Discovery service, metadata, and whitelist

[Michael A. Grady]

I've started playing with the Shib2 Discovery Service. The
documentation describes support for a simple whitelist filter where
one can list a set of EntitlyIds that one wants, and (at least this
is what I understood from the documentation) not show any of the
other IdPs in the metadata file. But this doesn't appear to be
working -- I specify the InCommon metadata file as the local file,
and list 13 EntityIds I want as the whitelist. But the entire set of
IdPs in the InCommon metadata file are still being listed on the
"Choose" page.

This is the snippet of the wayfconfig.xml file that is applicable:

<MetadataProvider
displayName="CIC Institutions"
identifier="FirstSite"
url="file:///opt/discovery-shib/metadata/InCommon-
metadata.xml"/>

<Filter identifier="White"

type="edu.internet2.middleware.shibboleth.wayf.plugins.provider.ListFilt
er"
excludeEntries="false">
<EntityId>urn:mace:incommon:uiuc.edu</EntityId>
<EntityId>urn:mace:incommon:uiowa.edu</EntityId>
<EntityId>urn:mace:incommon:wisc.edu</EntityId>
<EntityId>urn:mace:incommon:umn.edu</EntityId>
<EntityId>urn:mace:incommon:northwestern.edu</EntityId>
<EntityId>urn:mace:incommon:uchicago.edu</EntityId>
<EntityId>urn:mace:incommon:msu.edu</EntityId>
<EntityId>https://shibboleth.umich.edu/idp/shibboleth</
EntityId>
<EntityId>https://idp.purdue.edu/idp/shibboleth</EntityId>
<EntityId>urn:mace:incommon:iu.edu</EntityId>
<EntityId>https://shibboleth.uic.edu/shibboleth</EntityId>
<EntityId>urn:mace:incommon:osu.edu</EntityId>
<EntityId>urn:mace:incommon:psu.edu</EntityId>
</Filter>

That's the only MetadataProvider I've specified in the file. I also
tried setting the excludeEntries attribute to "true" (which I take it
from the documentation would make this a "Blacklist"), but that seems
to make no difference to what is presented in the list either. What
am I missing or specifying incorrectly?

--
Michael A. Grady
Executive Program Officer for Cyberinfrastructure
Office of the CIO, University of Illinois at Urbana-Champaign
2222 DCL, MC 256, 1304 W. Springfield Ave., Urbana, IL 61801
217.244.1253 phone, 217.244.4780 fax

[Scott Cantor]

Post by Michael A. Grady
<MetadataProvider
displayName="CIC Institutions" identifier="FirstSite"
url="file:///opt/discovery-shib/metadata/InCommon-
metadata.xml"/>
<Filter identifier="White"

I'm a bit surprised that would load, so I suspect you just mistyped here,
but the Filter element goes inside the MetadataProvider (like in the SP or
IdP), not next to it. If you really have the tag closed as above, that
wouldn't work.

-- Scott

[Michael A. Grady]

Post by Scott Cantor

Post by Michael A. Grady
<MetadataProvider
displayName="CIC Institutions"
identifier="FirstSite"
url="file:///opt/discovery-shib/metadata/InCommon-
metadata.xml"/>
<Filter identifier="White"

I'm a bit surprised that would load, so I suspect you just mistyped
here,
but the Filter element goes inside the MetadataProvider (like in
the SP or
IdP), not next to it. If you really have the tag closed as above, that
wouldn't work.
-- Scott

Thanks -- and yes I did have an xml error that apparently is just
silently ignored. (Even with the Discovery logging to DEBUG.) So now
I have the Filter element correctly (I think) enclosed within the
appropriate MetadataProvider element. So now I have:

<MetadataProvider
displayName="CIC Institutions"
identifier="FirstSite"
url="file:///opt/discovery-shib/metadata/InCommon-
metadata.xml">

