ESOE Users Google Group

ESOE manager & spep does not function after installation

martin.vanten.karls...@gmail.com (Martin Karlsson) — Thu, 19 Nov 2009 13:19:23 UT

Hi,

First, I would like to point out some errors in the existing
esoemanager.war & esoestartup.war:
In esoemanager; in web-inf/globalConfig.xml there is a misspelling;
value="file://${ should be value="file:/${. (notice that is should
only be one /).
Secondly; in esoestartup/web-inf/classes/lo g4j.xml; the logger should

Recent spam emails

s.mangelsd...@gmail.com (Shaun Mangelsdorf) — Sun, 20 Sep 2009 05:58:54 UT

Hi All,
Due to recent spam emails, I've changed the list settings so that email from
new members will be moderated. This means there will be a delay the first
time you post to either list, but will hopefully eliminate the spam we've
been seeing lately.
Regards,
Shaun

ESOE Project News - Releases, Git

s.mangelsd...@gmail.com (Shaun Mangelsdorf) — Tue, 11 Aug 2009 06:08:56 UT

Hi All,
After a long period of quiet, mostly due to the shifted priorities of our
development team, I'm glad to announce that the ESOE Project is back in
active development. We have some updates:
New site, new source control
In preparation for the move to Git source control, we migrated the ESOE
Project site to Redmine ([link]) back in April. We've now moved

ESOE specification

filipa.mo...@alert.pt (Filipa) — Wed, 08 Apr 2009 09:12:20 UT

Hello,
i want to implement a SSO solution using SAML and i've been looking at
ESOE as a possible solution.. however i have some questions because
there are somethings i cant understand or cant find information for.

What i want to do is find a solution for SSO that uses SAML.. I have
my application which will be the starting point..assuming it's a web

Errors Running generate_db-mysql.sql

hodg...@gmail.com (hodgesz@gmail.com) — Sat, 04 Apr 2009 02:08:08 UT

I just attempted to run the script generate_db-mysql.sql and got the
following errors.

ERROR 1071 (42000): Specified key was too long; max key length is 767
bytes

ERROR 1005 (HY000): Can't create table 'esoe.#sql-228_f' (errno: 150)
ERROR 1005 (HY000): Can't create table 'esoe.#sql-228_f' (errno: 150)

Newbie question

fatimaaja...@gmail.com (fatima) — Fri, 06 Mar 2009 17:45:33 UT

I was looking for a solution to integrate Google Apps with our Active
Directory, it seems i need to implement SSO if i want to use the same
password, i am not sure if ESOE will be too complicated for this and
is meant for more complex problems, any suggestions?
also if this implementation would enable IMAP access to Google Apps

esoe install

cob...@hotmail.com (cobbds@hotmail.com) — Fri, 20 Feb 2009 15:43:08 UT

I am trying to install ESOE on a new installation of xampp. I have
followed the instructions, but when I try and start tomcat it attempts
to deploy the esoestartup.war file and i get and error message about
log4j to being able to create an appender. After this a bunch of
messages come up and it tells me to initialize the log4j system

Active Directory problem

michaelbli...@hotmail.com (Michael) — Thu, 05 Feb 2009 23:13:19 UT

Hi All,

I have got past a few problems with installation, and have finally got
to the login page, but continually come up with a login failure. I
have tested my LDAP connection and credentials using an LDAP browser
and they work fine, but I am no expert here.

I have tried a few options by stopping Tomcat, changing the "## LDAP

Duplicate entry

monico.bris...@gmail.com (monico.briseno@gmail.com) — Tue, 27 Jan 2009 21:24:59 UT

Hi, all. I setting up ESO, but in the final section of the procedure I
had the following
Error
While attempting to register the ESOE an error has occured,
preliminary details are listed below. For more information ensure
logging is set to debug and check your log files.

