<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-text-html" lang="x-unicode"> <font face="Helvetica,
Arial, sans-serif">Sorry for bringing up the SLO question
again. But here is the situation we encountered:</font><br>
<br>
<font face="Helvetica, Arial, sans-serif">We configured the IdP
(version 2.4) with 2-way SSL (using client cert) for user
authentication, and using HTTP-POST for SLO. The SP was able
to send out a global logout message signed by SP's cert. But the
IdP couldn't process the logout message. An OpenSAML exception
is thrown (</font><big><font face="Helvetica, Arial, sans-serif"><big><big><span
style="color: rgb(33, 49, 64); font-size: 12px;
font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px;
text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; word-spacing: 0px; display:
inline ! important; float: none; background-color:
rgb(255, 255, 255);">org.opensaml.ws.security.SecurityPolicyException:
Client certificate authentication failed for context
presenter entity ID</span></big></big><small>),
indicating that the client cert doesn't much the policy
rule.<br>
<br>
</small></font></big><font face="Helvetica, Arial, sans-serif">After
turn on the debugger for OpenSAML and carefully examining the
log messages, we discovered that the IdP is trying to use the
user's cert (of the user who is currently logged in), instead of
using the SP's cert to validate the logout message:<br>
</font><br>
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans', FreeSans,
sans-serif; font-size: 12px; font-style: normal; font-variant:
normal; font-weight: normal; letter-spacing: normal;
line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;
display: inline !important; float: none; background-color:
rgb(255, 255, 255);">10:01:36.125 - ERROR
[org.opensaml.ws.security.provider.ClientCertAuthRule:157] -
Authentication via client certificate failed for context
presenter entity ID samlsp2.identia.net</span><br style="margin:
0px; padding: 0px; color: rgb(33, 49, 64); font-family: 'Open
Sans', 'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;
background-color: rgb(255, 255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans', FreeSans,
sans-serif; font-size: 12px; font-style: normal; font-variant:
normal; font-weight: normal; letter-spacing: normal;
line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;
display: inline !important; float: none; background-color:
rgb(255, 255, 255);">10:01:36.127 - WARN
[edu.internet2.middleware.shibboleth.idp.profile.saml2.SLOProfileHandler:543]
- Message did not meet security requirements<br>
<big><br>
There is no way the SP is able to obtain the client's cert.
The question is, is there anyway to define the OpenSAML
security policy rule to use SP's cert instead of the user cert
to process the global logout message? Where is the
configuration file that defines the OpenSAML's
ClientCertAuthRule or how to define the rule declaratively?
The complete logfile is attached below.<br>
<br>
Thanks a lot for your help!<br>
<br>
Nick<br>
------------------ IdP Log ---------------------<br>
</big></span><br>
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans', FreeSans,
sans-serif; font-size: 12px; font-style: normal; font-variant:
normal; font-weight: normal; letter-spacing: normal;
line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;
display: inline !important; float: none; background-color:
rgb(255, 255, 255);"><big> <span style="color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; display: inline !important;
float: none; background-color: rgb(255, 255, 255);">10:01:36.087
- INFO [Shibboleth-Access:73] -
20141218T150136Z|127.0.0.1|samlidp.identia.net:4443|/profile/SAML2/POST/SLO|</span><br
style="margin: 0px; padding: 0px; color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">10:01:36.090 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:86]
- shibboleth.HandlerManager: Looking up profile handler for
request path: /SAML2/POST/SLO</span><br style="margin: 0px;
padding: 0px; color: rgb(33, 49, 64); font-family: 'Open
Sans', 'Helvetica Neue', Helvetica, arial, 'Liberation
Sans', FreeSans, sans-serif; font-size: 12px; font-style:
normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 22px; orphans: auto;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">10:01:36.090 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:97]
- shibboleth.HandlerManager: Located profile handler of the
following type for the request path:
edu.internet2.middleware.shibboleth.idp.profile.saml2.SLOProfileHandler</span><br
style="margin: 0px; padding: 0px; color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">10:01:36.090 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.saml2.SLOProfileHandler:154]
- Processing incoming SAML LogoutRequest</span><br
style="margin: 0px; padding: 0px; color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">10:01:36.090 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.saml2.SLOProfileHandler:502]
- Decoding message with decoder binding
'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST'</span><br