<Filter identifier="White"

type="edu.internet2.middleware.shibboleth.wayf.plugins.provider.ListFilt
er"
excludeEntries="false">
<EntityId>urn:mace:incommon:uiuc.edu</EntityId>
<EntityId>urn:mace:incommon:uiowa.edu</EntityId>
<EntityId>urn:mace:incommon:wisc.edu</EntityId>
<EntityId>urn:mace:incommon:umn.edu</EntityId>
<EntityId>urn:mace:incommon:northwestern.edu</EntityId>
<EntityId>urn:mace:incommon:uchicago.edu</EntityId>
<EntityId>urn:mace:incommon:msu.edu</EntityId>
<EntityId>https://shibboleth.umich.edu/idp/shibboleth</
EntityId>
<EntityId>https://idp.purdue.edu/idp/shibboleth</EntityId>
<EntityId>urn:mace:incommon:iu.edu</EntityId>
<EntityId>https://shibboleth.uic.edu/shibboleth</EntityId>
<EntityId>urn:mace:incommon:osu.edu</EntityId>
<EntityId>urn:mace:incommon:psu.edu</EntityId>
</Filter>
</MetadataProvider>


But now I'm getting an error in the Discovery Service log -- is there
a problem with the above config that again I'm not seeing? The end of
the Discovery Service log:

06:39:57.620 DEBUG
[org.opensaml.saml2.metadata.provider.FilesystemMetadataProvider]
Refreshing metadata from file /o
pt/discovery-shib/metadata/InCommon-metadata.xml

06:39:57.724 DEBUG
[org.opensaml.xml.signature.impl.SignatureUnmarshaller] Starting to
unmarshall Apache XML-Security
-based SignatureImpl element

06:39:57.725 DEBUG
[org.opensaml.xml.signature.impl.SignatureUnmarshaller] Constructing
Apache XMLSignature object

06:39:57.728 DEBUG [org.apache.xml.security.utils.ElementProxy]
setElement("ds:Signature", "")

06:39:57.731 DEBUG [org.apache.xml.security.utils.ElementProxy]
setElement("ds:SignedInfo", "")

06:39:57.731 DEBUG [org.apache.xml.security.utils.ElementProxy]
setElement("ds:SignatureMethod", "")

06:39:57.732 DEBUG [org.apache.xml.security.utils.ElementProxy]
setElement("ds:KeyInfo", "")

06:39:57.732 DEBUG
[org.opensaml.xml.signature.impl.SignatureUnmarshaller] Adding
canonicalization and signing algori
thms, and HMAC output length to Signature

06:39:57.732 DEBUG
[org.opensaml.xml.signature.impl.SignatureUnmarshaller] Adding
KeyInfo to Signature

06:39:58.356 DEBUG
[org.opensaml.saml2.metadata.provider.AbstractMetadataProvider]
Applying metadata filter

06:39:58.357 DEBUG
[edu.internet2.middleware.shibboleth.wayf.plugins.provider.ListFilter] F
ilter White: Removing non-
whitelisted https://carmenwiki.osu.edu/shibboleth from urn:mace:incommon