ESOEDAOException when attempting to configure ESOE details --- The

Feature question...er

het...@gmail.com (Enrique Tang) — Thu, 20 Nov 2008 16:41:27 UT

Hi there,
Trying to get clarified on the feature ESOE offer to help better design my
project implmentation...
My understanding is that ESOE supports SSO with Active Directory user
identity, but could AD OU or hostname info be used to set up this SSO too?
I'm pretty new to this realm so please excuse me and let me know if more

SPEP Error with different esoe instance

elyas.moha...@gmail.com (elyas) — Tue, 28 Oct 2008 07:05:07 UT

spep.config in SPEP instance jboss
------------------------------ ---

Point (SPEP) global configuration file
operates in production, please change with

keystorePath=${spep.data}/conf ig/spepKeystore.ks
keystorePassword=54019a6fc983e bc01e55
spepKeyAlias=388408730a414003
spepKeyPassword=e5b42af6606c57 366884

Installing the SPEP on jboss

elyas.moha...@gmail.com (elyas) — Tue, 07 Oct 2008 14:06:31 UT

Dear All,

Does anybody has any idea about installing the spep on app servers
other than tomcat. Basically i am confused where to place spep-
endorsed.tar.gz in jboss app server?

Thanks,
Elyas

shibdelegator logging issues

nicola...@lycos.co.uk (Bruge) — Mon, 29 Sep 2008 11:02:37 UT

Hi Bradley/Shaun,

I'm currently trying to configure the shibdelegator to work with a
WAYF downloaded from shibboleth. I've tried configuring the log4j.xml
as per your instructions but no shib.log is being generated.

Currently I have a variable set as -Dshibdeleg.data=/home/esoe/op t/
esoe/shibdelegator in the JAVA_OPTS, and I assume this is correct as

Getting the big picture

noemailspa...@gmail.com (Phil Gates) — Fri, 26 Sep 2008 02:36:52 UT

I'm currently looking into implementing SSO for a wide range of web
sites such as Blackboard, Google Apps, Outlook Web Access and a
growing number of in house Ruby on Rails sites. These sites are
accessed both internally and externally by staff/students with AD
accounts and parents/agents with login details stored in various

How to SAML enable my JSP based application

elyas.moha...@gmail.com (elyas) — Wed, 24 Sep 2008 13:42:52 UT

Dear All,

I have a JSP application which need to be SAML enabled.

Whenever my application URL is accessed I could redirect to eso login
page and redirect back to the original application page. However i
couldn't do anything further bacuse of lacl of knowledge.

1 )What do I need to include in my application code to enable SAML

esoemanager and ROOT contexts fail to start

aggelos.karal...@gmail.com (mehiel) — Mon, 15 Sep 2008 10:26:04 UT

Hi all,

I was looking a long time for a good sso solution for my company's web
apps and esoe seems to be good at all my needs.

I have downloaded esoe and run the esoe startup project. I filled in
any information wanted and the config files and DB was created
successfully. Then i made the changes described to the documentation

custom authenticators

elyas.moha...@gmail.com (elyas) — Thu, 11 Sep 2008 07:06:17 UT

Dear Bradley,Shaun et All,

Thanks a lot for the wonderful product. You guys have done really
wonderful job.

I have few more queries :)-

We have an inhouse authentication and authorization module which runs
locally in web based applications. these application run in jboss app
server and interact with sun's ldap server.

policy definition

elyas.moha...@gmail.com (elyas) — Wed, 10 Sep 2008 10:04:05 UT

Dear All,

Can any one please give a hint where to define the policies in the
esoe setup. I saw few examples explained "configuring policies" guide
like the one below-

<Policy PolicyId="urn:simpletest">
<Description>Simple Test Policy. 1 Rule. 1 Resource in 1 target.</
Description>
<Target>

ESOE vs. CAS

samuel.coch...@gmail.com (Sam) — Mon, 08 Sep 2008 01:23:10 UT

Hi all,

This is mainly directed at Bradley -

I've been looking at various single sign-on and session management
solutions. In looking at ESOE I can't help but see massive
similarities to CAS. Is there any reason why QUT chose to develop ESOE
vs. using/adapting CAS? I'm looking at the product in a university

Redirection Problem After Authentication

elyas.moha...@gmail.com (elyas) — Wed, 03 Sep 2008 08:05:09 UT

Dear All,

I have done the basic esoe setup on windows platform with apache ds.

