Loading…
Tilbage

Profilbillede

NemLog-in STS (test) fejler for kald i Bootstrap Token Scenario

Anders Aaberg

Kald til NemLog-in STS (test) i Bootstrap Token Scenario er pludselig begyndt at fejle - det lader til at "bootstrap issuer configuration list" mangler "https://saml.test-nemlog-in.dk/". Kald virker fint nok i System User Scenario (da det nok ikke anvender "bootstrap issuer configuration list").

Logviewer (https://logviewer.test-nemlog-in.dk/) for NemLog-in STS skriver følgende:
Dato: 8 12-10-2020 15:21:10
EventId: 3803
Event Type: Incoming request denied - request not valid

Besked besked:
LogId=20201012172110-2822 UtcTimestamp=12-10-2020 15:21:10.615 LocalTime=12-10-2020 17:21:10.615 User= UserIp= OperationId=3803 MachineName= SessionId= ApplicationName=SecurityTokenService.Web CorrelationId=a7fe09ed-ef09-49f1-8b6b-330e11707d86 Message=DK.OES.KFOBS.Nemlogin.Common.SecurityTokenService.Contract.SecurityTokenServiceException: Could not find issuer https://saml.test-nemlog-in.dk/ in allowed bootstrap issuer configuration list. at DK.OES.KFOBS.Nemlogin.Frontend.SecurityTokenService.Web.ValidateRequest.CheckIssuerElement(XmlNode xmlnode, XmlNamespaceManager nsMgr, String usageScenario, SecurityTokenServiceAllowedBootstrapIssuersCollection allowedBootstrapIssuers, MetadataCache`1 wscCache, String& issuerEntityId, Boolean& sessionIndexProvided) at DK.OES.KFOBS.Nemlogin.Frontend.SecurityTokenService.Web.ValidateRequest.CheckActAsElement(XmlNode assertionElement, XmlNamespaceManager nsMgr, String usageScenario, List`1 identifierList, Int32 allowedTimevarianceInMiliseconds, Func`4 persistentPseudonymServiceGetX509SubjectName, MetadataCache`1 wspCache, String wspEntityid, Boolean requireSessionIndexCheck, Boolean useIntegrationTestRules, Func`3 sessionStatusServiceIsSessionActive, SecurityTokenServiceAllowedBootstrapIssuersCollection allowedBootstrapIssuers, MetadataCache`1 wscCache, Guid correlationId, Action`3 requesterEntityIdLogger, Func`3 fbrsOrganizationServiceAuthorizedScope, String issuerCvr, List`1 kfobsAttributes, Boolean isLocalIDP) at DK.OES.KFOBS.Nemlogin.Frontend.SecurityTokenService.Web.ValidateRequest.ValidateSecurityTokenMessage(XmlDocument xmldocument, Int32 allowedTimevarianceInMiliseconds, Boolean useIntegrationTestRules, Func`4 persistentPseudonymServiceGetX509SubjectName, Func`4 authorizationMetadataServiceWscHasAuthorization, Func`3 sessionStatusServiceIsSessionActive, MetadataCache`1 wspCache, MetadataCache`1 wscCache, SecurityTokenServiceAllowedBootstrapIssuersCollection allowedBootstrapTokenIssuers, SecurityTokenServiceAllowedSigningCertificateTypesCollection allowedSigningCertificateTypes, SecurityTokenServiceAllowedIssuerCertificateCollection allowedIssuerCertificates, Func`3 danIdCertificateChecker, Guid correlationId, Action`3 requesterEntityIdLogger, Func`3 fbrsOrganizationServiceIsUserOrganization, Func`3 fbrsOrganizationServiceAuthorizedScope, List`1 kfobsAttributes, Boolean& isSystemUser, String& wscEntiyID, Boolean& isLocalIDP) at DK.OES.KFOBS.Nemlogin.Frontend.SecurityTokenService.Web.SecurityTokenService.IssueToken(Message message) Category=ErrorLog EventId=0 Severity=Error RequestMessage=<soap:Envelope xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Header><Action xmlns="http://www.w3.org/2005/08/addressing" xmlns:ns2="http://www.w3.org/2006/05/addressing/wsdl" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="_0d3e6c19-9062-44c7-9e86-68c9f42a2fed">http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue</Action><MessageID