~[spring-aop-4.3.8.RELEASE.jar:4.3.8.RELEASE]
at
org.openid4java.server.ServerManager$$EnhancerBySpringCGLIB$$3cb266a5.authResponse(<generated>)
~[openid4java-1.0.0.jar:?]
at
org.apereo.cas.support.openid.authentication.principal.OpenIdServiceResponseBuilder.buildAuthenticationResponse(OpenIdServiceResponseBuilder.java:142)
~[cas-server-support-openid-5.1.1.jar:5.1.1]
at
org.apereo.cas.support.openid.authentication.principal.OpenIdServiceResponseBuilder.build(OpenIdServiceResponseBuilder.java:102)
~[cas-server-support-openid-5.1.1.jar:5.1.1]
at
org.apereo.cas.web.flow.RedirectToServiceAction.doExecute(RedirectToServiceAction.java:30)
~[cas-server-core-webflow-5.1.1.jar:5.1.1]
Thanks,
Richard
--
- CAS gitter chatroom: https://gitter.im/apereo/cas
- CAS mailing list guidelines: https://apereo.github.io/cas/Mailing-Lists.html
- CAS documentation website: https://apereo.github.io/cas
- CAS project website: https://github.com/apereo/cas
---
You received this message because you are subscribed to the Google Groups "CAS Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/2b503fc4-c3b0-6efa-99a3-7eac82666649%40ndsu.edu.