when I go to the URL -
[link]

I get redirected to a page where username and password is prompted

When i key in the wrong username and password I get an error. - Fine

But,When i key in the correct username and password the page stays

ESOE Project Update

bedd...@intient.com (Bradley Beddoes) — Thu, 28 Aug 2008 05:30:01 UT

Hi,
So it's been a while since any of the core dev team made much public comment
about whats been going, those watching SVN are aware but I thought it would
be useful to make things a little more transparent.
Firstly we have a new web presence, a little cleaner then before and
highlights facts about the project that ohloh are kindly assembling from our

openid delegator

nicola...@lycos.co.uk (Bruge) — Wed, 27 Aug 2008 10:04:56 UT

Hi,

I've configured esoe manager, and am now trying to implement the
openiddelegator to begin with, and later the shibboleth delegator.
Note, I'm not using LDAP. Whilst trying to log on to the manager using
openid, I get redirected to /openiddelegator/failed page.

In the openid logs I get org.openid4java.discovery.Disc overyException:

Error reading tld listeners java.lang.NullPointerException

elyas.moha...@gmail.com (elyas) — Thu, 14 Aug 2008 08:12:57 UT

Hi All,

I get following error when i copy esoemanger.war into webapps
directory.

SEVERE: Error reading tld listeners java.lang.NullPointerException
java.lang.NullPointerException

Can anybody help me out by giving a hint what could be the problem??

Regards,
Elyas

config error

elyas.moha...@gmail.com (elyas) — Tue, 12 Aug 2008 11:37:55 UT

Dear All,

When I try to configure esoe with my local apacheds I get the
following error - ESOEDAOException when attempting to configure ESOE
details --- The error occurred in sqlmaps/esoestartup-sqlmap.xml . ---
The error occurred while applying a parameter map. --- Check the
esoestartup.entityDescriptorMa p. --- Check the statement (update

Abilities, requirements

rbra...@botany.org (Rob) — Thu, 07 Aug 2008 06:40:45 UT

I am looking for a single sign-on system, primarily to be used with
OpenID, possibly Shibboleth or ldap. I like OpenID because of the
consistency and branding a URI like myname.example.com provides.
However this will be a "private" system, in which only IDs from
example.com will be allowed. I also need the data to be stored in

SPEPFilter Exception

nicola...@lycos.co.uk (Bruge) — Mon, 28 Jul 2008 16:03:42 UT

Hi,

I'm trying to set up ESOE with a spep both running under the same
context of tomcat 5.5 on a linux machine.
I don't have all the LDAP settings, just the url, and hope to complete
the configuration of this later. I am able to enter and complete
esoestartup wizard, but I'm not able to access the esoemanager, just

pipeline authentication

thatsj...@gmail.com (Jim) — Wed, 02 Jul 2008 23:01:37 UT

Hi All!

I was just wondering how I could implement two authentication sources
(both LDAP) using the pipeline feature (so that if a user fails
authentication in the first source, then it will try to authenticate
with the second).
I tried messing around with the spring configuration for the
userPassword plugin but had no luck.

ESOE & rbac / sessiondata.xml

antant...@gmx.at (Helmut) — Thu, 19 Jun 2008 15:44:40 UT

Hello,

I'm currently evaluating ESOE for a project I'm working on. After
installing it and securing a ressource via SSO I'm trying to
understand how the policy configuration/role management with a ldap
directory is working. In [link]
you're writing, that you are supporting even "distributed" ldap

Is ESOE the right framework for my needs?

mark_lantha...@gmx.net (Markus Lanthaler) — Tue, 03 Jun 2008 10:52:12 UT

Hello,
I'm a Google Summer of Code Student at XWiki ([link]). My task is to
add integration with a higher level authentication/authorisation framework
to support SAML and OpenID authentication. So I'm currently evaluating
various frameworks. ESOE seems to be very interesting.
So my questions are:

ESOE with SAMBA authentication

martijnpl...@gmail.com (Martijn van der Plaat) — Sat, 31 May 2008 13:35:15 UT

Hi all,

I was wondering if it is possible when SAMBA is configured with LDAP
as authentication backend and ESOE is configured with LDAP as
authentication source the SAMBA session is available in ESOE.
This connection is great because when as user logs in to the PDC the
user is also connected to the applications that are connected to ESOE

strange apache spep redirect problem

thatsj...@gmail.com (Jim) — Tue, 27 May 2008 15:22:37 UT

Hi all,

Sometimes after I authenticate successfully to a service node, the
"Security Verified" screen pops up and then tries to redirect back the
the service, but then the service just redirects back to the "Security
Verified" page and it gets stuck in a loop where it will retry about
once a second.

