Empty Logs on TestShib Two when receiving an excpetion

[Jeff Marler]

Hi, I am sending a SAML2 token to the TestShib site (https://sp.testshib.org/Shibboleth.sso/SAML2/POST) and it is failing validation with the following message -

opensaml::FatalProfileException at (https://sp.testshib.org/Shibboleth.sso/SAML2/POST)

Unable to locate satisfiable bearer SubjectConfirmation in assertion.

>From the opensaml2 validation source code  in (BrowserSSOProfile20Validator.cpp - http://sourcecodebrowser.com/opensaml2/2.3/_browser_s_s_o_profile20_validator_8cpp_source.html ) I would expect it to log one of the following messages -

*         "assertion is missing bearer SubjectConfirmation"

*         "bearer confirmation failed with recipient mismatch"

*         "bearer confirmation failed with request correlation mismatch"

*         "bearer confirmation missing NotOnOrAfter attribute"

*         "bearer confirmation has expired"

*         "no error message"
However when I look at the log page after getting the error (https://sp.testshib.org/cgi-bin/splog.cgi?lines=50&logname=shibd.log ) I only have a blank page with no messages of any type.
Has anyone ever seen this before and is there a way to see to logged messages?

Also, here is the SAMLResponse (I removed the AttributeStatement and keyinfo elements to keep the msg small) if anyone is willing to offer any suggestions. Thanks!

<q1:Response ID="_bb6c8502d49e27fbacc915c07ac81e9b" Version="2.0" IssueInstant="2015-05-01T18:06:53.5509493Z" xmlns:q1="urn:oasis:names:tc:SAML:2.0:protocol">
  <Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">https://sp.testshib.org/shibboleth-sp</Issuer<https://sp.testshib.org/shibboleth-sp%3c/Issuer>>
  <q1:Status>
    <q1:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" />
  </q1:Status>
  <Assertion ID="_c2da8bda-5758-4b52-af64-dbedebea47ce" IssueInstant="2015-05-01T18:06:53.539Z" Version="2.0" xmlns="urn:oasis:names:tc:SAML:2.0:assertion">
    <Issuer>https://sp.testshib.org/shibboleth-sp</Issuer<https://sp.testshib.org/shibboleth-sp%3c/Issuer>>
    <Subject>
      <SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
        <SubjectConfirmationData a:type="KeyInfoConfirmationDataType" Recipient="https://sp.testshib.org/Shibboleth.sso/SAML2/POST" xmlns:a="http://www.w3.org/2001/XMLSchema-instance">
          <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
            <o:SecurityTokenReference xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
              <o:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentifier" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">mLpF8iPiOZW6SXynt9oGf+5KGEU=</o:KeyIdentifier>
            </o:SecurityTokenReference>
          </KeyInfo>
        </SubjectConfirmationData>
      </SubjectConfirmation>
    </Subject>
    <Conditions NotBefore="2015-05-01T18:06:53.539Z" NotOnOrAfter="2015-05-02T02:06:53.539Z" />
  </Assertion>
</q1:Response>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20150501/5d0e8640/attachment-0001.html>