Install/Configuration/Run Errors

[Johnson, Roger [BSD] - HSD]

I think my metadata is messed up.  I'm getting a new error:
Error Message: No peer endpoint available to which to send SAML response

Roger Johnson
University of Chicago


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
On Behalf Of Cantor, Scott
Sent: Wednesday, January 18, 2012 8:55 PM
To: Shib Users
Subject: RE: Install/Configuration/Run Errors

> >From Native_Warn.log:
> 2012-01-18 18:26:03 ERROR Shibboleth.ISAPI [2764]
isapi_shib_extension:
> Error reading request body from browser (2746).
> 2012-01-18 18:26:06 ERROR Shibboleth.Listener [2764]
> isapi_shib_extension: remoted message returned an error: Invalid HTTP 
> method (GET).
> 2012-01-18 18:26:06 ERROR Shibboleth.ISAPI [2764]
isapi_shib_extension:
> Invalid HTTP method (GET).

The latter two are from your reloading the /SAML2/POST page after IIS
returns the initial 500 error, and that turns into a GET, which is
invalid for that endpoint. That's why they're three seconds later.  The
only important error is the POST failing. Error 0x2746 is a connection
reset error which happens because the client has closed the connection
to the server by the time the extension asks for the data. That in turn
is because something has already read and swallowed the POST, leaving no
data for the SP to read, so when it asks for the data, it's gone, and
the client has already gone away.

All of that is very clear from the tracing we did. What isn't clear is
what's swallowing the POST, or why your IIS installs seem to be
consistently doing this.

Something we didn't try, though, was switching to 32-bit. You could try
doing an install with the 32-bit version. You would need to tell IIS to
use an App Pool that supports 32-bit .NET processes.

-- Scott

--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net

This email is intended only for the use of the individual or entity to
which it is addressed and may contain information that is privileged and
confidential. If the reader of this email message is not the intended
recipient, you are hereby notified that any dissemination, distribution,
or copying of this communication is prohibited. If you have received
this email in error, please notify the sender and destroy/delete all
copies of the transmittal. Thank you.


This email is intended only for the use of the individual or entity to
which it is addressed and may contain information that is privileged and
confidential. If the reader of this email message is not the intended
recipient, you are hereby notified that any dissemination, distribution,
or copying of this communication is prohibited. If you have received
this email in error, please notify the sender and destroy/delete all
copies of the transmittal. Thank you.


This email is intended only for the use of the individual or entity to which it is addressed and may contain information that is privileged and confidential. If the reader of this email message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is prohibited. If you have received this email in error, please notify the sender and destroy/delete all copies of the transmittal. Thank you.