Rapport de bug pour Authentic - 139

Type Bug

Commentaire / explication

Exception lors du SSO quand on est déjà authentifié sur l'idp, et que la fédération sur le SP n'est pas encore faite. Mais la trace n'est pas exactement identique donc je vais faire un autre rapport pour celle la.

Testé avec http://all4dev.reverse-proxy.entrouvert.org/

URL au moment de l'exception : http://authentic.libre-entreprise.org/liberty/singleSignOn?RequestID=_CF4823E7B9FDCB9481591F889AEFE466&MajorVersion=1&MinorVersion=2&IssueInstant=2006-10-04T14%3A42%3A07Z&ProviderID=http%3A%2F%2Fall4dev.reverse-proxy.entrouvert.org%2Fliberty%2Fall4dev%2Fmetadata&ForceAuthn=false&IsPassive=false&NameIDPolicy=federated&consent=urn%3Aliberty%3Aconsent%3Aobtained&SigAlg=http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fxmldsig%23rsa-sha1&Signature=YoFeh9N%2Fad8lyoMXfxNJhbGnuy3qd71NKaitAYpoX%2BAWgV2LenupKZ9SBqXoLAQQoFseXx5q%2FSmZwUsud8bDhVVQLbBlfMMmvlsmNE9UOqMGWtHB9UHgQ85cNlSXwCS%2BhLm1ars7O6quq5PNPv2hgzZIUqjerkIrngBqzG7ec3y%2Bv5NhY9%2FOXA%2BTJrLXrv5qXv5KcRBBdnVbiEbsUJnr7L%2FyPl%2F2GpikV%2FKhBxlmF0s0E5k7boPrlgWO1jH6LhpSS%2FtEEZ8H0qfJhEttifmju%2Bw8OPwsKWbcprGxjq%2FkaOsNwW9Y5KbRsyo0PRdYX8eiCeXig2mVESkFAniALbEILg%3D%3D

Erreur affichée

Traceback (most recent call last):
  File "/usr/lib/python2.3/site-packages/quixote/publish.py", line 278, in process_request
    output = self.try_publish(request)
  File "/usr/lib/python2.3/site-packages/authentic/__init__.py", line 114, in try_publish
    return AuthenticPublisher.try_publish(self, request)
  File "/usr/lib/python2.3/site-packages/authentic/__init__.py", line 105, in try_publish
    return Publisher.try_publish(self, request)
  File "/usr/lib/python2.3/site-packages/quixote/publish.py", line 256, in try_publish
    output = self.root_directory._q_traverse(components)
  File "/usr/lib/python2.3/site-packages/authentic/root.ptl", line 51, in _q_traverse
    return Directory._q_traverse(self, path)
  File "/usr/lib/python2.3/site-packages/quixote/directory.py", line 66, in _q_traverse
    return obj._q_traverse(path)
  File "/usr/lib/python2.3/site-packages/quixote/directory.py", line 70, in _q_traverse
    return obj()
  File "/usr/lib/python2.3/site-packages/authentic/liberty/root.ptl", line 122, in singleSignOn
    return self.sso_after_authentication(login, user_authenticated)
  File "/usr/lib/python2.3/site-packages/authentic/liberty/root.ptl", line 159, in sso_after_authentication
    return self.sso_after_consent(login, user_authenticated, True, proxied)
  File "/usr/lib/python2.3/site-packages/authentic/liberty/root.ptl", line 212, in sso_after_consent
    authentic.identities.store.save(identity)
  File "/usr/lib/python2.3/site-packages/authentic/identities.py", line 605, in save
    self.ldap_conn.modify_s(entry[0], modList)
  File "/usr/lib/python2.3/site-packages/ldap/ldapobject.py", line 299, in modify_s
    return self.result(msgid,all=1,timeout=self.timeout)
  File "/usr/lib/python2.3/site-packages/ldap/ldapobject.py", line 399, in result
    res_type,res_data,res_msgid = self.result2(msgid,all,timeout)
  File "/usr/lib/python2.3/site-packages/ldap/ldapobject.py", line 405, in result2
    return self._ldap_call(self._l.result2,msgid,all,timeout)
  File "/usr/lib/python2.3/site-packages/ldap/ldapobject.py", line 94, in _ldap_call
    result = func(*args,**kwargs)
STRONG_AUTH_REQUIRED: {'info': 'modifications require authentication', 'desc': 'Strong(er) authentication required'}

Form:
ForceAuthn      false
IsPassive       false
IssueInstant    2006-10-04T14:42:07Z
MajorVersion    1
MinorVersion    2
NameIDPolicy    federated
ProviderID      http://all4dev.reverse-proxy.entrouvert.org/liberty/all4dev/metadata
RequestID       _CF4823E7B9FDCB9481591F889AEFE466
SigAlg          http://www.w3.org/2000/09/xmldsig#rsa-sha1
Signature       YoFeh9N/ad8lyoMXfxNJhbGnuy3qd71NKaitAYpoX+AWgV2LenupKZ9SBqXoLAQQoFseXx5q/SmZwUsud8bDhVVQLbBlfMMmvlsmNE9UOqMGWtHB9UHgQ85cNlSXwCS+hLm1ars7O6quq5PNPv2hgzZIUqjerkIrngBqzG7ec3y+v5NhY9/OXA+TJrLXrv5qXv5KcRBBdnVbiEbsUJnr7L/yPl/2GpikV/KhBxlmF0s0E5k7boPrlgWO1jH6LhpSS/tEEZ8H0qfJhEttifmju+w8OPwsKWbcprGxjq/kaOsNwW9Y5KbRsyo0PRdYX8eiCeXig2mVESkFAniALbEILg==
consent         urn:liberty:consent:obtained

