Setting up ECP in shibboleth SP

[Anand Somani]

I rolled back to the basic xml (as per the instructions on wiki for simple
redirect based), tried the curl and I get different results on curl calls
from ecp.sh

   1. sometimes it is sessioninitiator not configured
   2. once I got => <p>The document has moved <a href="
   https://obelix.obelix.com/idp/profile/SAML2/Redirect/SSO?SAMLRequest=hZJfT4MwFMW%2FCun7aAHdoBkkuD24ZLploA%2B%2BGP5pUlpsbfo%2FPayMXW%2BzKcm7bnn3PNL51i0suNpbxu1g7ce0Dr7Virkx4eY9EZxXaBArooWkNuKZ%2Bndmvsu453RVldaEidFBGOFVgutsG%2FBZGDeRQUPu3VMGms75JS2jLFoxkJXFqXbdbpDV4GlWSPKUkuwjYuo6cHdp9tNlhNnOawjVHEw%2FrXRJUixd09HpVsq6o4Ou7wICafxHdTCQDWYZxvirJYxeWbMn0LA6hAqFgRVEAbBFQvLWRRFwXAJgwyxh5VCWygbE5953sTzJ76Xe1PuX3PfeyLO9lT5RqhaqNfLfMpRhPw2z7eTsdIjGDzWGQQkmR8o82OwOeN%2B2bb4hk2Sf9DiD9o5PUsaYzt%2BP1ivllstRfXppFLqj4WBwkJMPEKTceTv30i%2BAA%3D%3D&amp;RelayState=ss%3Amem%3Af0dcd9b7dea627805adfd884ac921907
   ">here</a>.</p>
   3. once this => <p>The document has moved <a href="
   https://obelix.obelix.com/idp/profile/Shibboleth/SSO?shire=https%3A%2F%2Fm0009708.lab.ppops.net%2FShibboleth.sso%2FSAML%2FPOST&amp;time=1324484723&amp;target=ss%3Amem%3A50f2e1f5580339837076ee9c00899ccf&amp;providerId=https%3A%2F%2Fm1234.lab.ppops.net%2Fshibboleth
   ">here</a>.</p>

Then I add the ECP="true", restart shibd and the first time I run curl
response is 2 (from above) and then if I curl again get a crash, cannot
find a core file, this is centos where should I look for core (ulimit is
unlimited for core file)?

Thanks
Anand


On Wed, Dec 21, 2011 at 7:30 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> Suggestions based on the config, I would start by undoing basically all of
> whatever it is you changed in the config, and keep it to the bare minimum.
> Your config is old style, that's not necessary. Use the standard 2.4
> layout, add ECP="true" to the <SSO> element, set your entityID, maybe the
> RequestMap if this isn't Apache, that's it.
>
> If it still crashes, and you're on Windows, I don't have any advice for
> getting a stack trace. Otherwise it's simple to get a core dump and load
> it into gdb.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20111221/b42530d2/attachment.html