Shibd -check erorr

[Cantor, Scott]

On 7/23/12 6:48 PM, "Ordona, Kenneth C" <Kenneth.Ordona at pnnl.gov> wrote:

>I looked up more info on the problem and it states that I have to run the
>program as administrator(as then I would have r/w privileges). However,
>I'm running this on VPC and definitely have administrator rights. This is
>a local test install(SP on one VPC and IDP on another, trying to connect
>the two). I think it's also worth noting that I don't have a
>fedsigner.pem file in my etc/shibboleth/ directory. Is this the problem?

Well, indirectly. You can't uncomment out an example and expect it to
work. Metadata is a) not optional, and b) impossible to provide by default
out of the box. Only you can provide a source of metadata based on your
testing requirements.

> If so how do I circumvent it on a local test install?

You can't test an SP without an IdP and if you have an IdP, then you have
a system that must be described in metadata in order to test it. How you
supply that metadata, and how/whether you verify its integrity such as
with a signature is not something that a default install can handle
without your intervention. Most testers provide a local or remote metadata
file for testing and skip the security bits altogether.

-- Scott