Apache SPEP Beta 2 (0.5.2) released

s.mangelsd...@gmail.com (Shaun Mangelsdorf) — Fri, 23 May 2008 00:23:25 UT

Hi everyone,
Following the release of Apache SPEP 0.5 recently, there have been a few bug
fixes, the most notable being the spepd startup error (
[link]). As such, I have released a bug
fix release. 0.5.1 was an internal testing release so we're at version 0.5.2
now.

problem trying to start spepd

thatsj...@gmail.com (Jim) — Wed, 21 May 2008 04:25:23 UT

Hi all,
After installing apache spep (version 0.5) I am getting an error
trying to run it.
I am using this command:
/usr/local/sbin/spepd -f /usr/local/etc/spep/spep.conf -l /var/log/
spepd.log

and getting this error:
terminate called after throwing an instance of 'boost::bad_any_cast'
what(): boost::bad_any_cast: failed conversion using

Apache SPEP Beta 2 (0.5) released

s.mangelsd...@gmail.com (Shaun Mangelsdorf) — Wed, 30 Apr 2008 06:05:38 UT

Hi everyone,
I am pleased to announce the Beta 2 (0.5) release of the Apache SPEP
libraries. This release contains a number of fixes for bugs and minor
usability issues, most notably:
- SPEP daemon fails gracefully upon a configuration error.
- SPEP daemon will now generate a PID file if requested.
- Solved some cross platform portability issues

ESOE Virtual Machine

bedd...@intient.com (Bradley Beddoes) — Tue, 08 Apr 2008 01:43:48 UT

Hi,
Recently we released a 0.7.0 snapshot of ESOE. To assist users in seeing
how this new version is deployed and also to allow people to test ESOE
without needing to do a large install we are please to now offer a Linux
based VM which is fully configured to act as the central ESOE server.
You can download from the following location:

ESOE 0.7.0 (unoffical Beta 3)

bedd...@intient.com (Bradley Beddoes) — Mon, 31 Mar 2008 04:30:32 UT

Hi,
We'd like to announce the binary availability of ESOE 0.7.0 at:
[link]
This is what we would normally have shipped as the Beta 3 release though
we aren't going to cut a Beta 3 at this point and will instead move to
1.0 as the next "official" version released. 0.7.0 is in production

esoemanager: add a service

jonas.es...@googlemail.com (jonas) — Sun, 23 Mar 2008 14:21:50 UT

Happy Easter!

I try to add a new Service, with the same node that is used by the
esoemanager service. I get an unique constraint error. I'am confused.
Need I a separate spep for all apps? In which case I need more than
one spep nodes?

The ESOE Manager service is created by the esoestartup:

GSOC 2008

bedd...@intient.com (Bradley Beddoes) — Mon, 10 Mar 2008 07:51:14 UT

Hi All,
We have now entered an application for the Google Summer of Code 2008
and have an ideas page up at
[link]
This page will be updated when we know the outcome of our application as
a mentor.
In the meantime the core development team would love to hear any ideas

Trac application integration with ESOE

vaijayanti.ko...@gmail.com (Vaiju) — Fri, 07 Mar 2008 11:46:28 UT

Can I integrate python application such as Trac with ESOE?

