New user issues (SP)

[Bryan Wooten]

Never mind. The generated xml failed to include the xmlns stuff in the SPConfig element....

-Bryan

From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Bryan Wooten
Sent: Wednesday, August 31, 2011 9:47 AM
To: users at shibboleth.net
Subject: New user issues (SP)

Following the instructions found here: http://www.testshib.org/testshib-two/configure.jsp

I get this error trying to start shibd:

Starting shibd: 2011-08-31 09:43:13 ERROR XMLTooling.ParserPool : error on line 12, column 51, message: no declaration found for element 'SPConfig'
2011-08-31 09:43:13 ERROR XMLTooling.ParserPool : error on line 12, column 51, message: attribute 'logger' is not declared for element 'SPConfig'
2011-08-31 09:43:13 ERROR XMLTooling.ParserPool : error on line 12, column 51, message: attribute 'clockSkew' is not declared for element 'SPConfig'
2011-08-31 09:43:13 ERROR XMLTooling.ParserPool : fatal error on line 57, column 121, message: prefix 'md' can not be resolved to namespace URI
2011-08-31 09:43:13 ERROR Shibboleth.Config : error while loading resource (/etc/shibboleth/shibboleth2.xml): XML error(s) during parsing, check log for specifics
2011-08-31 09:43:13 FATAL Shibboleth.Config : caught exception while loading configuration: XML error(s) during parsing, check log for specifics


I have checked my shibboleth2.xml for dingbats and I can't find any.

Any ideas? My xml is below.

Thanks,

Bryan

<!--

This is an example shibboleth2.xml generated for you by TestShib Two.  It's reduced and recommented
specifically for testing.  You don't need to change anything, but you may want to explore the file
to learn about how your SP works.  Uncomment attributes in your attribute-map.xml file to test them.

If you want to test advanced functionality, start from the distribution shibboleth2.xml and add the
MetadataProvider, TestShib credentials, the right entityID, and a SessionInitiator.  More information:

https://spaces.internet2.edu/display/SHIB2/NativeSPConfiguration
-->
<SPConfig logger="syslog.logger" clockSkew="1800">
<!--
You might want to increase the top-level log sensitivity in these files.
-->
<OutOfProcess logger="shibd.logger"/>
<InProcess logger="native.logger"/>

<!--
Settings for session storage and internal communication.
-->
<UnixListener address="shibd.sock"/>
<StorageService type="Memory" id="mem" cleanupInterval="900"/>
<SessionCache type="StorageService" StorageService="mem" cacheTimeout="3600" inprocTimeout="900" cleanupInterval="900"/>
<ReplayCache StorageService="mem"/>

<!--
The RequestMap defines portions of the webspace to protect; test-shib.acs.utah.edu/secure here.
-->

<RequestMapper type="Native">

<RequestMap applicationId="default">

<Host name="test-shib.acs.utah.edu">
<Path name="secure" authType="shibboleth" requireSession="true"/>
</Host>
</RequestMap>
</RequestMapper>

<!--
The entityID is the name TestShib made for your SP.
-->

<ApplicationDefaults id="default" policyId="default" REMOTE_USER="eppn" entityID="https://test-shib.acs.utah.edu/shibboleth-sp" homeURL="https://test-shib.acs.utah.edu/index.html">

<Sessions lifetime="28800" timeout="3600" checkAddress="false" handlerURL="/Shibboleth.sso" handlerSSL="false">

<!--

            SessionInitiators can request login many different ways.  This example sends users directly to the
            TestShib IdP.  If you want to use a different IdP that has joined TestShib, just change this entityID.

-->
<SessionInitiator type="SAML2" Location="/TestShib" isDefault="true" defaultACSIndex="1" id="TestShib" entityID="https://idp.testshib.org/idp/shibboleth" template="bindingTemplate.html"/>
<!-- How and where the SP listens. -->
<md:AssertionConsumerService Location="/SAML2/POST" index="1" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"/>
<md:AssertionConsumerService Location="/SAML/POST" index="6" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"/>
<Handler type="MetadataGenerator" Location="/Metadata" signing="false"/>
<Handler type="Status" Location="/Status" acl="127.0.0.1"/>
<Handler type="Session" Location="/Session"/>
</Sessions>

<!--
Error pages to display to yourself if something goes horribly wrong.
-->
<Errors session="sessionError.html" metadata="metadataError.html" access="accessError.html" ssl="sslError.html" supportContact="root at localhost" logoLocation="/shibboleth-sp/logo.jpg" styleSheet="/shibboleth-sp/main.css"/>

<!--
Loads and trusts a metadata file that describes only the Testshib IdP and how to communicate with it.
-->
<MetadataProvider type="XML" uri="http://www.testshib.org/metadata/testshib-providers.xml" backingFilePath="testshib-two-idp-metadata.xml" reloadInterval="180000"/>

<!--
Attribute and trust options you shouldn't need to change.
-->
<TrustEngine type="ExplicitKey"/>
<AttributeExtractor type="XML" path="attribute-map.xml"/>
<AttributeResolver type="Query"/>
<AttributeFilter type="XML" path="attribute-policy.xml"/>

<!--
Your SP generated these credentials.  They're used to talk to IdP's.
-->
<CredentialResolver type="File" key="sp-key.pem" certificate="sp-cert.pem"/>
</ApplicationDefaults>

<!--
Security policies you shouldn't change unless you know what you're doing.
-->

<SecurityPolicies>

<Policy id="default" validate="false">
<Rule type="MessageFlow" checkReplay="true" expires="60"/>
<Rule type="ClientCertAuth" errorFatal="true"/>
<Rule type="XMLSigning" errorFatal="true"/>
</Policy>
</SecurityPolicies>
</SPConfig>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20110831/0e73b8f9/attachment.html