cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

RE: [[cat-users]] Unhandled exception after idp authentication

From: "Fenwick, David" <David.Fenwick AT rhul.ac.uk>
To: "cat-users AT lists.geant.org" <cat-users AT lists.geant.org>
Subject: RE: [[cat-users]] Unhandled exception after idp authentication
Date: Wed, 23 Jan 2019 14:01:11 +0000
Accept-language: en-GB, en-US
Authentication-results: prod-mail.geant.net (amavisd-new); dkim=pass (1024-bit key) header.d=rhul.onmicrosoft.com
Authentication-results: spf=none (sender IP is ) smtp.mailfrom=David.Fenwick AT rhul.ac.uk;
Spamdiagnosticmetadata: NSPM
Spamdiagnosticoutput: 1:99

Hi Again,

Can you point us in the right direction where we need to change this configuration on our idp server, it is running Centos6. Do we need to substitute the NameQualifier and WAYF-DK-some_value (highlited parts ) below for anything unique to us? We are a bit lost how to fix this but I am desperate to get on the CAT admin portal. We do use OpenAthens for other stuff as well and do not want to impact any live services.

<saml:Attribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri">

<saml:AttributeValue>

<saml:NameID NameQualifier="https://birk.wayf.dk/birk.php/wayf.itu.dk/saml2/idp/metadata.php" SPNameQualifier="https://monitor.eduroam.org/sp/module.php/saml/sp/metadata.php/default-sp" Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent">WAYF-DK-some_value</saml:NameID>

</saml:AttributeValue>

</saml:Attribute>

David Fenwick

Network Administrator

01784276664
Royal Holloway, University of London
Egham, Surrey, TW20 0EX

From: Fenwick, David
Sent: 18 December 2018 08:28
To: 'cat-users AT lists.geant.org' <cat-users AT lists.geant.org>
Subject: Unhandled exception after idp authentication

Hi Support,

I’m having issues getting onto the cat site, I have not been on previously.

I choose my organisation, get redirected to an OpenAthens login for my org, login and get redirected to https://monitor.eduroam.org/sp/module.php/saml/sp/saml2-acs.php/default-sp

Where I get a unhandled exception page below. Can you help please J .

Debug information

The debug information below may be of interest to the administrator / help desk:

SimpleSAML_Error_Error: UNHANDLEDEXCEPTION

Backtrace:

1 www/_include.php:45 (SimpleSAML_exception_handler)

0 [builtin] (N/A)

Caused by: SAML2\Exception\RuntimeException: A "urn:mace:dir:attribute-def:eduPersonTargetedID" (EPTI) attribute value must be a NameID, none found for value no. "0"

Backtrace:

8 vendor/simplesamlphp/saml2/src/SAML2/Assertion.php:558 (SAML2\Assertion::parseAttributeValue)

7 vendor/simplesamlphp/saml2/src/SAML2/Assertion.php:540 (SAML2\Assertion::parseAttributes)

6 vendor/simplesamlphp/saml2/src/SAML2/Assertion.php:298 (SAML2\Assertion::__construct)

5 vendor/simplesamlphp/saml2/src/SAML2/EncryptedAssertion.php:97 (SAML2\EncryptedAssertion::getAssertion)

4 modules/saml/lib/Message.php:398 (sspmod_saml_Message::decryptAssertion)

3 modules/saml/lib/Message.php:611 (sspmod_saml_Message::processAssertion)

2 modules/saml/lib/Message.php:578 (sspmod_saml_Message::processResponse)

1 modules/saml/www/sp/saml2-acs.php:129 (require)

0 www/module.php:135 (N/A)

David Fenwick

Network Administrator

01784276664
Royal Holloway, University of London
Egham, Surrey, TW20 0EX

RE: [[cat-users]] Unhandled exception after idp authentication, Fenwick, David, 01/11/2019
- <Possible follow-up(s)>
- RE: [[cat-users]] Unhandled exception after idp authentication, Fenwick, David, 01/23/2019
  - Re: [[cat-users]] Unhandled exception after idp authentication, Stefan Winter, 01/28/2019