Hi, I'm using version 5.7 of DSpace with nginx and Shibboleth authentication and everything is working fine. But now I need to update to version 6.3 and I followed all the procedures described in the documentation and I successfully managed to upgrade. However, shibboleth authentication does not work.
my authentication-shibboleth.cfg is: lazysession = false lazysession.loginurl = /Shibboleth.sso/Login lazysession.secure = true netid-header = Shib-Person-UID email-header = Shib-Person-Mail email-use-tomcat-remote-user = false autoregister = true sword.compatibility = false firstname-header = Shib-InetOrgPerson-givenName lastname-header = Shib-Person-surname eperson.metadata.autocreate = true; reconvert.attributes = false role-header = Shib-EP-ScopedAffiliation role-header.ignore-scope = true and using DEBUG mode I observed the following: 2020-02-17 12:24:39,447 INFO org.dspace.app.webui.discovery.DiscoverUtility @ facets for scope, null: 4 722f73686962626f6c6574682d7370=_723d8cb35039733075ea508c9ac3b106; JSESSIONID=62A806BA7ADEA88D185DC8DBD8B97DBE' auth_type='shibboleth' remote_user='xxxxxxxxx' shib-application-id='default' shib-authentication-instant='2020-02-12T18:59:10.886Z' shib-authentication-method='urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified' shib-authncontext-class='urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified' shib-ep-orgdn='o=XXXX' shib-ep-orgunitdn='ou=grad,ou=XXXX,o=XXXX' shib-ep-primaryaffiliation='student' shib-handler='https://xxxx.xxx.xxx.xxx/Shibboleth.sso' shib-identity-provider='https://xxx.xxx.xxx/shibboleth' shib-inetorgperson-givenname='Gessy' shib-person-commonname='Gessy' shib-person-mail='gess...@fis.grad.xxx.xxx' shib-person-uid='login' shib-person-surname='Junior' shib-session-expires='1581541151' shib-session-id='_723d8cb35039733075ea508c9ac3b106' shib-session-inactivity='1581540032' shib-session-index='cc6cbb0337efd651aeee991136423ae3cbe46f9b203a30dd044944937a20b831' shib-brperson-datanascimento='30121899' shib-xxxxperson-status='EmailDominio_A' shib-xxxxperson-urlemail='http://correio.xxxx.xxx.xxx/' affiliation='stud...@xxxx.br <stud...@ufmg.br>' eppn='x...@xxx.br' unscoped-affiliation='student' 2020-02-12 17:24:39,909 ERROR org.dspace.authenticate.ShibAuthentication @ Shibboleth authentication was not able to find a Ne tId, Email, or Tomcat Remote user for which to indentify a user from. 2020-02-12 17:24:40,910 ERROR org.dspace.authenticate.ShibAuthentication @ Unable to register new eperson because we are unabl e to find an email address along with first and last name for the user. NetId Header: 'null'='null' (Optional) Email Header: 'null'='null' First Name Header: 'null'='null' Last Name Header: 'null'='null' I see from the logs that the HTTP header is being filled in with the correct values and are reaching tomcat and possibly DSpace but he can't seem to get the header data. Someone can help me? Thank you Gessy -- All messages to this mailing list should adhere to the DuraSpace Code of Conduct: https://duraspace.org/about/policies/code-of-conduct/ --- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to dspace-tech+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/ba2f2422-4f07-4609-b12c-9709d26564d5%40googlegroups.com.
