According to the Shib source its because the name is null. As to why
the name is null I have no clue:
http://svn.middleware.georgetown.edu/view/java-idp/tags/2.2.0/src/main/java/edu/internet2/middleware/shibboleth/idp/authn/UsernamePrincipal.java?revision=2956&view=markup
Yes.
So CAS Client Filter isn't feeding Shib with proper data (username).
I need to configure IdP using CAS SAML protocol.
Do you know any solution for this problem?
I've tried with:
- simplesamlphp - it's working OK with CAS2.0, but CAS2.0 has no
attributes, with SAML it even couldn't validate ticket
- Shib - problems I have mentioned in previous post
Michal Pysz
We've never tested our SAML stuff with Shibboleth so I don't know about
compliance (if people point out how we interpreted the spec wrong we are
more than happy to bring it into compliance. Our main priority was
getting CAS attribute return on something standardized).
On Sun, Oct 31, 2010 at 6:10 PM, Michał Pysz <[email protected]
<mailto:[email protected]>> wrote:
Hi,
did anybody managed to configure Shibboleth using
org.jasig.cas.client.validation.Saml11TicketValidationFilter
Java Client instead of
org.jasig.cas.client.validation.Cas20ProxyReceivingTicketValidationFilter
?
On this page:
https://wiki.jasig.org/display/CASUM/Shibboleth-CAS+Integration
is presented an example with CAS2.0 protocol, but I've never found
any examples for SAML.
When I change filter definition to:
<filter>
<filter-name>CAS Validation Filter</filter-name>
<filter-class>
org.jasig.cas.client.validation.Saml11TicketValidationFilter
</filter-class>
<init-param>
<param-name>casServerUrlPrefix</param-name>
<param-value>https://login.uj.edu.pl/</param-value>
</init-param>
<init-param>
<param-name>redirectAfterValidation</param-name>
<param-value>true</param-value>
</init-param>
</filter>
I get:
SEVERE: Servlet.service() for servlet AuthenticationEngine threw
exception
java.lang.NullPointerException
at
edu.internet2.middleware.shibboleth.idp.authn.UsernamePrincipal.hashCode(UsernamePrincipal.java:54)
Michal Pysz
--
You are currently subscribed to [email protected]
<mailto:[email protected]> as: [email protected]
<mailto:[email protected]>
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
