Uploaded image for project: 'PicketLink'
  1. PicketLink
  2. PLINK-70

PL00078: Null Parameter:privateKey while trying to get SAML token from ADFS 2.0 using JBoss/PicketLink

XMLWordPrintable

      Application Server: JBoss 5.1.0 AS
      JBoss security framework: PicketLink v2.1.3.Final, picketlink-jbas5-2.1.3.Final.jar
      Sample Web application deployed on JBoss as Service Provider
      ADFS 2.0 as STS

      I have tried to configure authentication for web application deployed in JBoss using picketlink and connecting to ADFS for SAML 2.0 token. I have done all the configurations as per the PDF document given in the URL:
      "https://community.jboss.org/wiki/HowToConfigurePicketlinkOnJbossWithMicrosoftADFSV2"
      I am able to get the SAML token from ADFS. I can see this through the trace. But when the SAML token response reaches the Server side, I am getting the following error:
      --------------------------------------------------
      19:54:20,828 ERROR [federation] Service Provider could not handle the request.
      java.lang.IllegalArgumentException: PL00078: Null Parameter:privateKey
      at org.picketlink.identity.federation.DefaultPicketLinkLogger.nullArgumentError(DefaultPicketLinkLogger.java:147)
      at org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler$SPAuthenticationHandler.decryptAssertion(SAML2AuthenticationHandler.java:433)
      at org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler$SPAuthenticationHandler.handleStatusResponseType(SAML2AuthenticationHandler.java:409)
      at org.picketlink.identity.federation.web.handlers.saml2.SAML2AuthenticationHandler.handleStatusResponseType(SAML2AuthenticationHandler.java:134)
      at org.picketlink.identity.federation.web.process.SAMLHandlerChainProcessor.callHandlerChain(SAMLHandlerChainProcessor.java:64)
      at org.picketlink.identity.federation.web.process.ServiceProviderSAMLResponseProcessor.processHandlersChain(ServiceProviderSAMLResponseProcessor.java:105)
      at org.picketlink.identity.federation.web.process.ServiceProviderSAMLResponseProcessor.process(ServiceProviderSAMLResponseProcessor.java:86)
      at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.handleSAMLResponse(AbstractSPFormAuthenticator.java:422)
      at org.picketlink.identity.federation.bindings.tomcat.sp.AbstractSPFormAuthenticator.authenticate(AbstractSPFormAuthenticator.java:298)
      at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:491)
      at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:92)
      at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.process(SecurityContextEstablishmentValve.java:126)
      at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.invoke(SecurityContextEstablishmentValve.java:70)
      at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
      at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
      at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:158)
      at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
      at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:330)
      at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:829)
      at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:598)
      at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
      at java.lang.Thread.run(Thread.java:662)
      --------------------------------------------------

      I have attached the response seen in trace for your reference.
      I have done all the certificate config as per the PDF and certificate is configured in the file "picketlink-idfed.xml". Even then it is giving an error saying that "PL00078: Null Parameter:privateKey".

      Can you look into this and let us know how to solve this issue..
      Let me know if you need any other information.

      Aravind

        1. PicketLinkSamlJBossTrace.txt
          36 kB
        2. PicketLink.log
          18 kB
        3. picketlink-idfed.xml
          1 kB
        4. EncryptedClaims.txt
          8 kB
        5. ErrorPicketLinkDecryptIssue.txt
          6 kB

            psilva@redhat.com Pedro Igor Craveiro
            aravindps Aravind PS (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: