Michael Ströder wrote:
> Scott Battaglia wrote:
>> Can you give us any hints as to what you're trying to migrate?
>
> I'm using LDAP and SPNEGO with MS AD. To avoid any migration trouble I've
> started over nearly from scratch with a new deployerConfigContext.xml etc.
>
> The trace log shows that both authc provides seems to be configured.
This message shows up:
2011-02-02 22:13:43,284 TRACE
[org.jasig.cas.web.NoSuchFlowExecutionExceptionResolver] - Entering method
[resolveException with arguments
[[org.apache.catalina.connector.RequestFacade@1a18ee2,
org.apache.catalina.connector.ResponseFacade@1abcd9b,
[FlowHandlerMapping.DefaultFlowHandler@114a3c6],
org.springframework.webflow.execution.FlowExecutionException: Exception thrown
in state 'viewLoginForm' of flow 'login']]
See more of the log below...
Attached the login-webflow.xml which I've modified according to section "Set
up the login webflow" on https://wiki.jasig.org/display/CASUM/SPNEGO
Ciao, Michael.
--------------------------------- snip ---------------------------------
2011-02-02 22:13:43,250 TRACE
[org.jasig.cas.services.web.ServiceThemeResolver] - Leaving method
[resolveThemeName] with return value [cas-theme-default].
2011-02-02 22:13:43,284 TRACE
[org.jasig.cas.web.NoSuchFlowExecutionExceptionResolver] - Entering method
[resolveException with arguments
[[org.apache.catalina.connector.RequestFacade@1a18ee2,
org.apache.catalina.connector.ResponseFacade@1abcd9b,
[FlowHandlerMapping.DefaultFlowHandler@114a3c6],
org.springframework.webflow.execution.FlowExecutionException: Exception thrown
in state 'viewLoginForm' of flow 'login']]
2011-02-02 22:13:43,284 TRACE
[org.jasig.cas.web.NoSuchFlowExecutionExceptionResolver] - Leaving method
[resolveException] with return value [null].
2011-02-02 22:13:43,287 TRACE [org.jasig.cas.web.init.SafeDispatcherServlet] -
Leaving method [service] with return value [null].
2011-02-02 22:13:43,445 TRACE
[org.jasig.cas.services.web.ServiceThemeResolver] - Entering method
[resolveThemeName with arguments
[[org.apache.catalina.core.ApplicationHttpRequest@e6c6d7]]
2011-02-02 22:13:43,446 TRACE [org.jasig.cas.aspect.LogAspect] - Entering
method [getService with arguments
[[[org.jasig.cas.web.support.CasArgumentExtractor@273f4e,
org.jasig.cas.web.support.SamlArgumentExtractor@178a7d9],
org.apache.catalina.core.ApplicationHttpRequest@e6c6d7]]
2011-02-02 22:13:43,446 TRACE [org.jasig.cas.web.support.CasArgumentExtractor]
- Entering method [extractService with arguments
[[org.apache.catalina.core.ApplicationHttpRequest@e6c6d7]]
2011-02-02 22:13:43,446 TRACE [org.jasig.cas.web.support.CasArgumentExtractor]
- Entering method [extractServiceInternal with arguments
[[org.apache.catalina.core.ApplicationHttpRequest@e6c6d7]]
2011-02-02 22:13:43,446 TRACE [org.jasig.cas.aspect.LogAspect] - Entering
method [createServiceFrom with arguments
[[org.apache.catalina.core.ApplicationHttpRequest@e6c6d7,
org.jasig.cas.util.HttpClient@18f1a31]]
2011-02-02 22:13:43,446 TRACE [org.jasig.cas.aspect.LogAspect] - Leaving
method [createServiceFrom] with return value [null].
2011-02-02 22:13:43,446 TRACE [org.jasig.cas.web.support.CasArgumentExtractor]
- Leaving method [extractServiceInternal] with return value [null].
2011-02-02 22:13:43,446 DEBUG [org.jasig.cas.web.support.CasArgumentExtractor]
- Extractor did not generate service.
--
You are currently subscribed to [email protected] as:
[email protected]
To unsubscribe, change settings or access archives, see
http://www.ja-sig.org/wiki/display/JSG/cas-user
<?xml version="1.0" encoding="UTF-8"?>
<flow xmlns="http://www.springframework.org/schema/webflow";
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
xsi:schemaLocation="http://www.springframework.org/schema/webflow
http://www.springframework.org/schema/webflow/spring-webflow-2.0.xsd";>
<on-start>
<evaluate expression="initialFlowSetupAction" />
</on-start>
<decision-state id="ticketGrantingTicketExistsCheck">
<if test="flowScope.ticketGrantingTicketId neq null" then="hasServiceCheck" else="gatewayRequestCheck" />
</decision-state>
<decision-state id="gatewayRequestCheck">
<if test="externalContext.requestParameterMap['gateway'] neq '' && externalContext.requestParameterMap['gateway'] neq null && flowScope.service neq null" then="gatewayServicesManagementCheck" else="viewLoginForm" />
</decision-state>
<decision-state id="hasServiceCheck">
<if test="flowScope.service != null" then="renewRequestCheck" else="viewGenericLoginSuccess" />
</decision-state>
<decision-state id="renewRequestCheck">
<if test="externalContext.requestParameterMap['renew'] neq '' && externalContext.requestParameterMap['renew'] neq null" then="viewLoginForm" else="generateServiceTicket" />
</decision-state>
<!--
The "warn" action makes the determination of whether to redirect directly to the requested
service or display the "confirmation" page to go back to the server.
-->
<decision-state id="warn">
<if test="flowScope.warnCookieValue" then="showWarningView" else="redirect" />
</decision-state>
<!--
<action-state id="startAuthenticate">
<action bean="x509Check" />
<transition on="success" to="sendTicketGrantingTicket" />
<transition on="warn" to="warn" />
<transition on="error" to="viewLoginForm" />
</action-state>
-->
<action-state id="startAuthenticate">
<evaluate expression="negociateSpnego" />
<transition on="success" to="spnego" />
</action-state>
<action-state id="spnego">
<evaluate expression="spnego" />
<transition on="success" to="sendTicketGrantingTicket" />
<transition on="error" to="viewLoginForm" />
</action-state>
<view-state id="viewLoginForm" view="casLoginView" model="credentials">
<var name="credentials" class="org.jasig.cas.authentication.principal.UsernamePasswordCredentials" />
<binder>
<binding property="username" />
<binding property="password" />
</binder>
<on-entry>
<set name="viewScope.commandName" value="'credentials'" />
</on-entry>
<transition on="submit" bind="true" validate="true" to="realSubmit">
<set name="flowScope.credentials" value="credentials" />
<evaluate expression="authenticationViaFormAction.doBind(flowRequestContext, flowScope.credentials)" />
</transition>
</view-state>
<action-state id="realSubmit">
<evaluate expression="authenticationViaFormAction.submit(flowRequestContext, flowScope.credentials, messageContext)" />
<transition on="warn" to="warn" />
<transition on="success" to="sendTicketGrantingTicket" />
<transition on="error" to="viewLoginForm" />
</action-state>
<action-state id="sendTicketGrantingTicket">
<evaluate expression="sendTicketGrantingTicketAction" />
<transition to="serviceCheck" />
</action-state>
<decision-state id="serviceCheck">
<if test="flowScope.service neq null" then="generateServiceTicket" else="viewGenericLoginSuccess" />
</decision-state>
<action-state id="generateServiceTicket">
<evaluate expression="generateServiceTicketAction" />
<transition on="success" to ="warn" />
<transition on="error" to="viewLoginForm" />
<transition on="gateway" to="gatewayServicesManagementCheck" />
</action-state>
<action-state id="gatewayServicesManagementCheck">
<evaluate expression="gatewayServicesManagementCheck" />
<transition on="success" to="redirect" />
</action-state>
<action-state id="redirect">
<evaluate expression="flowScope.service.getResponse(requestScope.serviceTicketId)" result-type="org.jasig.cas.authentication.principal.Response" result="requestScope.response" />
<transition to="postRedirectDecision" />
</action-state>
<decision-state id="postRedirectDecision">
<if test="requestScope.response.responseType.name() eq 'POST'" then="postView" else="redirectView" />
</decision-state>
<!--
the "viewGenericLogin" is the end state for when a user attempts to login without coming directly from a service.
They have only initialized their single-sign on session.
-->
<end-state id="viewGenericLoginSuccess" view="casLoginGenericSuccessView" />
<!--
The "showWarningView" end state is the end state for when the user has requested privacy settings (to be "warned") to be turned on. It delegates to a
view defines in default_views.properties that display the "Please click here to go to the service." message.
-->
<end-state id="showWarningView" view="casLoginConfirmView" />
<end-state id="postView" view="postResponseView">
<on-entry>
<set name="requestScope.parameters" value="requestScope.response.attributes" />
<set name="requestScope.originalUrl" value="flowScope.service.id" />
</on-entry>
</end-state>
<!--
The "redirect" end state allows CAS to properly end the workflow while still redirecting
the user back to the service required.
-->
<end-state id="redirectView" view="externalRedirect:${requestScope.response.url}" />
<end-state id="viewServiceErrorView" view="viewServiceErrorView" />
<end-state id="viewServiceSsoErrorView" view="viewServiceSsoErrorView" />
<global-transitions>
<transition to="viewServiceErrorView" on-exception="org.springframework.webflow.execution.repository.NoSuchFlowExecutionException" />
<transition to="viewServiceSsoErrorView" on-exception="org.jasig.cas.services.UnauthorizedSsoServiceException" />
<transition to="viewServiceErrorView" on-exception="org.jasig.cas.services.UnauthorizedServiceException" />
</global-transitions>
</flow>