06:39:58.363 ERROR
[edu.internet2.middleware.shibboleth.wayf.WayfService] Error parsing
DS configuration file.
java.lang.UnsupportedOperationException: null
at org.opensaml.xml.util.ListView.remove
(IndexedXMLObjectChildrenList.java:327)
at org.opensaml.xml.util.ListView.remove
(IndexedXMLObjectChildrenList.java:237)
at java.util.AbstractList$Itr.remove(AbstractList.java:360)
at
edu.internet2.middleware.shibboleth.wayf.plugins.provider.ListFilter.fil
terEntities(ListFilter.java:172)
at
edu.internet2.middleware.shibboleth.wayf.plugins.provider.ListFilter.doF
ilter(ListFilter.java:124)
at
org.opensaml.saml2.metadata.provider.MetadataFilterChain.doFilter
(MetadataFilterChain.java:44)
at
org.opensaml.saml2.metadata.provider.AbstractMetadataProvider.filterMeta
data(AbstractMetadataProvider.java
:210)
at
org.opensaml.saml2.metadata.provider.FilesystemMetadataProvider.refreshM
etadata(FilesystemMetadataProvider
.java:146)
at
org.opensaml.saml2.metadata.provider.FilesystemMetadataProvider.initiali
ze(FilesystemMetadataProvider.java
:93)
at edu.internet2.middleware.shibboleth.wayf.IdPSiteSet.<init>
(IdPSiteSet.java:188)
at edu.internet2.middleware.shibboleth.wayf.WayfService.init
(WayfService.java:183)
at javax.servlet.GenericServlet.init(GenericServlet.java:212)
at org.apache.catalina.core.StandardWrapper.loadServlet
(StandardWrapper.java:1173)
at org.apache.catalina.core.StandardWrapper.allocate
(StandardWrapper.java:809)
at org.apache.catalina.core.StandardWrapperValve.invoke
(StandardWrapperValve.java:129)
at org.apache.catalina.core.StandardContextValve.invoke
(StandardContextValve.java:191)
at org.apache.catalina.core.StandardHostValve.invoke
(StandardHostValve.java:128)
at org.apache.catalina.valves.ErrorReportValve.invoke
(ErrorReportValve.java:102)
at org.apache.catalina.core.StandardEngineValve.invoke
(StandardEngineValve.java:109)
at org.apache.catalina.connector.CoyoteAdapter.service
(CoyoteAdapter.java:293)
at org.apache.jk.server.JkCoyoteHandler.invoke
(JkCoyoteHandler.java:190)
at org.apache.jk.common.HandlerRequest.invoke
(HandlerRequest.java:291)
at org.apache.jk.common.ChannelSocket.invoke
(ChannelSocket.java:769)
at org.apache.jk.common.ChannelSocket.processConnection
(ChannelSocket.java:698)
at org.apache.jk.common.ChannelSocket$SocketConnection.runIt
(ChannelSocket.java:891)
at org.apache.tomcat.util.threads.ThreadPool
$ControlRunnable.run(ThreadPool.java:690)
at java.lang.Thread.run(Thread.java:619)



--
Michael A. Grady
Executive Program Officer for Cyberinfrastructure
Office of the CIO, University of Illinois at Urbana-Champaign
2222 DCL, MC 256, 1304 W. Springfield Ave., Urbana, IL 61801
217.244.1253 phone, 217.244.4780 fax

[Rod Widdowson]

This all looks reasonable. Any even if it was not sensible the DS should
not be NPE-ing.

Can you enter a JIRA case with the config and the metadata and I'll look at
it this weekend...

Thanks
----- Original Message -----
From: "Michael A. Grady" <m-grady-nzINlOoChub2fBVCVOL8/***@public.gmane.org>
To: <shibboleth-users-H4aWS73dXup+***@public.gmane.org>
Sent: Friday, August 28, 2009 5:12 AM
Subject: Re: [Shib-Users] Discovery service, metadata, and whitelist

Post by Michael A. Grady

Post by Scott Cantor

Post by Michael A. Grady
<MetadataProvider
displayName="CIC Institutions" identifier="FirstSite"
url="file:///opt/discovery-shib/metadata/InCommon-
metadata.xml"/>
<Filter identifier="White"

I'm a bit surprised that would load, so I suspect you just mistyped
here,
but the Filter element goes inside the MetadataProvider (like in the SP
or
IdP), not next to it. If you really have the tag closed as above, that
wouldn't work.
-- Scott