style="margin: 0px; padding: 0px; color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">10:01:36.094 - DEBUG
[edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:128]
- Looking up relying party configuration for
samlsp2.identia.net</span><br style="margin: 0px; padding:
0px; color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; background-color: rgb(255, 255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">10:01:36.094 - DEBUG
[edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:130]
- Custom relying party configuration found for
samlsp2.identia.net</span><br style="margin: 0px; padding:
0px; color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; background-color: rgb(255, 255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">10:01:36.099 - DEBUG
[org.opensaml.ws.security.provider.ClientCertAuthRule:117] -
Attempting to authenticate inbound connection that presented
the certificate:</span><br style="margin: 0px; padding: 0px;
color: rgb(33, 49, 64); font-family: 'Open Sans', 'Helvetica
Neue', Helvetica, arial, 'Liberation Sans', FreeSans,
sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; background-color: rgb(255, 255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">10:01:36.099 - DEBUG
[org.opensaml.ws.security.provider.ClientCertAuthRule:118] -
MIICsDCCAhmgAwIBAgIJAJ7zLcNStflOMA0GCSqGSIb3DQEBBQUAMFMxCzAJBgNVBAYTAlVTMRgw</span><br
style="margin: 0px; padding: 0px; color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">... (this is the
user's certificate)</span><span style="color: rgb(33, 49,
64); font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; display: inline !important;
float: none; background-color: rgb(255, 255, 255);"></span><br
style="margin: 0px; padding: 0px; color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">u7f6xuGkoHo=</span><br
style="margin: 0px; padding: 0px; color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">10:01:36.100 - DEBUG
[org.opensaml.ws.security.provider.ClientCertAuthRule:150] -
Attempting client certificate authentication using context
presenter entity ID: samlsp2.identia.net</span><br
style="margin: 0px; padding: 0px; color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">....</span><br
style="margin: 0px; padding: 0px; color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">10:01:36.123 - DEBUG
[edu.internet2.middleware.shibboleth.common.security.MetadataPKIXValidationInformationResolver:531]
- Attempting to retrieve PKIX validation info from cache
using index:
[samlsp2.identia.net,{urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor,urn:oasis:names:tc:SAML:2.0:protocol,SIGNING]</span><br
style="margin: 0px; padding: 0px; color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">....</span><span
style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);"></span><br
style="margin: 0px; padding: 0px; color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">10:01:36.124 - DEBUG
[edu.internet2.middleware.shibboleth.common.security.MetadataPKIXValidationInformationResolver:634]
- Added new PKIX info to entity cache with key:
[samlsp2.identia.net,{urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor,urn:oasis:names:tc:SAML:2.0:protocol,SIGNING]</span><br
style="margin: 0px; padding: 0px; color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">10:01:36.125 - DEBUG
[edu.internet2.middleware.shibboleth.common.security.MetadataPKIXValidationInformationResolver:637]
- Write lock over cache released</span><br style="margin:
0px; padding: 0px; color: rgb(33, 49, 64); font-family:
'Open Sans', 'Helvetica Neue', Helvetica, arial, 'Liberation
Sans', FreeSans, sans-serif; font-size: 12px; font-style:
normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 22px; orphans: auto;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">10:01:36.125 - ERROR
[org.opensaml.ws.security.provider.ClientCertAuthRule:157] -
Authentication via client certificate failed for context
presenter entity ID samlsp2.identia.net</span><br
style="margin: 0px; padding: 0px; color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">10:01:36.127 - WARN
[edu.internet2.middleware.shibboleth.idp.profile.saml2.SLOProfileHandler:543]
- Message did not meet security requirements</span><br
style="margin: 0px; padding: 0px; color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">org.opensaml.ws.security.SecurityPolicyException:
Client certificate authentication failed for context
presenter entity ID</span><br style="margin: 0px; padding:
0px; color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; background-color: rgb(255, 255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">at
org.opensaml.ws.security.provider.ClientCertAuthRule.doEvaluate(ClientCertAuthRule.java:159)
~[openws-1.5.1.jar:na]</span><br style="margin: 0px;
padding: 0px; color: rgb(33, 49, 64); font-family: 'Open
Sans', 'Helvetica Neue', Helvetica, arial, 'Liberation
Sans', FreeSans, sans-serif; font-size: 12px; font-style:
normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 22px; orphans: auto;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">at
org.opensaml.ws.security.provider.ClientCertAuthRule.evaluate(ClientCertAuthRule.java:123)
