SAML-related error I don't understand

[Johnnie W Adams <jx...@ualr.edu>]

Hi, folks,

     I'm trying to figure out why I got this error on startup for the new
server pair I'm building:

13:52:11.887 [http-nio-8080-exec-1] WARN  o.a.g.e.AuthenticationProviderFacade
- The "saml" authentication provider has encountered an internal error
which will halt the authentication process. If this is unexpected or you
are the developer of this authentication provider, you may wish to enable
debug-level logging. If this is expected and you wish to ignore such
failures in the future, please set "skip-if-unavailable: saml" within your
guacamole.properties.

13:52:11.887 [http-nio-8080-exec-1] ERROR o.a.g.rest.RESTExceptionMapper -
An internal error occurred, but did not contain an error message. Enable
debug-level logging for details.

     I did set skip-if-unavailable and got past it, but I don't quite get
what it means. Is it just complaining that I haven't set SAML up yet?

Thanks,

     John A

-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxadams@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
<http://ualr.edu/itservices/security/>.

Re: SAML-related error I don't understand

[Michael Jumper <mj...@apache.org>]

On 4/11/24 12:01 PM, Johnnie W Adams wrote:
> Hi, folks,
> 
>       I'm trying to figure out why I got this error on startup for the 
> new server pair I'm building:
> 
> 13:52:11.887 [http-nio-8080-exec-1] 
> WARNo.a.g.e.AuthenticationProviderFacade - The "saml" authentication 
> provider has encountered an internal error which will halt the 
> authentication process. If this is unexpected or you are the developer 
> of this authentication provider, you may wish to enable debug-level 
> logging. If this is expected and you wish to ignore such failures in the 
> future, please set "skip-if-unavailable: saml" within your 
> guacamole.properties.
> 

You'll need to look earlier in the logs to find what failed to cause 
SAML to fail to start. As noted by the warning, you may need to enable 
debug-level logging to get sufficient detail.

> 13:52:11.887 [http-nio-8080-exec-1] ERRORo.a.g.rest.RESTExceptionMapper 
> - An internal error occurred, but did not contain an error message. 
> Enable debug-level logging for details.
> 
> I did set skip-if-unavailable and got past it, but I don't quite 
> get what it means. Is it just complaining that I haven't set SAML up yet?
> 

You'll need to enable debug-level logging to get additional information 
if there isn't already enough information available further up in the logs.

The "skip-if-unavailable" property is a last-ditch option that you can 
make use of if you have auth-related systems that you *know* are 
unavoidably unstable. Setting that property instructs Guacamole to allow 
authentication to proceed with the providers that _are_ working, even if 
there is a provider that is failing to start (here, SAML).

If you are not expecting this failure, you should not set this property.

- Mike

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org