xmlns="http://www.w3.org/2005/08/addressing" xmlns:ns2="http://www.w3.org/2006/05/addressing/wsdl" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="_c475d9a5-0cf5-4b4a-8d4e-b44f187b0a4c">uuid:062843c2-aa4a-441f-9c41-353a790067af</MessageID><To xmlns="http://www.w3.org/2005/08/addressing" xmlns:ns2="http://www.w3.org/2006/05/addressing/wsdl" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="_d16b95f8-ea1b-4577-80bc-6d334764b702">https://bootstrap.sts.nemlog-in.dk/</To><wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" soap:mustUnderstand="1"><wsse:BinarySecurityToken EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" wsu:Id="X509-e5db9d09-0593-4854-9471-23a2555cbc24">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</wsse:BinarySecurityToken><wsu:Timestamp wsu:Id="TS-6f2e51a7-63d7-4635-b29a-9f1b2ee3b1a3"><wsu:Created>2020-10-12T15:21:10.198Z</wsu:Created><wsu:Expires>2020-10-12T15:26:10.198Z</wsu:Expires></wsu:Timestamp><ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#" Id="SIG-76398e8a-9204-47eb-8031-70462b95b591"><ds:SignedInfo><ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="soap" /></ds:CanonicalizationMethod><ds:SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><ds:Reference URI="#TS-6f2e51a7-63d7-4635-b29a-9f1b2ee3b1a3"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="wsse soap" /></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><ds:DigestValue>i8SVCCgmtPhQBBGFrplo4wqLT7KR/BZLJ4796e0qmuk=</ds:DigestValue></ds:Reference><ds:Reference URI="#_a5ae78f2-2268-43dc-8c83-311ba454c557"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><ds:DigestValue>d1E08EeY3rC3My2ElK6Im4Uxn5hHmlNjjRK6/uc2d44=</ds:DigestValue></ds:Reference><ds:Reference URI="#_d16b95f8-ea1b-4577-80bc-6d334764b702"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="soap" /></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><ds:DigestValue>uyCmNSc1YcJym1bI90IlkeEwibpWxIv7O9iREdvnHG0=</ds:DigestValue></ds:Reference><ds:Reference URI="#_c475d9a5-0cf5-4b4a-8d4e-b44f187b0a4c"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="soap" /></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><ds:DigestValue>I5ag+WUXj8Hztxyt2kaQcDHUU5wCeqRz3k0447gnnDQ=</ds:DigestValue></ds:Reference><ds:Reference URI="#_0d3e6c19-9062-44c7-9e86-68c9f42a2fed"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="soap" /></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><ds:DigestValue>1MMqQMYi0XCffrFnuwxGZObISV7aMADRXujh9jaCXR0=</ds:DigestValue></ds:Reference><ds:Reference URI="#X509-e5db9d09-0593-4854-9471-23a2555cbc24"><ds:Transforms><ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"><ec:InclusiveNamespaces xmlns:ec="http://www.w3.org/2001/10/xml-exc-c14n#" PrefixList="soap" /></ds:Transform></ds:Transforms><ds:DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><ds:DigestValue>pal7lAKUo6i5pQAfEfShXYOI43a+3J2uDPJ7OgFmd1I=</ds:DigestValue></ds:Reference></ds:SignedInfo><ds:SignatureValue>AvVsORvEGMMqNigLQAxrNXlqefvzBYAkL5hhIpMxTuNZDgrR+ANB2tDGrwx98n23xuAUzTJ91V2w0Ee2UnAN987CogyRgklowFeWWQVWFyTjtv/2GiTK2vZXIavfxLX9gd/RSHsVe2vRH1TyaOyIX22+y7SLMDPRjgpiZeHW5rxYq/vgM5kEtd/ArjLeqmFB9CvKyZlTo8eTmqwEn25eMayhHEzER/dNTRv1YNWB44tQ6G30xZc2DIiFXfT3iJnaQFQMMpTt3j+SCdkhtealgvfhOqOnyc5jg8NgLYDpAGyLFqHKzMRB29aziCmWuzsH2iZz0YrclEhpZPuLBk8rpA==</ds:SignatureValue><ds:KeyInfo Id="KI-505244bf-b53d-41d0-8b87-4c33bfe34486"><wsse:SecurityTokenReference xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="STR-f6d30a08-e686-432d-987e-59ea31c5ade7"><wsse:Reference