~[openws-1.5.1.jar:na]</span><br style="margin: 0px;
padding: 0px; color: rgb(33, 49, 64); font-family: 'Open
Sans', 'Helvetica Neue', Helvetica, arial, 'Liberation
Sans', FreeSans, sans-serif; font-size: 12px; font-style:
normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 22px; orphans: auto;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">at
org.opensaml.ws.security.provider.BasicSecurityPolicy.evaluate(BasicSecurityPolicy.java:51)
~[openws-1.5.1.jar:na]</span><br style="margin: 0px;
padding: 0px; color: rgb(33, 49, 64); font-family: 'Open
Sans', 'Helvetica Neue', Helvetica, arial, 'Liberation
Sans', FreeSans, sans-serif; font-size: 12px; font-style:
normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 22px; orphans: auto;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">at
org.opensaml.ws.message.decoder.BaseMessageDecoder.processSecurityPolicy(BaseMessageDecoder.java:132)
~[openws-1.5.1.jar:na]</span><br style="margin: 0px;
padding: 0px; color: rgb(33, 49, 64); font-family: 'Open
Sans', 'Helvetica Neue', Helvetica, arial, 'Liberation
Sans', FreeSans, sans-serif; font-size: 12px; font-style:
normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 22px; orphans: auto;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">at
org.opensaml.ws.message.decoder.BaseMessageDecoder.decode(BaseMessageDecoder.java:83)
~[openws-1.5.1.jar:na]</span><br style="margin: 0px;
padding: 0px; color: rgb(33, 49, 64); font-family: 'Open
Sans', 'Helvetica Neue', Helvetica, arial, 'Liberation
Sans', FreeSans, sans-serif; font-size: 12px; font-style:
normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 22px; orphans: auto;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">at
org.opensaml.saml2.binding.decoding.BaseSAML2MessageDecoder.decode(BaseSAML2MessageDecoder.java:70)
~[opensaml-2.6.1.jar:na]</span><br style="margin: 0px;
padding: 0px; color: rgb(33, 49, 64); font-family: 'Open
Sans', 'Helvetica Neue', Helvetica, arial, 'Liberation
Sans', FreeSans, sans-serif; font-size: 12px; font-style:
normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 22px; orphans: auto;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">at
edu.internet2.middleware.shibboleth.idp.profile.saml2.SLOProfileHandler.decodeRequest(SLOProfileHandler.java:515)
[shibboleth-identityprovider-2.4.0.jar:na]</span><br
style="margin: 0px; padding: 0px; color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">at
edu.internet2.middleware.shibboleth.idp.profile.saml2.SLOProfileHandler.processLogoutRequest(SLOProfileHandler.java:240)
[shibboleth-identityprovider-2.4.0.jar:na]</span><br
style="margin: 0px; padding: 0px; color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">at
edu.internet2.middleware.shibboleth.idp.profile.saml2.SLOProfileHandler.processRequest(SLOProfileHandler.java:155)
[shibboleth-identityprovider-2.4.0.jar:na]</span><br
style="margin: 0px; padding: 0px; color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">at
edu.internet2.middleware.shibboleth.idp.profile.saml2.SLOProfileHandler.processRequest(SLOProfileHandler.java:1)
[shibboleth-identityprovider-2.4.0.jar:na]</span><br
style="margin: 0px; padding: 0px; color: rgb(33, 49, 64);
font-family: 'Open Sans', 'Helvetica Neue', Helvetica,
arial, 'Liberation Sans', FreeSans, sans-serif; font-size:
12px; font-style: normal; font-variant: normal; font-weight:
normal; letter-spacing: normal; line-height: 22px; orphans:
auto; text-align: start; text-indent: 0px; text-transform:
none; white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">at
edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet.service(ProfileRequestDispatcherServlet.java:83)
[shibboleth-common-1.4.0.jar:na]</span><br style="margin:
0px; padding: 0px; color: rgb(33, 49, 64); font-family:
'Open Sans', 'Helvetica Neue', Helvetica, arial, 'Liberation
Sans', FreeSans, sans-serif; font-size: 12px; font-style:
normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 22px; orphans: auto;
text-align: start; text-indent: 0px; text-transform: none;
white-space: normal; widows: auto; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">at
javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
[servlet-api.jar:na]</span><br style="margin: 0px; padding:
0px; color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; background-color: rgb(255, 255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)
[catalina.jar:7.0.54]</span><br style="margin: 0px; padding:
0px; color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; background-color: rgb(255, 255, 255);">
<span style="color: rgb(33, 49, 64); font-family: 'Open Sans',
'Helvetica Neue', Helvetica, arial, 'Liberation Sans',
FreeSans, sans-serif; font-size: 12px; font-style: normal;
font-variant: normal; font-weight: normal; letter-spacing:
normal; line-height: 22px; orphans: auto; text-align: start;
text-indent: 0px; text-transform: none; white-space: normal;
widows: auto; word-spacing: 0px; -webkit-text-stroke-width:
0px; display: inline !important; float: none;
background-color: rgb(255, 255, 255);">...</span><br>
</big></span>
<p><big> </big></p>
</div>
</body>
</html>