opensaml::RetryableProfileException

[Cantor, Scott]

On 7/25/12 12:29 PM, "Jose Reyes" <jreyes at egmail.com> wrote:

>So I got my metadata straightened out but now I am getting this error.
>
>opensaml::RetryableProfileException at (https://sp.myhost.com/secure/)
>
>Unable to obtain session to export to request.

Unfortunately I know of no way you could get that error. It's a sanity
check in the code, nothing more. The exporting of headers is something
that happens internally and for the session to exist in the hooks that
check for authentication but not a millisecond later is a near
impossibility. I say "near" only because of course anything's possible.
But it's as near impossible as it gets.

The closest guess would be that shibd crashed and restarted in the instant
between the two steps. I can't think of any other way for it to happen.

>Looking around the web it looks like it has something to do with the
>entityID not being set or set incorrectly but I have that defined in my
>SessionIniator element to be the same as provided in the metadata file
>from the IdP I am trying to connect to.

I don't know what you're referring to, but if you have a reference to that
error *anywhere*, I'd be happy to look at it. It certainly has nothing to
do with anything like that.

-- Scott