Empty Logs on TestShib Two when receiving an excpetion

[Kevin Foote]

checking on it .. 

please user users list in the future

--------
thanks
 kevin.foote

> On May 1, 2015, at 12:10 PM, Jeff Marler <jmarler at scisoc.org> wrote:
> 
> Hi, I am sending a SAML2 token to the TestShib site (https://sp.testshib.org/Shibboleth.sso/SAML2/POST) and it is failing validation with the following message – 
> opensaml::FatalProfileException at (https://sp.testshib.org/Shibboleth.sso/SAML2/POST)
> 
> Unable to locate satisfiable bearer SubjectConfirmation in assertion.
> 
> From the opensaml2 validation source code  in (BrowserSSOProfile20Validator.cpp -http://sourcecodebrowser.com/opensaml2/2.3/_browser_s_s_o_profile20_validator_8cpp_source.html ) I would expect it to log one of the following messages –
> 
> ·         "assertion is missing bearer SubjectConfirmation"
> 
> ·         "bearer confirmation failed with recipient mismatch"
> 
> ·         “bearer confirmation failed with request correlation mismatch”
> 
> ·         “bearer confirmation missing NotOnOrAfter attribute”
> 
> ·         “bearer confirmation has expired”
> 
> ·         "no error message"
> 
> However when I look at the log page after getting the error (https://sp.testshib.org/cgi-bin/splog.cgi?lines=50&logname=shibd.log ) I only have a blank page with no messages of any type. 
> Has anyone ever seen this before and is there a way to see to logged messages?
>  
> Also, here is the SAMLResponse (I removed the AttributeStatement and keyinfo elements to keep the msg small) if anyone is willing to offer any suggestions. Thanks!
>  
> <q1:Response ID="_bb6c8502d49e27fbacc915c07ac81e9b" Version="2.0" IssueInstant="2015-05-01T18:06:53.5509493Z" xmlns:q1="urn:oasis:names:tc:SAML:2.0:protocol">
>   <Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">https://sp.testshib.org/shibboleth-sp</Issuer>
>   <q1:Status>
>     <q1:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" />
>   </q1:Status>
>   <Assertion ID="_c2da8bda-5758-4b52-af64-dbedebea47ce" IssueInstant="2015-05-01T18:06:53.539Z" Version="2.0" xmlns="urn:oasis:names:tc:SAML:2.0:assertion">
>     <Issuer>https://sp.testshib.org/shibboleth-sp</Issuer>
>     <Subject>
>       <SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
>         <SubjectConfirmationData a:type="KeyInfoConfirmationDataType"Recipient="https://sp.testshib.org/Shibboleth.sso/SAML2/POST"xmlns:a="http://www.w3.org/2001/XMLSchema-instance">
>           <KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
>             <o:SecurityTokenReference xmlns:o="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
>               <o:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509SubjectKeyIdentifier" EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">mLpF8iPiOZW6SXynt9oGf+5KGEU=</o:KeyIdentifier>
>             </o:SecurityTokenReference>
>           </KeyInfo>
>         </SubjectConfirmationData>
>       </SubjectConfirmation>
>     </Subject>
>     <Conditions NotBefore="2015-05-01T18:06:53.539Z" NotOnOrAfter="2015-05-02T02:06:53.539Z" />
>   </Assertion>
> </q1:Response>
>  
>  
> -- 
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net