Thanks -- and yes I did have an xml error that apparently is just
silently ignored. (Even with the Discovery logging to DEBUG.) So now I
have the Filter element correctly (I think) enclosed within the
<MetadataProvider
displayName="CIC Institutions"
identifier="FirstSite"
url="file:///opt/discovery-shib/metadata/InCommon-
metadata.xml">
<Filter identifier="White"
type="edu.internet2.middleware.shibboleth.wayf.plugins.provider.ListFilt
er"
excludeEntries="false">
<EntityId>urn:mace:incommon:uiuc.edu</EntityId>
<EntityId>urn:mace:incommon:uiowa.edu</EntityId>
<EntityId>urn:mace:incommon:wisc.edu</EntityId>
<EntityId>urn:mace:incommon:umn.edu</EntityId>
<EntityId>urn:mace:incommon:northwestern.edu</EntityId>
<EntityId>urn:mace:incommon:uchicago.edu</EntityId>
<EntityId>urn:mace:incommon:msu.edu</EntityId>
<EntityId>https://shibboleth.umich.edu/idp/shibboleth</
EntityId>
<EntityId>https://idp.purdue.edu/idp/shibboleth</EntityId>
<EntityId>urn:mace:incommon:iu.edu</EntityId>
<EntityId>https://shibboleth.uic.edu/shibboleth</EntityId>
<EntityId>urn:mace:incommon:osu.edu</EntityId>
<EntityId>urn:mace:incommon:psu.edu</EntityId>
</Filter>
</MetadataProvider>
But now I'm getting an error in the Discovery Service log -- is there a
problem with the above config that again I'm not seeing? The end of the
06:39:57.620 DEBUG
[org.opensaml.saml2.metadata.provider.FilesystemMetadataProvider]
Refreshing metadata from file /o
pt/discovery-shib/metadata/InCommon-metadata.xml
06:39:57.724 DEBUG
[org.opensaml.xml.signature.impl.SignatureUnmarshaller] Starting to
unmarshall Apache XML-Security
-based SignatureImpl element
06:39:57.725 DEBUG
[org.opensaml.xml.signature.impl.SignatureUnmarshaller] Constructing
Apache XMLSignature object
06:39:57.728 DEBUG [org.apache.xml.security.utils.ElementProxy]
setElement("ds:Signature", "")
06:39:57.731 DEBUG [org.apache.xml.security.utils.ElementProxy]
setElement("ds:SignedInfo", "")
06:39:57.731 DEBUG [org.apache.xml.security.utils.ElementProxy]
setElement("ds:SignatureMethod", "")
06:39:57.732 DEBUG [org.apache.xml.security.utils.ElementProxy]
setElement("ds:KeyInfo", "")
06:39:57.732 DEBUG
[org.opensaml.xml.signature.impl.SignatureUnmarshaller] Adding
canonicalization and signing algori
thms, and HMAC output length to Signature
06:39:57.732 DEBUG
[org.opensaml.xml.signature.impl.SignatureUnmarshaller] Adding KeyInfo to
Signature
06:39:58.356 DEBUG
[org.opensaml.saml2.metadata.provider.AbstractMetadataProvider] Applying
metadata filter
06:39:58.357 DEBUG
[edu.internet2.middleware.shibboleth.wayf.plugins.provider.ListFilter] F
ilter White: Removing non-
whitelisted https://carmenwiki.osu.edu/shibboleth from urn:mace:incommon
06:39:58.363 ERROR [edu.internet2.middleware.shibboleth.wayf.WayfService]
Error parsing DS configuration file.
java.lang.UnsupportedOperationException: null
at org.opensaml.xml.util.ListView.remove
(IndexedXMLObjectChildrenList.java:327)
at org.opensaml.xml.util.ListView.remove
(IndexedXMLObjectChildrenList.java:237)
at java.util.AbstractList$Itr.remove(AbstractList.java:360)
at
edu.internet2.middleware.shibboleth.wayf.plugins.provider.ListFilter.fil
terEntities(ListFilter.java:172)
at
edu.internet2.middleware.shibboleth.wayf.plugins.provider.ListFilter.doF
ilter(ListFilter.java:124)
at
org.opensaml.saml2.metadata.provider.MetadataFilterChain.doFilter
(MetadataFilterChain.java:44)
at
org.opensaml.saml2.metadata.provider.AbstractMetadataProvider.filterMeta
data(AbstractMetadataProvider.java
:210)
at
org.opensaml.saml2.metadata.provider.FilesystemMetadataProvider.refreshM
etadata(FilesystemMetadataProvider
.java:146)
at
org.opensaml.saml2.metadata.provider.FilesystemMetadataProvider.initiali
ze(FilesystemMetadataProvider.java
:93)
at edu.internet2.middleware.shibboleth.wayf.IdPSiteSet.<init>
(IdPSiteSet.java:188)
at edu.internet2.middleware.shibboleth.wayf.WayfService.init
(WayfService.java:183)
at javax.servlet.GenericServlet.init(GenericServlet.java:212)
at org.apache.catalina.core.StandardWrapper.loadServlet
(StandardWrapper.java:1173)
at org.apache.catalina.core.StandardWrapper.allocate
(StandardWrapper.java:809)
at org.apache.catalina.core.StandardWrapperValve.invoke
(StandardWrapperValve.java:129)
at org.apache.catalina.core.StandardContextValve.invoke
(StandardContextValve.java:191)
at org.apache.catalina.core.StandardHostValve.invoke
(StandardHostValve.java:128)
at org.apache.catalina.valves.ErrorReportValve.invoke
(ErrorReportValve.java:102)
at org.apache.catalina.core.StandardEngineValve.invoke
(StandardEngineValve.java:109)
at org.apache.catalina.connector.CoyoteAdapter.service
(CoyoteAdapter.java:293)
at org.apache.jk.server.JkCoyoteHandler.invoke
(JkCoyoteHandler.java:190)
at org.apache.jk.common.HandlerRequest.invoke
(HandlerRequest.java:291)
at org.apache.jk.common.ChannelSocket.invoke
(ChannelSocket.java:769)
at org.apache.jk.common.ChannelSocket.processConnection
(ChannelSocket.java:698)
at org.apache.jk.common.ChannelSocket$SocketConnection.runIt
(ChannelSocket.java:891)
at org.apache.tomcat.util.threads.ThreadPool
$ControlRunnable.run(ThreadPool.java:690)
at java.lang.Thread.run(Thread.java:619)
--
Michael A. Grady
Executive Program Officer for Cyberinfrastructure
Office of the CIO, University of Illinois at Urbana-Champaign
2222 DCL, MC 256, 1304 W. Springfield Ave., Urbana, IL 61801
217.244.1253 phone, 217.244.4780 fax

