Centralized Discovery Service - Issue

[Rod Widdowson]

Also, and as I said two days ago when you asked the same question:

- That endpoint looks very suspicious.  
- If you SPs metadata is in the IdP metadata check the DiscoveryResponse
- Why do you need an EDS


> -----Original Message-----
> From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Badri
> Sent: 10 May 2012 12:40
> To: Shib Users
> Subject: Centralized Discovery Service - Issue
> 
> Hi Shibboleth users community,
> 
> We have configured the centralized DS and facing the error while redirecting to the DS page.
> 
> DS - Log:
> 03:47:35.973 - INFO [edu.internet2.middleware.shibboleth.wayf.WayfService:272] - Handling DS request.
> 
> 03:47:35.982 - DEBUG [edu.internet2.middleware.shibboleth.wayf.DiscoveryServiceHandler:591] -
> Processing Idp Lookup for : https://domain.com/Shibboleth.sso/Metadata
> 
> 03:47:35.983 - ERROR [edu.internet2.middleware.shibboleth.wayf.DiscoveryServiceHandler:430] - Could
> not locate SP https://domain.com/Shibboleth.sso/Metadata in metadata
> 
> 03:47:35.991 - ERROR [edu.internet2.middleware.shibboleth.wayf.DiscoveryServiceHandler:325] - Error
> processing DS request:
> edu.internet2.middleware.shibboleth.wayf.WayfException: Couldn't find endpoint
> https://sub.domain.com/Shibboleth.sso/Login in metadata
>         at
> edu.internet2.middleware.shibboleth.wayf.DiscoveryServiceHandler.setupReturnAddress(DiscoveryServiceHa
> ndler.java:490)
>         at
> edu.internet2.middleware.shibboleth.wayf.DiscoveryServiceHandler.handleLookup(DiscoveryServiceHandler.
> java:599)
>         at
> edu.internet2.middleware.shibboleth.wayf.DiscoveryServiceHandler.doGet(DiscoveryServiceHandler.java:32
> 2)
>         at edu.internet2.middleware.shibboleth.wayf.WayfService.doGet(WayfService.java:280)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:621)
>         at javax.servlet.http.HttpServlet.service(HttpServlet.java:722)
>         at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)
>         at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
>         at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:224)
>         at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:169)
>         at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:472)
>         at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:168)
>         at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:98)
>         at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:928)
>         at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
>         at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:407)
>         at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:987)
>         at
> org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:539)
>         at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:298)
>         at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110)
>         at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603)
>         at java.lang.Thread.run(Thread.java:679)
> 
> 03:47:35.992 - DEBUG [edu.internet2.middleware.shibboleth.wayf.DiscoveryServiceHandler:907] -
> Displaying WAYF error page.
> 
> (some important pieces of the configuration) wayfconfig.xml
> ______________________________________________________________________________________________________
> _____________________________________________
> 
> <MetadataProvider displayName="domainidp" identifier="domainidp" url="file:///opt/shibboleth-
> ds/metadata/idp-metadata.xml"/>
> ______________________________________________________________________________________________________
> _____________________________________________
> 
> <MetadataProvider displayName="WhiteListed Metadata" identifier="White"
> type="edu.internet2.middleware.shibboleth.metadata.provider.XMLMetadata" url="file:///opt/shibboleth-
> ds/metadata/idp-metadata.xml">
>         <Filter identifier="White"
> type="edu.internet2.middleware.shibboleth.wayf.plugins.provider.ListFilter" excludeEntries="false">
>         <EntityId>https://idp.domain.com/idp/shibboleth</EntityId>
>         </Filter>
> </MetadataProvider>
> 
> ______________________________________________________________________________________________________
> _____________________________________________
> 
> Shibboleth2.xml
> 
>             <SSO entityID="https://idp.domain.com/idp/shibboleth"
>                  discoveryProtocol="SAMLDS" discoveryURL="https://idp.domain.com/discovery/DS">
>               SAML2 SAML1
>             </SSO>
> 
> ______________________________________________________________________________________________________
> _____________________________________________
> 
> 
> Any suggestions or directing us to the right way of fixing this would be much appreciated.
> 
> - Badri