shibtest and active directory: CREDENTIALS NOT RECOGNIZED

[Mauro Minella]

Hi,
I setup Shibboleth idp 2.3.5 on a brand new virtual machine with Windows Server 2008 R2, which is a domain controller.
Internal domain name: SHIBIDP.LOCAL
The same machine is reachable from the extern through SHIBIDP.EDUTEAMIT.COM I configured Shibboleth IDP following the guide on https://wiki.shibboleth.net/confluence/display/SHIB2/IdPQuickInstall,  

Dns name: shibidp.eduteamit.com
Active directory domain: shibdomain.local
Scope: shibdomain.local


I generated the certificate with Java and now I can open the following links correctly and with no errors:
- https://shibidp.eduteamit.com
- https://shibidp.eduteamit.com/idp/status
- https://shibidp.eduteamit.com/idp/profile/Metadata/SAML

So I tried to test it via https://www.testshib.org/index.html: I registered my metadata file, I configured /opt/shibboleth-idp/conf/relying-party.xml as described on https://www.testshib.org/configure.html, then I opened https://sp.testshib.org/ and entered https://shibidp.eduteamit.com/idp/shibboleth and -GREAT!- I got the Shibboleth authentication web page.

The problem is that whatever username/password I put, I get the error CREDENTIALS NOT RECOGNIZED.


Any hints would be greatly appreciated.

Thank you in advance,

Mauro