Confused about using the discovery service

[Sukesh Nischal]

I'm trying to set up the discovery service for the first time, but I'm getting errors regarding metadata.

I downloaded and installed the discovery service software and modified my wayfconfig.xml with 2 IdPs as follows

  <MetadataProvider
                 displayName="Maryvale School"
                 identifier="maryvale"
                 url="https://maryvale.mydomian.com/ maryvale_metadata.xml"
                 backingFile="/etc/shibboleth-ds/maryvale_metadata.xml"
        />
        <MetadataProvider
                 displayName="Development IdP"
                 identifier="dev-idp"
                 url="http://metadata.development.lan/metadata.xml"
                 backingFile="/etc/shibboleth-ds/metadata.xml"
        />

I had  a working SP/IdP setup in which I modified the SessionInitiator on the SP to look like this:

<SessionInitiator type="Chaining" Location="/DS" isDefault="true" relayState="cookie">
                <SessionInitiator type="SAML2" acsIndex="1" template="bindingTemplate.html"/>
                <SessionInitiator type="SAMLDS" URL="https://wayf.development.lan/DS"/>
   </SessionInitiator>

I was expecting to get a drop down list where I could select which IdP to authenticate to, instead I get an error :


Inter-institutional Access System Failure

The inter-institutional access system experienced a technical failure.

Please email administrator's name<mailto:user at domain> and include the following error message:

Discovery Service failure at (/discovery/DS)

Couldn't find endpoint https://webservices.development.lan/Shibboleth.sso/DS in metadata

I find the documentation on the shibboleth site be sparse and difficult to follow,  some working config examples would have been helpful.

It's not clear to me what else I need to be doing in order to get this to work. I tried adding a /Ds endpoint in the metadata which didn't help.

Does anyone have any working examples or clearer guides on how to set this up?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120619/d5f9c51f/attachment.html