PAPI Archivos

The PAPI authentication and authorization framework

PAPI@LISTSERV.REDIRIS.ES
Opciones: Vista Clásica

Use Monospaced Font
Por defecto enseñar Text Part
Esconda cabeceras de correo

Tema: [<< Primero] [< Prev] [Siguiente >] [Último >>]

Print Responder
Mime-Version: 1.0 (Apple Message framework v935.3)
Content-Type: multipart/signed; boundary=Apple-Mail-1--297895231; micalg=sha1; protocol="application/pkcs7-signature"
References: <[log in para visualizar]>
Date: Wed, 1 Jul 2009 12:39:15 +0200
Received: by LISTSERV.REDIRIS.ES (LISTSERV-TCP/IP release 14.5) with spool id 6190396 for [log in para visualizar]; Wed, 1 Jul 2009 12:39:21 +0200 from irisout1.rediris.es (irisout1.rediris.es [130.206.24.3]) by listserv.rediris.es (Postfix) with ESMTP id 351635C201 for <[log in para visualizar]>; Wed, 1 Jul 2009 12:39:21 +0200 (CEST) from cronos.rediris.es ([130.206.6.37]) by abel.rediris.es with ESMTP/TLS/AES128-SHA; 01 Jul 2009 12:39:25 +0200
X-IronPort-AV: E=Sophos;i="4.42,323,1243807200"; d="p7s'?scan'208";a="7383633"
Reply-To: The PAPI authentication and authorization framework <[log in para visualizar]>
Subject: Re: Authentication ERROR received from GPoA wayf:built-in
Sender: The PAPI authentication and authorization framework <[log in para visualizar]>
Delivered-To: [log in para visualizar]
Emisor: Daniel García <[log in para visualizar]>
Message-ID: <[log in para visualizar]>
In-Reply-To: <[log in para visualizar]>
X-Mailer: Apple Mail (2.935.3)
X-Original-To: [log in para visualizar]
Parts/Attachments: text/plain (4 kB) , smime.p7s (4 kB) 

	Hola Francisco,

Podrías mandar el log de apache pero con el proceso completo, es  
decir, borra las cookies, y empieza desde cero, es para ver q pasa con  
el campo DATA, que no aparece en el log de Apache que has enviado.

	Saludos!

El 01/07/2009, a las 12:05, Francisco Vivancos escribió:

> bueno pues utilizando las claves privkey y pubkey que vienen de  
> ejemplo con
> papi parece haberse solucionado parcialmente, el PoA.pm al testear  
> el GpoA
> no imprime el error pero cuando llega a la linea 910 falla el openssl.
>
> el trozo de codigo del PoA es :
>
>
> 	# Get the output block maximun size
>  ## Non use the PADDINGSIZE to decrypt
> 	# Get the size of block to encrypt and total number of blocks
> 	my $pkey = Crypt::OpenSSL::RSA- 
> >new_public_key(read_key_file($keyFile));
> 	$pkey->use_pkcs1_padding();
> 	my $outputBlockSize = $pkey->size();
> 	my $inputBlockSize = $outputBlockSize;#- PADDINGSIZE;
> 	my $numBlocks = int($inputSize / $inputBlockSize);
>
> 	# Start to deencrypt.
> 	my $blockCount = 0;
> 	my @decryptBuffer = ();
>
> 	while ($blockCount < $numBlocks){
> 		my $index = $blockCount * $inputBlockSize;
> 		my $block = substr($cryptData, $index, $inputBlockSize);
> linea 910:	$decryptBuffer[$blockCount] = $pkey- 
> >public_decrypt($block);
> 		$blockCount++;
> 	}
>
> el log de apache :
>
> [Wed Jul 01 12:15:36 2009] [notice] Apache/2.2.3 (Linux/SUSE)  
> configured --
> resuming normal operations
> [Wed Jul 01 12:15:36 2009] [info] Server built: Mar  2 2009 17:32:19
> [Wed Jul 01 12:15:36 2009] [debug] prefork.c(991): AcceptMutex:  
> sysvsem
> (default: sysvsem)
> [Wed Jul 01 12:16:31 2009] [notice] [client 127.0.0.1]
> PAPI#15306_1246443391: PoA::set_parameters# Servername =  
> <poa.localhost>\n
> [Wed Jul 01 12:16:31 2009] [notice] [client 127.0.0.1]
> PAPI#15306_1246443391: PoA::set_parameters# Server_ID = <glpi>\n
> [Wed Jul 01 12:16:31 2009] [warn] [client 127.0.0.1]
> PAPI#15306_1246443391_glpi: Lcook is empty
> [Wed Jul 01 12:16:31 2009] [notice] [client 127.0.0.1]
> PAPI#15306_1246443391_glpi: Hcook is empty
> [Wed Jul 01 12:16:31 2009] [notice] [client 127.0.0.1]
> PAPI#15306_1246443391: PoA::set_parameters# Servername =  
> <poa.localhost>\n
> [Wed Jul 01 12:16:31 2009] [notice] [client 127.0.0.1]
> PAPI#15306_1246443391: PoA::set_parameters# Server_ID = <glpi>\n
> [Wed Jul 01 12:16:31 2009] [notice] [client 127.0.0.1]
> PAPI#15306_1246443391: PoA::set_parameters# Servername =  
> <poa.localhost>\n
> [Wed Jul 01 12:16:31 2009] [notice] [client 127.0.0.1]
> PAPI#15306_1246443391: PoA::set_parameters# Server_ID = <glpi>\n
> [Wed Jul 01 12:16:32 2009] [error] [client 127.0.0.1] File does not  
> exist:
> /srv/www/htdocs/login.css, referer:
> https://localhost/cgi-bin/AuthServer?ATTREQ=glpi&PAPIPOAREF=3F7BA4C8662811DEB815E92CEB355C56&PAPIPOAURL=http%3A%2F%2Fpoa%2Elocalhost%2Fglpi%2F
> [Wed Jul 01 12:16:33 2009] [error] [client 127.0.0.1] File does not  
> exist:
> /srv/www/htdocs/xhtmlvalid.png, referer:
> https://localhost/cgi-bin/AuthServer?ATTREQ=glpi&PAPIPOAREF=3F7BA4C8662811DEB815E92CEB355C56&PAPIPOAURL=http%3A%2F%2Fpoa%2Elocalhost%2Fglpi%2F
> [Wed Jul 01 12:16:33 2009] [error] [client 127.0.0.1] File does not  
> exist:
> /srv/www/htdocs/cssvalid.png, referer:
> https://localhost/cgi-bin/AuthServer?ATTREQ=glpi&PAPIPOAREF=3F7BA4C8662811DEB815E92CEB355C56&PAPIPOAURL=http%3A%2F%2Fpoa%2Elocalhost%2Fglpi%2F
> [Wed Jul 01 12:16:44 2009] [notice] [client 127.0.0.1]
> PAPI#15306_1246443404: PoA::set_parameters# Servername =  
> <poa.localhost>\n
> [Wed Jul 01 12:16:44 2009] [notice] [client 127.0.0.1]
> PAPI#15306_1246443404: PoA::set_parameters# Server_ID = <glpi>\n
> [Wed Jul 01 12:16:44 2009] [error] [client 127.0.0.1] RSA.xs:202:  
> OpenSSL
> error: block type is not 01 at /usr/lib/perl5/site_perl/5.8.8/PAPI/ 
> PoA.pm
> line 910.\n
>
> ¿sabe alguien como darle solucion?
>

--
Daniel García Franco		E-mail: [log in para visualizar]
				Jabber: [log in para visualizar]
Red.es/RedIRIS			Tef:+34 955 05 66 23
Edificio CICA
Avenida Reina Mercedes, s/n
41012 Sevilla
SPAIN

- Red Académica y Científica española (http://www.rediris.es) -
- Spanish NREN (http://www.rediris.es) -

ATOM RSS1 RSS2