still a few issues with login script to shibboleth identity server

Paul Hethmon paul.hethmon at clareitysecurity.com
Tue Oct 9 11:36:39 EDT 2012


If you're asking questions like this, then you need to read the SAML spec
documents. Questions about the spec itself should be directed to the OASIS
mailing lists.

Paul

On 10/9/12 11:31 AM, "Joseph Norris" <jozefn at sonic.net> wrote:

>Oh here is the xml that I am sending:
>
><?xml version="1.0" encoding="UTF-8"?>
><samlp:AuthnRequest
>xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
>AssertionConsumerServiceURL="http://communityservers.com/cs/docs/cs_test_l
>ogin"  Destination="https://id.wested.org/idp/profile/SAML2/Redirect/SSO"
> ID="_1791a18f4ca749cd82ec900c51442d95"
>IssueInstant="2012-10-04T20:12:56Z"
>ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
>Version="2.0"><saml:Issuer
>xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">http://www.communityser
>vers.com/metadata/metadata.xml</saml:Issuer><samlp:NameIDPolicy
>AllowCreate="1"/>
></samlp:AuthnRequest>
>
>An additional question about the above:
>
>Should the ID="   be a different id each time I post to the identity
>server?
>
>Thanks to all
>
>
>On 10/09/2012 08:00 AM, Joseph Norris wrote:
>> Hello to all,
>>
>> Thanks for all the help with this issue - I have learned a great deal.
>>
>> Now I am able to send my request to the identity server however......
>>
>> The identity server is returning an error:
>>
>> org.opensaml.ws.message.decoder.MessageDecodingException: Unable to
>> Base64 decode incoming message
>>
>> I am using perl with:  use MIME::Base64 qw(encode_base64url);
>>
>> Is this not encoding my xml request correctly? Is there a different perl
>> module that I should be using?
>> Should the identity server be configured a different way to handle this?
>>
>> Thanks
>>
>
>-- 
>#Joseph Norris (Linux/Apache/Mysql/Perl - what else is there?)
>print @c=map chr $_+100,(6,17,15,16,-68,-3,10,11,
>16,4,1, 14,-68,12,1,14,8, -68,4,-3,-1,7,1,14,-68,
>-26,11,15,1,12, 4,-68,-22,11,14,14,5,15,-90);
>
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net



More information about the users mailing list