SessionInitiator settings problem

Prakash, Savitha savithap at umich.edu
Wed Oct 12 18:01:10 BST 2011


Hello,

I am relatively new to Shibboleth and I am trying to setup a local instance of IDP and SP on my mac. I have been following the documentation at https://wiki.shibboleth.net/confluence/display/SHIB2/Home. So far, I have successfully installed and configured IDP, installed SP, and I am having problems in the configuration of SessionInitiator (https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPGettingStarted)

I have tried to add the following sessionInitiator configuration into my sibboleth2.xml file, inside the session tag, as shown below:
<Sessions lifetime="28800" timeout="3600" checkAddress="false"
          handlerURL="/Shibboleth.sso" handlerSSL="false" relayState="ss:mem"
          exportLocation="http://localhost/Shibboleth.sso/GetAssertion" exportACL="127.0.0.1"
          idpHistory="false" idpHistoryDays="7">


<!-- Default directs to a specific IdP (favoring SAML 2 over Shib 1). -->
          <SessionInitiator type="Chaining" Location="/Login" isDefault="true" id="Login"
                            entityID="http://127.0.0.1:8080/idp/shibboleth">

              <SessionInitiator type="SAML2" template="bindingTemplate.html"/>
              <SessionInitiator type="Shib1"/>
              <!--
              To allow for >1 IdP, remove entityID property from Chaining element and add
              *either* of the SAMLDS or WAYF handlers below:

              <SessionInitiator type="SAMLDS" URL="https://ds.example.org/DS/WAYF"/>
              <SessionInitiator type="WAYF" URL="https://wayf.example.org/WAYF"/>
              -->
          </SessionInitiator>

----

With this configuration I am getting the following errors in the apache logs, and SP failed to start.

[Tue Oct 11 14:53:56 2011] [crit] XML error(s) during parsing, check log for specifics
[Tue Oct 11 14:53:56 2011] [crit] shib_child_init() failed to load configuration
[Tue Oct 11 14:53:58 2011] [crit] XML error(s) during parsing, check log for specifics
[Tue Oct 11 14:53:58 2011] [crit] shib_child_init() failed to load configuration
[Tue Oct 11 14:54:00 2011] [crit] XML error(s) during parsing, check log for specifics
[Tue Oct 11 14:54:00 2011] [crit] shib_child_init() failed to load configuration


To simplify, I tried adding just the SessionInitiator tag (<SessionInitiator></SessionInitiator), even that caused the xml parsing error as shown above. Without this SessionInitiator tag, SP seems to work fine.

Questions:
1. The apache logs and SP error logs both say "XML error(s) during parsing, check log for specifics".
which log is it refering to?
2. What may be the reason for this? Where should the SessionInitiator setting go (inside Sessions tags in shibboleth2.xml?)
3. Can anybody give me an example of SessionInitiator settings to directly connect to my local idp?

Any pointer that may help resolve the problem will be appreciated.

Thanks,
Savitha
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20111012/7e756f2f/attachment.html 


More information about the dev mailing list