Uploaded image for project: 'PicketLink'
  1. PicketLink
  2. PLINK-70

PL00078: Null Parameter:privateKey while trying to get SAML token from ADFS 2.0 using JBoss/PicketLink

    XMLWordPrintable

Details

    Description

      Application Server: JBoss 5.1.0 AS
      JBoss security framework: PicketLink v2.1.3.Final, picketlink-jbas5-2.1.3.Final.jar
      Sample Web application deployed on JBoss as Service Provider
      ADFS 2.0 as STS

      I have tried to configure authentication for web application deployed in JBoss using picketlink and connecting to ADFS for SAML 2.0 token. I have done all the configurations as per the PDF document given in the URL:
      "https://community.jboss.org/wiki/HowToConfigurePicketlinkOnJbossWithMicrosoftADFSV2"
      I am able to get the SAML token from ADFS. I can see this through the trace. But when the SAML token response reaches the Server side, I am getting the following error:
      --------------------------------------------------
      19:54:20,828 ERROR [federation] Service Provider could not handle the request.
      java.lang.IllegalArgumentException: PL00078: Null Parameter:privateKey
      at org.picketlink.identity.federation.DefaultPicketLinkLogger.nullArgumentError(DefaultPicketLinkLogger.java:147)
      at org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler$SPAuthenticationHandler.decryptAssertion(SAML2AuthenticationHandler.java:433)
      at org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler$SPAuthenticationHandler.handleStatusResponseType(SAML2AuthenticationHandler.java:409)
      at org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler.handleStatusResponseType(SAML2AuthenticationHandler.java:134)
      at org.picketlink.identity.federation.web.process.SAMLHandlerChainProcessor.callHandlerChain(SAMLHandlerChainProcessor.java:64)
      at org.picketlink.identity.federation.web.process.ServiceProviderSAMLResponseProcessor.processHandlersChain(ServiceProviderSAMLResponseProcessor.java:105)
      at org.picketlink.identity.federation.web.process.ServiceProviderSAMLResponseProcessor.process(ServiceProviderSAMLResponseProcessor.java:86)
      at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.handleSAMLResponse(AbstractSPFormAuthenticator.java:422)
      at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.authenticate(AbstractSPFormAuthenticator.java:298)
      at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:491)
      at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:92)
      at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.process(SecurityContextEstablishmentValve.java:126)
      at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.invoke(SecurityContextEstablishmentValve.java:70)
      at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
      at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
      at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:158)
      at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
      at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:330)
      at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:829)
      at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:598)
      at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
      at java.lang.Thread.run(Thread.java:662)
      --------------------------------------------------

      I have attached the response seen in trace for your reference.
      I have done all the certificate config as per the PDF and certificate is configured in the file "picketlink-idfed.xml". Even then it is giving an error saying that "PL00078: Null Parameter:privateKey".

      Can you look into this and let us know how to solve this issue..
      Let me know if you need any other information.

      Aravind

      Attachments

        1. EncryptedClaims.txt
          8 kB
        2. ErrorPicketLinkDecryptIssue.txt
          6 kB
        3. PicketLink.log
          18 kB
        4. picketlink-idfed.xml
          1 kB
        5. PicketLinkSamlJBossTrace.txt
          36 kB

        Activity

          People

            psilva@redhat.com Pedro Igor Craveiro
            aravindps Aravind PS (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: