Missing debugconfig.properties file when using SAML

[karelmaxa]

The following error is logged when the SamlFederationHandler processes the first request:

DebugConfiguration:10/02/2024 08:05:42:233 AM UTC: Thread[http-nio-8080-exec-2,5,main]
'/debugconfig.properties' isn't valid, the default configuration will be used instead: Can't find the configuration file '/debugconfig.properties'.
DebugImpl:10/02/2024 08:05:42:234 AM UTC: Thread[http-nio-8080-exec-2,5,main]
Can't read debug files map. '. Please check the configuration file '/debugfiles.properties'.
java.lang.NullPointerException: inStream parameter is null
  at java.base/java.util.Objects.requireNonNull(Objects.java:235)
  at java.base/java.util.Properties.load(Properties.java:407)
  at com.sun.identity.shared.debug.impl.DebugImpl.initProperties(DebugImpl.java:344)
  at com.sun.identity.shared.debug.impl.DebugImpl.<clinit>(DebugImpl.java:62)
  at com.sun.identity.shared.debug.impl.DebugProviderImpl.getInstance(DebugProviderImpl.java:76)
  at com.sun.identity.shared.debug.Debug.getInstance(Debug.java:204)
  at com.sun.identity.saml2.common.SAML2SDKUtils.<clinit>(SAML2SDKUtils.java:73)
  at org.forgerock.openig.handler.saml.SamlFederationHandler.serviceSPInitiatedSSO(SamlFederationHandler.java:321)
  at org.forgerock.openig.handler.saml.SamlFederationHandler.handle(SamlFederationHandler.java:187)
  at org.forgerock.http.handler.Handlers$UndescribedAsDescribableHandler.handle(Handlers.java:187)
  at org.forgerock.openig.handler.router.NullResponseFilter.filter(NullResponseFilter.java:46)
  at org.forgerock.http.handler.Handlers$1.handle(Handlers.java:61)
  at org.forgerock.openig.filter.RuntimeExceptionFilter.filter(RuntimeExceptionFilter.java:48)
  at org.forgerock.http.handler.Handlers$1.handle(Handlers.java:61)
  at org.forgerock.openig.filter.LogAttachedExceptionFilter.filter(LogAttachedExceptionFilter.java:42)
  at org.forgerock.http.handler.Handlers$1.handle(Handlers.java:61)
  at org.forgerock.openig.handler.router.MetricsFilter.filter(MetricsFilter.java:58)
  at org.forgerock.http.handler.Handlers$1.handle(Handlers.java:61)
  at org.forgerock.openig.filter.HttpAccessAuditFilter.filter(HttpAccessAuditFilter.java:82)
  at org.forgerock.http.handler.Handlers$1.handle(Handlers.java:61)
  at org.forgerock.openig.filter.MdcRouteIdFilter.filter(MdcRouteIdFilter.java:51)
  at org.forgerock.http.handler.Handlers$1.handle(Handlers.java:61)
  at org.forgerock.openig.handler.router.Route.handle(Route.java:164)
  at org.forgerock.openig.handler.router.RouterHandler.handle(RouterHandler.java:354)
  at org.forgerock.http.handler.Handlers$UndescribedAsDescribableHandler.handle(Handlers.java:187)
  at org.forgerock.openig.decoration.baseuri.BaseUriFilter.filter(BaseUriFilter.java:76)
  at org.forgerock.http.handler.Handlers$1.handle(Handlers.java:61)
  at org.forgerock.openig.decoration.capture.CaptureHandler.handle(CaptureHandler.java:63)
  at org.forgerock.http.handler.Handlers$UndescribedAsDescribableHandler.handle(Handlers.java:187)
  at org.forgerock.http.filter.TransactionIdInboundFilter.filter(TransactionIdInboundFilter.java:60)
  at org.forgerock.http.handler.Handlers$1.handle(Handlers.java:61)
  at org.forgerock.http.servlet.HttpFrameworkServlet.service(HttpFrameworkServlet.java:237)
  at javax.servlet.http.HttpServlet.service(HttpServlet.java:623)
  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:199)
  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144)
  at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:51)
  at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:168)
  at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:144)
  at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:168)
  at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:90)
  at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:482)
  at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:130)
  at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:93)
  at org.apache.catalina.valves.RemoteIpValve.invoke(RemoteIpValve.java:761)
  at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:660)
  at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)
  at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:346)
  at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:383)
  at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63)
  at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:937)
  at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1791)
  at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52)
  at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1190)
  at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)
  at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:63)
  at java.base/java.lang.Thread.run(Thread.java:840)

Despite the error, integration with the IdP via SAML works.

[pavelhoral]

The simplest solution would be to copy https://github.com/WrenSecurity/wrenam/blob/main/openam-federation/openam-fedlet-unconfigured-war/src/main/resources/debugfiles.properties to resources of openig-saml module.