Cookies:
_liberty_idp    CrqCxk0ko6Dzb97TvD/ymlNe0y8=
authentic       9e58d2fe86556f4b

Environment:
CONTENT_LENGTH  0
DOCUMENT_ROOT   /usr/share/authentic/web/
HTTP_ACCEPT     text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
HTTP_ACCEPT_CHARSET UTF-8,*
HTTP_ACCEPT_ENCODING gzip,deflate
HTTP_ACCEPT_LANGUAGE fr-fr,fr;q=0.8,en;q=0.6,de;q=0.4,eo;q=0.2
HTTP_CONNECTION keep-alive
HTTP_COOKIE     _liberty_idp="CrqCxk0ko6Dzb97TvD/ymlNe0y8="; authentic="9e58d2fe86556f4b"
HTTP_HOST       authentic.libre-entreprise.org
HTTP_KEEP_ALIVE 300
HTTP_REFERER    http://all4dev.reverse-proxy.entrouvert.org/index.php/Main_Page
HTTP_USER_AGENT Mozilla/5.0 (X11; U; Linux i686; fr; rv:1.8.0.7) Gecko/20060830 Firefox/1.5.0.7 (Debian-1.5.dfsg+1.5.0.7-1)
PATH_INFO       /liberty/singleSignOn
QUERY_STRING    RequestID=_CF4823E7B9FDCB9481591F889AEFE466&MajorVersion=1&MinorVersion=2&IssueInstant=2006-10-04T14%3A42%3A07Z&ProviderID=http%3A%2F%2Fall4dev.reverse-proxy.entrouvert.org%2Fliberty%2Fall4dev%2Fmetadata&ForceAuthn=false&IsPassive=false&NameIDPolicy=federated&consent=urn%3Aliberty%3Aconsent%3Aobtained&SigAlg=http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fxmldsig%23rsa-sha1&Signature=YoFeh9N%2Fad8lyoMXfxNJhbGnuy3qd71NKaitAYpoX%2BAWgV2LenupKZ9SBqXoLAQQoFseXx5q%2FSmZwUsud8bDhVVQLbBlfMMmvlsmNE9UOqMGWtHB9UHgQ85cNlSXwCS%2BhLm1ars7O6quq5PNPv2hgzZIUqjerkIrngBqzG7ec3y%2Bv5NhY9%2FOXA%2BTJrLXrv5qXv5KcRBBdnVbiEbsUJnr7L%2FyPl%2F2GpikV%2FKhBxlmF0s0E5k7boPrlgWO1jH6LhpSS%2FtEEZ8H0qfJhEttifmju%2Bw8OPwsKWbcprGxjq%2FkaOsNwW9Y5KbRsyo0PRdYX8eiCeXig2mVESkFAniALbEILg%3D%3D
REMOTE_ADDR     82.235.59.105
REMOTE_PORT     46497
REMOTE_USER     uid=dlaniel,ou=people,o=entrouvert,ou=companies,o=libre-entreprise
REQUEST_METHOD  GET
REQUEST_URI     /liberty/singleSignOn?RequestID=_CF4823E7B9FDCB9481591F889AEFE466&MajorVersion=1&MinorVersion=2&IssueInstant=2006-10-04T14%3A42%3A07Z&ProviderID=http%3A%2F%2Fall4dev.reverse-proxy.entrouvert.org%2Fliberty%2Fall4dev%2Fmetadata&ForceAuthn=false&IsPassive=false&NameIDPolicy=federated&consent=urn%3Aliberty%3Aconsent%3Aobtained&SigAlg=http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fxmldsig%23rsa-sha1&Signature=YoFeh9N%2Fad8lyoMXfxNJhbGnuy3qd71NKaitAYpoX%2BAWgV2LenupKZ9SBqXoLAQQoFseXx5q%2FSmZwUsud8bDhVVQLbBlfMMmvlsmNE9UOqMGWtHB9UHgQ85cNlSXwCS%2BhLm1ars7O6quq5PNPv2hgzZIUqjerkIrngBqzG7ec3y%2Bv5NhY9%2FOXA%2BTJrLXrv5qXv5KcRBBdnVbiEbsUJnr7L%2FyPl%2F2GpikV%2FKhBxlmF0s0E5k7boPrlgWO1jH6LhpSS%2FtEEZ8H0qfJhEttifmju%2Bw8OPwsKWbcprGxjq%2FkaOsNwW9Y5KbRsyo0PRdYX8eiCeXig2mVESkFAniALbEILg%3D%3D
SCGI            1
SCRIPT_NAME     
SERVER_ADDR     212.85.154.92
SERVER_ADMIN    fpeters@entrouvert.com
SERVER_NAME     authentic.libre-entreprise.org
SERVER_PORT     80
SERVER_PROTOCOL HTTP/1.1
SERVER_SOFTWARE Apache/2.0.54 (Debian GNU/Linux) DAV/2 mod_python/3.1.3 Python/2.3.5 PHP/4.3.10-16 proxy_html/2.4 mod_scgi/1.9 mod_ssl/2.0.54 OpenSSL/0.9.7e

StatutTerminée