[Michael A. Grady]

Ok, I've entered SDSJ-66 for this.

I'll also enter a JIRA for a user interface issue which is both a
slight bug and an "improvement/new feature" request. Actually, there
are two "slight bugs":
- the hard-coded text in wayf.jsp for "Enter insititution name:"
has the obvious miss-spelling
- I created a metadata file that just listed 4 IdPs. and the
initial display showed (as I hoped it would) the full list of those
IdPs on the screen "exploded out". But if I click anywhere on the
page/screen other than one of the listed IdPs, the display switches
to the standard "Or choose from a list:" with a drop-down list. I
thought maybe this was a browser thing, but the same thing happens in
Safari 4.x and Firefox 3.5.x.
I think the "exploded list", without the "Or choose from a list:"
with a drop-down list display, which I see as the first response from
the IdP, is probably the "error", as I can see artifacts in the page
display as if something is "under" the full list of IdPs. But I'd
actually love to see that there was a configurable option that if the
number of IdPs is "less than N", then the page shows:

- No search box
- the enumerated list of IdP choices without the use of a drop-down
box

For any N of 15-20 or so or less, I think this would be the ideal
default user interface. If you weren't already thinking of doing
that, I'll probably look into what it would take to do so.

Post by Rod Widdowson
This all looks reasonable. Any even if it was not sensible the DS
should not be NPE-ing.
Can you enter a JIRA case with the config and the metadata and I'll
look at it this weekend...
Thanks
----- Original Message ----- From: "Michael A. Grady" <m-
Sent: Friday, August 28, 2009 5:12 AM
Subject: Re: [Shib-Users] Discovery service, metadata, and whitelist

Post by Michael A. Grady

Post by Scott Cantor

Post by Michael A. Grady
<MetadataProvider
displayName="CIC Institutions"
identifier="FirstSite"
url="file:///opt/discovery-shib/metadata/InCommon-
metadata.xml"/>
<Filter identifier="White"

I'm a bit surprised that would load, so I suspect you just
mistyped here,
but the Filter element goes inside the MetadataProvider (like in
the SP or
IdP), not next to it. If you really have the tag closed as above, that
wouldn't work.
-- Scott

