Hello,
We recently upgraded to v5.14 and have had points on our test server where we get a null pointer exception while trying to login via shibboleth. After I authenticate with my credentials, the app sits there and then times out, not logging me in. Though sometimes it does log me in if I wait long enough.
It's only on our test server, so it could be a misconfiguration on our part.
Has anyone seen this before? Does anything stand out to you about what we might have misconfigured?
[#|2025-05-30T17:49:11.202+0000|WARNING|Payara 5.2022.5|javax.enterprise.resource.webcontainer.jsf.lifecycle|_ThreadID=94;_ThreadName=http-thread-pool::jk-connector(1);_TimeMillis=1748627351202;_LevelValue=900;|
#{Shib.init}: java.lang.NullPointerException
javax.faces.FacesException: #{Shib.init}: java.lang.NullPointerException
at com.sun.faces.application.ActionListenerImpl.getNavigationOutcome(ActionListenerImpl.java:96)
at com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:71)
at javax.faces.component.UIViewAction.broadcast(UIViewAction.java:548)
at javax.faces.component.UIViewRoot.broadcastEvents(UIViewRoot.java:847)
at javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:1396)
at com.sun.faces.lifecycle.InvokeApplicationPhase.execute(InvokeApplicationPhase.java:58)
.
.
.
at java.base/java.lang.Thread.run(Thread.java:829)
Caused by: javax.faces.el.EvaluationException: java.lang.NullPointerException
at com.sun.faces.application.MethodBindingMethodExpressionAdapter.invoke(MethodBindingMethodExpressionAdapter.java:76)
at com.sun.faces.application.ActionListenerImpl.getNavigationOutcome(ActionListenerImpl.java:82)
... 45 more
Caused by: java.lang.NullPointerException
at edu.harvard.iq.dataverse.util.SessionUtil.changeSessionId(SessionUtil.java:22)
at edu.harvard.iq.dataverse.DataverseSession.setUser(DataverseSession.java:150)
at edu.harvard.iq.dataverse.DataverseSession$Proxy$_$$_WeldClientProxy.setUser(Unknown Source)
at edu.harvard.iq.dataverse.Shib.logInUserAndSetShibAttributes(Shib.java:386)
at edu.harvard.iq.dataverse.Shib.init(Shib.java:262)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.base/java.lang.reflect.Method.invoke(Method.java:566)
at com.sun.el.util.ReflectionUtil.invokeMethod(ReflectionUtil.java:160)
at com.sun.el.parser.AstValue.invoke(AstValue.java:261)
at com.sun.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:237)
at org.jboss.weld.module.web.util.el.ForwardingMethodExpression.invoke(ForwardingMethodExpression.java:40)
at org.jboss.weld.module.web.el.WeldMethodExpression.invoke(WeldMethodExpression.java:50)
at com.sun.faces.facelets.el.TagMethodExpression.invoke(TagMethodExpression.java:65)
at com.sun.faces.application.MethodBindingMethodExpressionAdapter.invoke(MethodBindingMethodExpressionAdapter.java:66)
... 46 more
Thanks in advance for any help troubleshooting this.
So a null pointer at https://github.com/IQSS/dataverse/blob/v5.14/src/main/java/edu/harvard/iq/dataverse/util/SessionUtil.java#L22
hmm
What if you go to the equivalent of https://demo.dataverse.org/Shibboleth.sso/Session
Anything there?
There's lots of good info there including
Miscellaneous : session expiration, client address, sso protocol, identity provider, Authentication time, autehtnication context class and authentication context decl.
Attributes: affiliation, eppn, givenName, mail , persistent-id and sn
The fields seem to be filled in okay.
What's interesting is that DV doesn't think I'm logged in.
It looks like SessionUtil was added in #7111 by Jim. He isn't here in Zulip. Do you mind starting a thread at https://groups.google.com/g/dataverse-community ?
Thanks, Philip. We're going to try one more thing and then I'll email the list. There's a chance that it's something in our setup.
Last updated: Jan 09 2026 at 14:18 UTC