<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:DengXian;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@DengXian";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:12.0pt;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:14.0pt">Hi,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt">I am playing with flexible authentication. I have a blank midpoint 4.3.1 setup on my local machine and put the the security policy (in the attached file) in the post-initial-objects directory. Then I can mimic
the user by setting up the uid Request Header on my browser. It works but it generated the following exceptions on the server log. I do not see the error prevents the app from functioning but still it generates a lot of noise.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt">My intension was to see how to front midpoint with a SP provider, hence the httpHeader module. This leads to my next question.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt">What are the paths that I need to set to let shibboleth SP to require active session?
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt">I don’t think all paths would work as it will block the emergency login. In addition, I guess it would prevent the server from using HTTP Basic that is required by a rest client. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt">Xiaoshu Wang<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt">2021-09-08 08:59:23,340 [MODEL] [http-nio-8080-exec-3] ERROR (com.evolveum.midpoint.web.util.MidPointProfilingServletFilter): Encountered exception: java.lang.IllegalStateException: Cannot call sendRedirect()
after the response has been committed<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt">java.lang.IllegalStateException: Cannot call sendRedirect() after the response has been committed<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.apache.catalina.connector.ResponseFacade.sendRedirect(ResponseFacade.java:488)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at javax.servlet.http.HttpServletResponseWrapper.sendRedirect(HttpServletResponseWrapper.java:138)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.springframework.security.web.firewall.FirewalledResponse.sendRedirect(FirewalledResponse.java:48)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at javax.servlet.http.HttpServletResponseWrapper.sendRedirect(HttpServletResponseWrapper.java:138)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.springframework.security.web.util.OnCommittedResponseWrapper.sendRedirect(OnCommittedResponseWrapper.java:136)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at javax.servlet.http.HttpServletResponseWrapper.sendRedirect(HttpServletResponseWrapper.java:138)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.springframework.security.web.util.OnCommittedResponseWrapper.sendRedirect(OnCommittedResponseWrapper.java:136)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.apache.wicket.protocol.http.servlet.ServletWebResponse.sendRedirect(ServletWebResponse.java:288)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.apache.wicket.protocol.http.BufferedWebResponse$SendRedirectAction.invoke(BufferedWebResponse.java:409)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.apache.wicket.protocol.http.BufferedWebResponse.writeTo(BufferedWebResponse.java:602)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.apache.wicket.protocol.http.HeaderBufferingWebResponse.stopBuffering(HeaderBufferingWebResponse.java:60)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.apache.wicket.protocol.http.HeaderBufferingWebResponse.flush(HeaderBufferingWebResponse.java:97)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.apache.wicket.protocol.http.WicketFilter.processRequestCycle(WicketFilter.java:277)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.apache.wicket.protocol.http.WicketFilter.processRequest(WicketFilter.java:206)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.apache.wicket.protocol.http.WicketFilter.doFilter(WicketFilter.java:299)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at com.evolveum.midpoint.web.util.MidPointProfilingServletFilter.doFilter(MidPointProfilingServletFilter.java:79)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:189)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:162)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at com.evolveum.midpoint.web.security.filter.MidpointAuthFilter$VirtualFilterChain.doFilter(MidpointAuthFilter.java:406)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:115)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:81)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at com.evolveum.midpoint.web.security.filter.MidpointAuthFilter$VirtualFilterChain.doFilter(MidpointAuthFilter.java:418)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:14.0pt"> at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:119)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
</body>
</html>