SPEP clearCookie

jonas.es...@googlemail.com (jonas) — Thu, 06 Mar 2008 14:38:33 UT

Hello,

after a single logout, the spep filter located the spep cookie and
invalidates the session. After that he adds a clear cookie (spepCookie
with empty value) to the HttpServletResponse and goes on with other
filters (lazyinit mode). But on another httpRequest the old spepCookie
is still in the HttpServletRequest and the session will be invalidated

Correct use of the SessionDataSchema

jonas.es...@googlemail.com (jonas) — Tue, 04 Mar 2008 09:48:03 UT

Hello,

In my scenario, user owns different rights for applications. How can I
pass the rights to a application?
My idea was to add a array with the rights for each application to the
saml response:

ldap configuration

kberta...@gmail.com (kbertalan) — Tue, 26 Feb 2008 09:30:54 UT

Hello!

I want to use esoe for our company, but I get authentication error. I
use apache ds for testing esoe.

My ldap configuration:

ldapURL-1=ldap://localhost
ldapServer-1=localhost
ldapServerPort-1=10389
baseDN-1=ou=people,o=codex
identifier-1=uid
recursive-1=true
disableSSL-1=true

Custom SPEP Filter

jonas.es...@googlemail.com (jonas) — Wed, 20 Feb 2008 08:59:32 UT

Hello,

my applications have public and private pages.
If a authenticated user request a public page,
a filter has to create a ACEGI authentication-object.
And if a non authenticated user request a public page,
there are nothing to do.

My problem is that the spep redirect a non authenticated user

Apache SPEP Beta 1 (0.4) released

s.mangelsd...@gmail.com (Shaun Mangelsdorf) — Mon, 18 Feb 2008 00:55:42 UT

Hi everyone,
I am pleased to announce the Beta 1 (0.4) release of the Apache SPEP
libraries. This release contains bug fixes and some significant
improvements to the configuration process.
We highly recommend that anyone upgrading from an earlier release
rewrite their configuration based on the new spep.conf.default

SQLException in esoemanager

jonas.es...@googlemail.com (jonas) — Wed, 30 Jan 2008 10:39:37 UT

Hello,

I can update the existing Service for the ESOE Manager Web Application
without problems, but if I tried to register a new Service I get the
following error (esoemanager.log).

2008-01-30 11:38:06,890 ERROR
com.qut.middleware.esoemanager .spep.sqlmap.impl.SPEPDAOImpl -
SQLException thrown,

ServletException

jonas.es...@googlemail.com (jonas) — Mon, 28 Jan 2008 16:57:28 UT

Hello,

after I finished the ESOE Startup configuration I get a HTTP-500 error
when I try to open esoemanager/manager/index.htm.

The full stack trace:

SCHWERWIEGEND: Servlet.service() for servlet click-servlet threw
exception
javax.servlet.ServletException : An error occurred while this server

Single Log-Out

jonas.es...@googlemail.com (jonas) — Mon, 28 Jan 2008 09:29:34 UT

hello,

is the SAMLv2 Single Log-out Profile implemented?

Regards,
Jonas

external web service with esoe

david.guy.wes...@gmail.com (dweston) — Wed, 09 Jan 2008 01:22:26 UT

If I have registered an external web service under esoemanager and I
want a policy with default deny, can anyone give me an example policy
using an external web service that is not protected by spep? Why is
that any call to an external service is completely denied when using
spep as the proxy? I am running Centos 5 with tomcat 5.5.20 would

installation problem

nicholashem...@yahoo.co.uk (iamniche) — Fri, 30 Nov 2007 12:06:10 UT

hello,

when trying to install the database using:
mysql -u root -p esoe < generate_db-mysql.sql

i get the following error:
ERROR 1005 (HY000) at line 82: Can't create table '.\esoe
\#sql-524_61.frm' (errno: 150)

line 82 is the following:
ALTER TABLE ENTITY_CONTACTS ADD CONSTRAINT FK_CONTACTS FOREIGN KEY

question about LXACML

assada...@gmail.com (sand) — Fri, 23 Nov 2007 16:41:24 UT

Hi all,

I am a new comer for ESOE. I would like to ask about LXACML.
From the "Configuring Authorization Policies " document, I am not
sure that the LXACML is capable of retrieving some environment
attributes e.g. current time so that we can grant the access to the
user using the time as a criteria. I wonder how limited of LXACML from