URI="#X509-e5db9d09-0593-4854-9471-23a2555cbc24" ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509v3" /></wsse:SecurityTokenReference></ds:KeyInfo></ds:Signature></wsse:Security></soap:Header><soap:Body xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd" wsu:Id="_a5ae78f2-2268-43dc-8c83-311ba454c557"><wst:RequestSecurityToken xmlns:wst="http://docs.oasis-open.org/ws-sx/ws-trust/200512" Context="urn:uuid:340185e4-f0da-4efe-b11a-6a0e625b44d3"><wst:RequestType>http://docs.oasis-open.org/ws-sx/ws-trust/200512/Issue</wst:RequestType><wsp:AppliesTo xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy"><wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing"><wsa:Address>https://wsp.itcrew.dk</wsa:Address></wsa:EndpointReference></wsp:AppliesTo><wst:TokenType>http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0</wst:TokenType><ActAs xmlns="http://docs.oasis-open.org/ws-sx/ws-trust/200802"><Assertion xmlns="urn:oasis:names:tc:SAML:2.0:assertion" ID="_b984a277-bc29-4dd8-8cfc-408624422655" IssueInstant="2020-10-12T15:20:54.700Z" Version="2.0"><Issuer>https://saml.test-nemlog-in.dk/</Issuer><Signature xmlns="http://www.w3.org/2000/09/xmldsig#"><SignedInfo><CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /><SignatureMethod Algorithm="http://www.w3.org/2001/04/xmldsig-more#rsa-sha256" /><Reference URI="#_b984a277-bc29-4dd8-8cfc-408624422655"><Transforms><Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" /><Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#" /></Transforms><DigestMethod Algorithm="http://www.w3.org/2001/04/xmlenc#sha256" /><DigestValue>vCWTI9Wn0hYItW0wjSsFlh7yNbkhh8+/k18tqTuVThk=</DigestValue></Reference></SignedInfo><SignatureValue>KiIFrtb6DA/L/15rUu0uIriCiXIYDXwvIeO3kEl5EjOldy3wwTtUt6JrfF4Ped6Cn9HEESB/BDbWCjiPEy+1zJQxtdlH9QsHdGDesRNN6OxGwvBRijQPd6CZnM7aq6/O4UUHBAWEqfQW7ip4m0xbaMzTCh0b2+B2Z/DHUGe+wFkbRnG0PgID0mipnEHQltKxkFrfzDQmGTdtrWV+nE5v452IXNjXWT7B2lGjO2m0xpHG/c6h+Uag78Miifhoo1amKmJI8G4hPSHee+Mu7uqLiOZnw3RilL+voX78mgla56RLYBhD+SwlIlGKvgBvYeOh4BR/BcpCpuGU3RbTLPKwbQ==</SignatureValue><KeyInfo><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></Signature><Subject><NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName">C=DK,O=NINECONSULT A/S // CVR:30714024,CN=Anders Aaberg,Serial=CVR:30714024-RID:70354595</NameID><SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:holder-of-key"><SubjectConfirmationData xmlns:a="http://www.w3.org/2001/XMLSchema-instance" a:type="KeyInfoConfirmationDataType"><KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#"><X509Data><X509Certificate>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</X509Certificate></X509Data></KeyInfo></SubjectConfirmationData></SubjectConfirmation></Subject><Conditions NotOnOrAfter="2020-10-12T17:20:54.700Z"><AudienceRestriction><Audience>https://bootstrap.sts.nemlog-in.dk/</Audience></AudienceRestriction></Conditions><AttributeStatement><Attribute Name="dk:nemlogin:saml:attribute:IdPSessionIndex" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><AttributeValue>32-9C-29-1F-B6-C1-34-66-D1-D2-B9-70-56-87-34-3B-8E-CB-F1-0A</AttributeValue></Attribute><Attribute Name="dk:nemlogin:saml:attribute:SpEntityId" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><AttributeValue>https://saml.s9.erstdev.dk</AttributeValue></Attribute></AttributeStatement></Assertion></ActAs></wst:RequestSecurityToken></soap:Body></soap:Envelope> STSRequestResult=BootstrapTokenCertificateError STSFaultCode=FailedAuthentication

DIGST har nu rettet fejlen