SP Authentication for TestShib

[Ordona, Kenneth C]

Hi all,

I'm currently setting up an SP that will work with testshib two and I run into the following error message after I attempt to log in to https://localhost/secure: Error Message: No peer endpoint available to which to send SAML response

I looked into shibd.log and I found this debug message which I believe is the source of the problem:


<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceURL="https://www.sp.machine/Shibboleth.sso/SAML2/POST" Destination="https://idp.testshib.org/idp/profile/SAML2/Redirect/SSO" ID="_bd7e67d505e8dd4841101e43dac772d1" IssueInstant="2012-07-27T18:21:16Z" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://sp.pnl.gov/shibboleth-sp</saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>

The problem that I see here is the fact that I see www.sp.machine, which was my old host name. I changed it to sp.pnl.gov, which you can see at the bottom of the message. However, the fact that this still has www.sp.machine is something that worrys me. Does anyone know how to change it so that the AssertionConsumerServiceURL goes to https://sp.pnl.gov instead?

Thank you,
Ken Ordona