Fwd: Re: Decoded message was not a SAML 1.x Response

Tue Apr 24 03:34:43 BST 2012

>>I have no idea what you're doing or what its doing, but that won't work.
I
>>would start by determining what SAML version is being used in the request
>>to the IdP based on logs, and then see if the problem is the IdP mixing
>>the protocols or something like that.

the SAML version used for that request is SAML1 as I have
AssertionConsumerServiceIndex="3" for SAML1 while
AssertionConsumerServiceIndex="1" for SAML 2. does the binding protocol in
the response should match AssertionConsumerServiceIndex in the
AuthnRequest. for this case SAML:2.0:protocol in the response should be
SAML:1.0:protocol b/c  AssertionConsumerServiceIndex=3 in the request?

------------ shibd.log---------------------
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
AssertionConsumerServiceIndex="3"
Destination="https://idp/oala/sso"
ID="_5124840678baec7acf44e329acac5d9f"
IssueInstant="2012-04-19T18:03:49Z" Version="2.0">
<saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">
https://sp.xx/shibboleth
</ds:Signature><samlp:Status><samlp:StatusCode Value="urn:oasis:names:tc:
SAML:2.0:status:Success"/></samlp:Status><saml:EncryptedAssertion
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><EncryptedData xmlns="
http://www.w3.org/2001/04/xmlenc#" Type="
http://www.w3.org/2001/04/xmlenc#Element">
<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
<KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
<EncryptedKey xmlns="http://www.w3.org/2001/04/xmlenc#">
<EncryptionMethod Algorithm="
http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p">
<DigestMethod xmlns="http://www.w3.org/2000/09/xmldsig#" Algorithm="
http://www.w3.org/2000/09/xmldsig#sha1"/>
</EncryptionMethod>
<KeyInfo xmlns="http://www.w3.org/2000/09/xmldsig#">
<X509Data>
<X509Certificate></X509Certificate>
</X509Data>
</KeyInfo>
<CipherData>

</CipherData>
</EncryptedData></saml:EncryptedAssertion></samlp:Response>

2012-04-19 14:03:52 DEBUG XMLTooling.XMLObject.Builder [88]: located
XMLObjectBuilder for element name: samlp:Response
2012-04-19 14:03:52 DEBUG XMLTooling.XMLObject [88]: unmarshalling DOM
element (samlp:Response)
2012-04-19 14:03:52 DEBUG XMLTooling.XMLObject [88]: unmarshalling
attributes for DOM element (samlp:Response)
2012-04-19 14:03:52 DEBUG XMLTooling.XMLObject [88]: processing generic
attribute
2012-04-19 14:03:52 DEBUG XMLTooling.XMLObject [88]: processing generic
attribute
2012-04-19 14:03:52 DEBUG XMLTooling.XMLObject [88]: processing generic
attribute
2012-04-19 14:03:52 DEBUG XMLTooling.XMLObject [88]: processing generic
attribute
2012-04-19 14:03:52 DEBUG XMLTooling.XMLObject [88]: processing generic
attribute

---------- Forwarded message ----------
From: <postmaster at lists1.internet2.edu>
Date: Fri, Apr 20, 2012 at 12:25 PM
Subject: RE: Re: Decoded message was not a SAML 1.x Response
To: hanaa <hanan.ebraheem at gmail.com>

The Shibboleth Users list has been moved to users at shibboleth.net.
Subscription instructions may be found on the Shibboleth web site.

========== Original Message Headers Follow ==========

>From hanan.ebraheem at gmail.com  Fri Apr 20 15:24:53 2012
Return-Path: <hanan.ebraheem at gmail.com>
X-Spam-ASN: AS237 207.72.0.0/14
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on sa1.internet2.edu
X-Spam-Level:
X-Spam-Status: No, score=-1.6 required=7.0 tests=AWL,RCVD_IN_DNSWL_MED,
       SPF_NEUTRAL,URI_HEX autolearn=ham version=3.2.5
X-Original-To: shibboleth-users at lists1.internet2.edu
Delivered-To: shibboleth-users at lists1.internet2.edu
Received: from sfpop-ironport03.merit.edu (sfpop-ironport03.merit.edu
[207.75.116.62])
        by lists1.internet2.edu (Postfix) with ESMTP id 82DDA1A0057
       for <shibboleth-users at lists1.internet2.edu>; Fri, 20 Apr 2012
15:24:53 -0400 (EDT)
X-Merit-ExtLoop1: 1
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result:
AvkBAGy3kU/Yi+wamWdsb2JhbABEDp9mgyyOGCIBAQEBAQgLCwcUJ4IJAQEEAToUDhIbCxguIw4VEQ4oBIdfAQMGBQuoSYM2hGYKGScXTYh8kGcEiGOCHYMPiHuRXFeBNgYR
X-IronPort-AV: E=Sophos;i="4.75,454,1330923600";
  d="scan'208";a="286651218"
Received: from sam.nabble.com ([216.139.236.26])
  by sfpop-ironport03.merit.edu with ESMTP/TLS/AES256-SHA; 20 Apr 2012
15:24:52 -0400
Received: from jim.nabble.com ([192.168.236.80])
       by sam.nabble.com with esmtp (Exim 4.72)
       (envelope-from <hanan.ebraheem at gmail.com>)
        id 1SLJRs-000250-0f
       for shibboleth-users at internet2.edu; Fri, 20 Apr 2012 12:24:52 -0700
Date: Fri, 20 Apr 2012 12:24:52 -0700 (PDT)
From: hanaa <hanan.ebraheem at gmail.com>
To: shibboleth-users at internet2.edu
Message-ID: <1334949892008-7485582.post at n2.nabble.com>
In-Reply-To: <1334942374922-7485203.post at n2.nabble.com>
References: <CAGy7Xg0z_H=
KNN6zh5sFf8kmKnUZ_2XcORMAb4xOPZK+kgRy1g at mail.gmail.com> <
CBB70000.1FEA5%cantor.2 at osu.edu> <1334942374922-7485203.post at n2.nabble.com>
Subject: Re: Decoded message was not a SAML 1.x Response
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

-- 
hhhh
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120423/c72f5f13/attachment.html 