Thanks -- and yes I did have an xml error that apparently is just
silently ignored. (Even with the Discovery logging to DEBUG.) So
now I have the Filter element correctly (I think) enclosed within
<MetadataProvider
displayName="CIC Institutions"
identifier="FirstSite"
url="file:///opt/discovery-shib/metadata/InCommon-
metadata.xml">
<Filter identifier="White"
type="edu.internet2.middleware.shibboleth.wayf.plugins.provider.ListF
ilt er"
excludeEntries="false">
<EntityId>urn:mace:incommon:uiuc.edu</EntityId>
<EntityId>urn:mace:incommon:uiowa.edu</EntityId>
<EntityId>urn:mace:incommon:wisc.edu</EntityId>
<EntityId>urn:mace:incommon:umn.edu</EntityId>
<EntityId>urn:mace:incommon:northwestern.edu</EntityId>
<EntityId>urn:mace:incommon:uchicago.edu</EntityId>
<EntityId>urn:mace:incommon:msu.edu</EntityId>
<EntityId>https://shibboleth.umich.edu/idp/shibboleth</
EntityId>
<EntityId>https://idp.purdue.edu/idp/shibboleth</EntityId>
<EntityId>urn:mace:incommon:iu.edu</EntityId>
<EntityId>https://shibboleth.uic.edu/shibboleth</EntityId>
<EntityId>urn:mace:incommon:osu.edu</EntityId>
<EntityId>urn:mace:incommon:psu.edu</EntityId>
</Filter>
</MetadataProvider>
But now I'm getting an error in the Discovery Service log -- is
there a problem with the above config that again I'm not seeing?
06:39:57.620 DEBUG
[org.opensaml.saml2.metadata.provider.FilesystemMetadataProvider]
Refreshing metadata from file /o
pt/discovery-shib/metadata/InCommon-metadata.xml
06:39:57.724 DEBUG
[org.opensaml.xml.signature.impl.SignatureUnmarshaller] Starting
to unmarshall Apache XML-Security
-based SignatureImpl element
06:39:57.725 DEBUG
[org.opensaml.xml.signature.impl.SignatureUnmarshaller]
Constructing Apache XMLSignature object
06:39:57.728 DEBUG [org.apache.xml.security.utils.ElementProxy]
setElement("ds:Signature", "")
06:39:57.731 DEBUG [org.apache.xml.security.utils.ElementProxy]
setElement("ds:SignedInfo", "")
06:39:57.731 DEBUG [org.apache.xml.security.utils.ElementProxy]
setElement("ds:SignatureMethod", "")
06:39:57.732 DEBUG [org.apache.xml.security.utils.ElementProxy]
setElement("ds:KeyInfo", "")
06:39:57.732 DEBUG
[org.opensaml.xml.signature.impl.SignatureUnmarshaller] Adding
canonicalization and signing algori
thms, and HMAC output length to Signature
06:39:57.732 DEBUG
[org.opensaml.xml.signature.impl.SignatureUnmarshaller] Adding
KeyInfo to Signature
06:39:58.356 DEBUG
[org.opensaml.saml2.metadata.provider.AbstractMetadataProvider]
Applying metadata filter
06:39:58.357 DEBUG
[edu.internet2.middleware.shibboleth.wayf.plugins.provider.ListFilter
] F ilter White: Removing non-
whitelisted https://carmenwiki.osu.edu/shibboleth from
urn:mace:incommon
06:39:58.363 ERROR
[edu.internet2.middleware.shibboleth.wayf.WayfService] Error
parsing DS configuration file.
