<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<blockquote type="cite">Hello,<br>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite">I am relatively new to Shibboleth and I am trying to setup a local instance of IDP and SP on my mac. I have been following the documentation at <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/Home">https://wiki.shibboleth.net/confluence/display/SHIB2/Home</a>.
So far, I have successfully installed and configured IDP, installed SP, and I am having problems in the configuration of SessionInitiator (<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPGettingStarted">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPGettingStarted</a>)<br>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite">I have tried to add the following sessionInitiator configuration into my sibboleth2.xml file, inside the session tag, as shown below:<br>
</blockquote>
<blockquote type="cite"><Sessions lifetime="28800" timeout="3600" checkAddress="false"<br>
</blockquote>
<blockquote type="cite"> handlerURL="/Shibboleth.sso" handlerSSL="false" relayState="ss:mem"<br>
</blockquote>
<blockquote type="cite"> exportLocation="<a href="http://localhost/Shibboleth.sso/GetAssertion">http://localhost/Shibboleth.sso/GetAssertion</a>" exportACL="127.0.0.1"<br>
</blockquote>
<blockquote type="cite"> idpHistory="false" idpHistoryDays="7"><br>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite"><!-- Default directs to a specific IdP (favoring SAML 2 over Shib 1). --><br>
</blockquote>
<blockquote type="cite"> <SessionInitiator type="Chaining" Location="/Login" isDefault="true" id="Login"<br>
</blockquote>
<blockquote type="cite"> entityID="<a href="http://127.0.0.1:8080/idp/shibboleth">http://127.0.0.1:8080/idp/shibboleth</a>"><br>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite"> <SessionInitiator type="SAML2" template="bindingTemplate.html"/><br>
</blockquote>
<blockquote type="cite"> <SessionInitiator type="Shib1"/><br>
</blockquote>
<blockquote type="cite"> <!--<br>
</blockquote>
<blockquote type="cite"> To allow for >1 IdP, remove entityID property from Chaining element and add<br>
</blockquote>
<blockquote type="cite"> *either* of the SAMLDS or WAYF handlers below:<br>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite"> <SessionInitiator type="SAMLDS" URL="<a href="https://ds.example.org/DS/WAYF">https://ds.example.org/DS/WAYF</a>"/><br>
</blockquote>
<blockquote type="cite"> <SessionInitiator type="WAYF" URL="<a href="https://wayf.example.org/WAYF">https://wayf.example.org/WAYF</a>"/><br>
</blockquote>
<blockquote type="cite"> --><br>
</blockquote>
<blockquote type="cite"> </SessionInitiator><br>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite"><span class="Apple-tab-span" style="white-space: pre; "></span>----<br>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite">With this configuration I am getting the following errors in the apache logs, and SP failed to start.<br>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite">[Tue Oct 11 14:53:56 2011] [crit] XML error(s) during parsing, check log for specifics<br>
</blockquote>
<blockquote type="cite">[Tue Oct 11 14:53:56 2011] [crit] shib_child_init() failed to load configuration<br>
</blockquote>
<blockquote type="cite">[Tue Oct 11 14:53:58 2011] [crit] XML error(s) during parsing, check log for specifics<br>
</blockquote>
<blockquote type="cite">[Tue Oct 11 14:53:58 2011] [crit] shib_child_init() failed to load configuration<br>
</blockquote>
<blockquote type="cite">[Tue Oct 11 14:54:00 2011] [crit] XML error(s) during parsing, check log for specifics<br>
</blockquote>
<blockquote type="cite">[Tue Oct 11 14:54:00 2011] [crit] shib_child_init() failed to load configuration<br>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite">To simplify, I tried adding just the SessionInitiator tag (<SessionInitiator></SessionInitiator), even that caused the xml parsing error as shown above. Without this SessionInitiator tag, SP seems to work fine.<br>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite">Questions:<br>
</blockquote>
<blockquote type="cite">1. The apache logs and SP error logs both say "XML error(s) during parsing, check log for specifics".<br>
</blockquote>
<blockquote type="cite">which log is it refering to?<br>
</blockquote>
<blockquote type="cite">2. What may be the reason for this? Where should the SessionInitiator setting go (inside Sessions tags in shibboleth2.xml?)<br>
</blockquote>
<blockquote type="cite">3. Can anybody give me an example of SessionInitiator settings to directly connect to my local idp?<br>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite">Any pointer that may help resolve the problem will be appreciated.<br>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite">Thanks,<br>
</blockquote>
<blockquote type="cite">Savitha</blockquote>
</body>
</html>