Bugzilla – Bug 6269
configure SecurityContextImpl bootstrap property
Last modified: 2008-07-31 16:26:22
You need to log in before you can comment on or make changes to this bug.
Configure the SecurityContextImpl bootstrap property in the bootstrap properties file (Bug 5966) and remove the call to GS4GTSecurityContext.init() in SAMLAssertionPushPIPImpl.
Added a new key-value pair to the bootstrap properties file emitted in gt/interceptors/java/source/build.xml: <entry key="gridshib.SecurityContextImpl" value="org.globus.gridshib.gt.security.GS4GTSecurityContext"/> Removed the call to GS4GTSecurityContext.init() in SAMLAssertionPushPIPImpl.
BasePIP, the superclass of SAMLAssertionPushPIPImpl, throws the following exception: 2008-07-31 09:06:30,685 DEBUG security.SecurityContextFactory [ServiceThread-3,< clinit>:48] Using default impl: org.globus.gridshib.gt.security.GS4GTSecurityCon text 2008-07-31 09:06:30,685 INFO security.SecurityContextFactory [ServiceThread-3,s etSecurityContextImpl:83] SecurityContext implementation permanently set to org. globus.gridshib.gt.security.GS4GTSecurityContext 2008-07-31 09:06:30,685 DEBUG security.SecurityContextFactory [ServiceThread-3,s etSecurityContextImpl:93] Constructed an instance of class org.globus.gridshib.g t.security.GS4GTSecurityContext 2008-07-31 09:06:30,696 ERROR gridshib.BasePIP [ServiceThread-3,collectAttribute s:118] PIP attribute collection failed java.lang.NullPointerException at org.globus.gridshib.security.SecurityContextFactory.getInstance(SecurityContextFactory.java:184) at org.globus.gridshib.security.SecurityContextFactory.getInstance(SecurityContextFactory.java:128) at org.globus.gridshib.security.util.CertUtil.getCertificateChain(CertUtil.java:313) at org.globus.gridshib.security.util.SAMLUtil.consumeSAMLAssertions(SAMLUtil.java:153) at org.globus.gridshib.gt.authorization.SAMLAssertionPushPIPImpl.collectAttributes(SAMLAssertionPushPIPImpl.java:116) at org.globus.gridshib.BasePIP.collectAttributes(BasePIP.java:113) at org.globus.wsrf.impl.security.authorization.ServiceAuthorizationChain.intercept(ServiceAuthorizationChain.java:224) at org.globus.wsrf.impl.security.authorization.ServiceAuthorizationChain.authorize(ServiceAuthorizationChain.java:282) at org.globus.wsrf.impl.security.authorization.ServiceAuthorizationChain.authorize(ServiceAuthorizationChain.java:272) at org.globus.wsrf.impl.security.authorization.ServiceAuthorizationChain.authorize(ServiceAuthorizationChain.java:235) at org.globus.wsrf.impl.security.authorization.AuthorizationHandler.invoke(AuthorizationHandler.java:174) at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32) at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118) at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83) at org.apache.axis.server.AxisServer.invoke(AxisServer.java:248) at org.globus.wsrf.container.ServiceThread.doPost(ServiceThread.java:664) at org.globus.wsrf.container.ServiceThread.process(ServiceThread.java:382) at org.globus.wsrf.container.GSIServiceThread.process(GSIServiceThread.java:147) at org.globus.wsrf.container.ServiceThread.run(ServiceThread.java:291)
(In reply to comment #2) > BasePIP, the superclass of SAMLAssertionPushPIPImpl, throws the following > exception: Fixed bug in SecurityContextFactory (Bug 6278) in GS-ST.
Tested this new configuration and committed all affected resources to CVS HEAD. This new feature will appear in GS4GT v0.6.1.
Deprecated the GS4GTSecurityContext.init() method.