IDP log files not created

Rod Widdowson rdw at steadingsoftware.com
Mon Oct 24 17:39:03 BST 2011


You have probably uncommented out the bit in the RelyingParty.xml file which sets up the metadata source:

>                 <metadata:MetadataFilter xsi:type="metadata:SignatureValidation"
>                                 trustEngineRef="shibboleth.MetadataTrustEngine"

                                                         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ 
>                                 requireSignedMetadata="true" />

But not commented out the bit which sets up the signature validation

>    <!-- Trust engine used to evaluate the signature on loaded metadata. -->

>    <security:TrustEngine id="shibboleth.MetadataTrustEngine" xsi:type="security:StaticExplicitKeySignature">

                               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ 

>        <security:Credential id="MyFederation1Credentials" xsi:type="security:X509Filesystem">
>            <security:Certificate>$IDP_HOME$/credentials/federation1.crt</security:Certificate>
>        </security:Credential>
>    </security:TrustEngine>




More information about the dev mailing list