Yet another Idp error after SP upgrade

[Mike Flynn]

OK.  I copyied the config and it's associated files from the old server to the new.  I made changes to my old config file that were recommended by the Wiki (where appropriate) for the current version.  I got rid of some unused session initiators.  Is my old config for the previous version still backwards compatible with the current version?  Would you recommend that I use that config as is until I can isolate what is causing these issues? 


________________________________
 From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Users <users at shibboleth.net> 
Sent: Sunday, August 11, 2013 3:35 PM
Subject: Re: Yet another Idp error after SP upgrade
 

On 8/11/13 5:01 PM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>SAML response contained an error.
>Error from identity provider:
>
>Status: urn:oasis:names:tc:SAML:2.0:status:Requester
>Message: Invalid signature
>
>This is post upgrade - no change to their metadata (or mine - at least
>intentionally).

That's kind of the overall point. You've changed the configuration you're
using, that's very clear from all the errors. You can't do that if you
don't change the metadata ahead of time to reflect whatever changes are
being made, and that includes eliminating stale content or metadata that
people are holding on to.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130811/2d880435/attachment.html