java.lang.UnsupportedOperationException: null
at org.opensaml.xml.util.ListView.remove
(IndexedXMLObjectChildrenList.java:327)
at org.opensaml.xml.util.ListView.remove
(IndexedXMLObjectChildrenList.java:237)
at java.util.AbstractList$Itr.remove(AbstractList.java:360)
at
edu.internet2.middleware.shibboleth.wayf.plugins.provider.ListFilter.
fil terEntities(ListFilter.java:172)
at
edu.internet2.middleware.shibboleth.wayf.plugins.provider.ListFilter.
doF ilter(ListFilter.java:124)
at
org.opensaml.saml2.metadata.provider.MetadataFilterChain.doFilter
(MetadataFilterChain.java:44)
at
org.opensaml.saml2.metadata.provider.AbstractMetadataProvider.filterM
eta data(AbstractMetadataProvider.java
:210)
at
org.opensaml.saml2.metadata.provider.FilesystemMetadataProvider.refre
shM etadata(FilesystemMetadataProvider
.java:146)
at
org.opensaml.saml2.metadata.provider.FilesystemMetadataProvider.initi
ali ze(FilesystemMetadataProvider.java
:93)
at
edu.internet2.middleware.shibboleth.wayf.IdPSiteSet.<init>
(IdPSiteSet.java:188)
at
edu.internet2.middleware.shibboleth.wayf.WayfService.init
(WayfService.java:183)
at javax.servlet.GenericServlet.init(GenericServlet.java:212)
at org.apache.catalina.core.StandardWrapper.loadServlet
(StandardWrapper.java:1173)
at org.apache.catalina.core.StandardWrapper.allocate
(StandardWrapper.java:809)
at org.apache.catalina.core.StandardWrapperValve.invoke
(StandardWrapperValve.java:129)
at org.apache.catalina.core.StandardContextValve.invoke
(StandardContextValve.java:191)
at org.apache.catalina.core.StandardHostValve.invoke
(StandardHostValve.java:128)
at org.apache.catalina.valves.ErrorReportValve.invoke
(ErrorReportValve.java:102)
at org.apache.catalina.core.StandardEngineValve.invoke
(StandardEngineValve.java:109)
at org.apache.catalina.connector.CoyoteAdapter.service
(CoyoteAdapter.java:293)
at org.apache.jk.server.JkCoyoteHandler.invoke
(JkCoyoteHandler.java:190)
at org.apache.jk.common.HandlerRequest.invoke
(HandlerRequest.java:291)
at org.apache.jk.common.ChannelSocket.invoke
(ChannelSocket.java:769)
at org.apache.jk.common.ChannelSocket.processConnection
(ChannelSocket.java:698)
at org.apache.jk.common.ChannelSocket
$SocketConnection.runIt (ChannelSocket.java:891)
at org.apache.tomcat.util.threads.ThreadPool
$ControlRunnable.run(ThreadPool.java:690)
at java.lang.Thread.run(Thread.java:619)
--
Michael A. Grady
Executive Program Officer for Cyberinfrastructure
Office of the CIO, University of Illinois at Urbana-Champaign
2222 DCL, MC 256, 1304 W. Springfield Ave., Urbana, IL 61801
217.244.1253 phone, 217.244.4780 fax

--
Michael A. Grady
Executive Program Officer for Cyberinfrastructure
Office of the CIO, University of Illinois at Urbana-Champaign
2222 DCL, MC 256, 1304 W. Springfield Ave., Urbana, IL 61801
217.244.1253 phone, 217.244.4780 fax