Help with running the OpenIdWebringSsoProvider

[Sprinkle]

Hi All,

Need some guru to point me in the right direction. I am trying to run
the OpenIdWebRingSsoProvider sample and not having much luck.

This is on a Windows 7 machine joined to a domain. I enabled logging
on the Provider web app and saw some errors (see below), much
appreciate it if I can get some ideas on what could be wrong.


Many thanks,

Eddie



2012-05-15 19:20:12,980 (GMT+10) [5] DEBUG DotNetOpenAuth.Http - HTTP
GET http://localhost:39165/
2012-05-15 19:20:13,627 (GMT+10) [5] DEBUG DotNetOpenAuth.Yadis - An
XRDS response was received from GET at user-supplied identifier.
2012-05-15 19:20:13,690 (GMT+10) [5] DEBUG
DotNetOpenAuth.Messaging.Channel - Preparing to send
PositiveAssertionResponse (2.0) message.
2012-05-15 19:20:13,719 (GMT+10) [5] DEBUG
DotNetOpenAuth.Messaging.Bindings - Binding element
DotNetOpenAuth.OpenId.ChannelElements.ExtensionsBindingElement applied
to message.
2012-05-15 19:20:13,720 (GMT+10) [5] DEBUG
DotNetOpenAuth.Messaging.Bindings - Binding element
DotNetOpenAuth.Messaging.Bindings.StandardReplayProtectionBindingElement
applied to message.
2012-05-15 19:20:13,721 (GMT+10) [5] DEBUG
DotNetOpenAuth.Messaging.Bindings - Binding element
DotNetOpenAuth.Messaging.Bindings.StandardExpirationBindingElement
applied to message.
2012-05-15 19:20:13,722 (GMT+10) [5] DEBUG
DotNetOpenAuth.Messaging.Bindings - Signing PositiveAssertionResponse
message.
2012-05-15 19:20:13,759 (GMT+10) [5] ERROR DotNetOpenAuth.Messaging -
Protocol error: Missing decryption key for bucket "https://localhost/
dnoa/association_handles" handle "Wu0O"
at DotNetOpenAuth.Messaging.ErrorUtilities.VerifyProtocol(Boolean
condition, String message, Object[] args)
at
DotNetOpenAuth.Messaging.DataBagFormatterBase`1.CalculateSignature(Byte[]
bytesToSign, String symmetricSecretHandle)
at
DotNetOpenAuth.Messaging.DataBagFormatterBase`1.IsSignatureValid(Byte[]
signedData, Byte[] signature, String symmetricSecretHandle)
at
DotNetOpenAuth.Messaging.DataBagFormatterBase`1.Deserialize(IProtocolMessage
containingMessage, String value, String messagePartName)
at
DotNetOpenAuth.OpenId.Provider.ProviderAssociationHandleEncoder.Deserialize(IProtocolMessage
containingMessage, Boolean privateAssociation, String handle)
at
DotNetOpenAuth.OpenId.Provider.OpenIdProvider.SwitchingAssociationStore.Deserialize(IProtocolMessage
containingMessage, Boolean isPrivateAssociation, String handle)
at
DotNetOpenAuth.OpenId.ChannelElements.ProviderSigningBindingElement.GetSpecificAssociation(ITamperResistantOpenIdMessage
signedMessage)
at
DotNetOpenAuth.OpenId.ChannelElements.ProviderSigningBindingElement.GetAssociation(ITamperResistantOpenIdMessage
signedMessage)
at
DotNetOpenAuth.OpenId.ChannelElements.ProviderSigningBindingElement.ProcessOutgoingMessage(IProtocolMessage
message)
at
DotNetOpenAuth.Messaging.Channel.ProcessOutgoingMessage(IProtocolMessage
message)
at
DotNetOpenAuth.Messaging.Channel.PrepareResponse(IProtocolMessage
message)
at DotNetOpenAuth.Messaging.Channel.Send(IProtocolMessage message)
at
DotNetOpenAuth.OpenId.Provider.OpenIdProvider.SendResponse(IRequest
request)
at DotNetOpenAuth.OpenId.Provider.ProviderEndpoint.OnLoad(EventArgs
e)
at System.Web.UI.Control.LoadRecursive()
at System.Web.UI.Control.LoadRecursive()
at System.Web.UI.Control.LoadRecursive()
at System.Web.UI.Page.ProcessRequestMain(Boolean
includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest(Boolean
includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest()
at System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext
context)
at System.Web.UI.Page.ProcessRequest(HttpContext context)
at ASP.server_aspx.ProcessRequest(HttpContext context)
at
System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step,
Boolean& completedSynchronously)
at
System.Web.HttpApplication.ApplicationStepManager.ResumeSteps(Exception
error)
at
System.Web.HttpApplication.System.Web.IHttpAsyncHandler.BeginProcessRequest(HttpContext
context, AsyncCallback cb, Object extraData)
at System.Web.HttpRuntime.ProcessRequestInternal(HttpWorkerRequest
wr)
at System.Web.HttpRuntime.ProcessRequestNoDemand(HttpWorkerRequest
wr)
at System.Web.HttpRuntime.ProcessRequest(HttpWorkerRequest wr)
at Microsoft.VisualStudio.WebHost.Request.Process()
at Microsoft.VisualStudio.WebHost.Host.ProcessRequest(Connection
conn)

2012-05-15 19:20:13,760 (GMT+10) [5] ERROR DotNetOpenAuth.OpenId -
Rejecting an association because deserialization of the encoded handle
failed.
DotNetOpenAuth.Messaging.ProtocolException: Missing decryption key for
bucket "https://localhost/dnoa/association_handles" handle "Wu0O"
at DotNetOpenAuth.Messaging.ErrorUtilities.VerifyProtocol(Boolean
condition, String message, Object[] args) in c:\BuildAgent\work
\6fe1ab573d75f9ba\src\DotNetOpenAuth.Core\Messaging
\ErrorUtilities.cs:line 216
at
DotNetOpenAuth.Messaging.DataBagFormatterBase`1.CalculateSignature(Byte[]
bytesToSign, String symmetricSecretHandle) in c:\BuildAgent\work
\6fe1ab573d75f9ba\src\DotNetOpenAuth.Core\Messaging
\DataBagFormatterBase.cs:line 317
at
DotNetOpenAuth.Messaging.DataBagFormatterBase`1.IsSignatureValid(Byte[]
signedData, Byte[] signature, String symmetricSecretHandle) in c:
\BuildAgent\work\6fe1ab573d75f9ba\src\DotNetOpenAuth.Core\Messaging
\DataBagFormatterBase.cs:line 291
at
DotNetOpenAuth.Messaging.DataBagFormatterBase`1.Deserialize(IProtocolMessage
containingMessage, String value, String messagePartName) in c:
\BuildAgent\work\6fe1ab573d75f9ba\src\DotNetOpenAuth.Core\Messaging
\DataBagFormatterBase.cs:line 224
at
DotNetOpenAuth.OpenId.Provider.ProviderAssociationHandleEncoder.Deserialize(IProtocolMessage
containingMessage, Boolean privateAssociation, String handle) in c:
\BuildAgent\work\6fe1ab573d75f9ba\src\DotNetOpenAuth.OpenId.Provider
\OpenId\Provider\ProviderAssociationHandleEncoder.cs:line 73

[Andrew Arnott]

This can occur if the Provider is restarted/recycled during an authentication and doesn't have a persistent store for its secrets.
--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

--
You received this message because you are subscribed to the Google Groups "DotNetOpenAuth" group.
To post to this group, send email to dotnet...@googlegroups.com.
To unsubscribe from this group, send email to dotnetopenid...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/dotnetopenid?hl=en.

[Sprinkle]

Hi Andrew,

Thanks for the response, don't think it would be getting recycled as
it just running through Visual Studio using the built-in server.

Where about can I find sample on configuring the
OpenIdWebringSsoProvider to have a persistent store for its secrets?


Thanks,

Eddie