ESOE Users Google Group

Installing the SPEP on jboss

2008-10-07T14:06:31Z

Dear All,

Does anybody has any idea about installing the spep on app servers
other than tomcat. Basically i am confused where to place spep-
endorsed.tar.gz in jboss app server?

Thanks,
Elyas

Re: [esoe-users] Re: shibdelegator logging issues

2008-10-07T10:42:50Z

Hi,
In short yes. The delegator should be protected by the standard
shibboleth 1.x SP software.
We weren't about to try and write our own software to support this
shibboleth profiles when this was already done.
Essentially the shibboleth process happens as per usual to a shib SP.
The delegator then reads all the details about the shib user from the

Re: [esoe-users] shibdelegator logging issues

2008-10-07T08:24:02Z

Hi Bradley,

I'm a little confused by Shibboleth Authentication Delegator
documentation and would like some clarification as I may have
completely missed the point. Under the User Interaction section you
say "This redirection is configured as part of your shibboleth SP".
Does this mean that the shibdelegator is dependant on some third party

Re: [esoe-users] shibdelegator logging issues

2008-10-01T01:06:25Z

Hi,
Checkout the file log4j.xml in $tomcat/shibdeleg/WEB-INF/clas ses and try
setting a value directly in there for path to see if that helps.
Apart from that all I can really think of is that some other component
is hosing your SLF4j/Log4j setup, possibly jars in common/lib or
shared/lib of Tomcat.

shibdelegator logging issues

2008-09-29T11:02:37Z

Hi Bradley/Shaun,

I'm currently trying to configure the shibdelegator to work with a
WAYF downloaded from shibboleth. I've tried configuring the log4j.xml
as per your instructions but no shib.log is being generated.

Currently I have a variable set as -Dshibdeleg.data=/home/esoe/op t/
esoe/shibdelegator in the JAVA_OPTS, and I assume this is correct as

Re: [esoe-users] Getting the big picture

2008-09-26T04:09:44Z

Hi Phil,
Sounds like a large interesting project.
There is essentially a 1:1 mapping between SPEP and application (though
you can configure a single SPEP to reside over multiple WAR files in a
tomcat instance for example). Each SPEP instance can then have multiple
policy files to enforce access constraints as required.

Getting the big picture

2008-09-26T02:36:52Z

I'm currently looking into implementing SSO for a wide range of web
sites such as Blackboard, Google Apps, Outlook Web Access and a
growing number of in house Ruby on Rails sites. These sites are
accessed both internally and externally by staff/students with AD
accounts and parents/agents with login details stored in various

Re: [esoe-users] How to SAML enable my JSP based application

2008-09-24T21:56:53Z

Hi,
The easiest method is to deploy the Java SPEP and SPEP filter which is
the client side code you can use to handle all communication with the
central ESOE deployment on your behalf.
This takes care of all redirections, authentication, attribute exchange
and policy enforcement. You then simply need to write what we call an

How to SAML enable my JSP based application

2008-09-24T13:42:52Z

Dear All,

I have a JSP application which need to be SAML enabled.

Whenever my application URL is accessed I could redirect to eso login
page and redirect back to the original application page. However i
couldn't do anything further bacuse of lacl of knowledge.

1 )What do I need to include in my application code to enable SAML

Re: esoemanager and ROOT contexts fail to start

2008-09-17T14:53:37Z

Hi,

I have also come across this sort of error in windows environment.

This might help -

Go to webapps\ROOT\WEB-INF\globalCon fig.xml and add one more / in the
location property value (file:///${esoe.data) like the following one -

<bean id="globalConfig"

class="org.springframework.bea ns.factory.config.PropertyPlac eholderConfigurer">

Re: esoemanager and ROOT contexts fail to start

2008-09-17T00:56:05Z

I did test the user dn and the password with ldp.exe of Microsoft tools
and it can search correctly.
The strange thing is that i have the user in AD and when i am running
the ktpass then i cannot bind the user (from the ldp.exe for example)
and it can only be bound if i reset his password. I cannot get this.

Re: [esoe-users] Re: esoemanager and ROOT contexts fail to start

2008-09-17T00:35:38Z

Hi,
Lets start by disabling SPNEGO and just getting the plain LDAP
authentication against your AD instance working.

To do this remove spengo as a value of activeAuthnPlugins in esoe.config
(requires a restart).

Secondly specify an admin user DN and password for binding to AD and set
recursive searching to be true. I would then manually test accessing AD

Re: [esoe-users] Re: esoemanager and ROOT contexts fail to start

2008-09-16T11:24:49Z

Nice.. Thanks.. I am not sure if i could imagine that..
Now i am one step forward and your help about path's syntax was the
solution. ESOE is up and running and when i am trying to open esoemanager it
redirects me to the magic login screen.
But user's credentials cannot be authenticated against Active Directory.

Re: [esoe-users] Re: esoemanager and ROOT contexts fail to start

2008-09-15T23:49:31Z

Hi,
I've managed to reproduce this in my windows environment, so this is
definitely a platform problem. The problem is that the esoe.data, etc paths
are being interpreted as relative URIs to the base file:// URL. When there
is no leading / on the esoe.data location, the URL file://C:\esoe\... is
parsed.

Re: [esoe-users] Re: esoemanager and ROOT contexts fail to start

2008-09-15T23:13:15Z

Hi, again
variable JAVA_OPTS is not recognized there BUT i set all esoe.data,
esoemanager.data, spep.data as java options from"tomcat6w //ES//Tomcat6"
dialog and it seems to work as well as the bin/startup script. For example
in the esoestartup project in the form with these three files the values was