Initial Setup -- Cannot Get SP and IDP Talking

[Sam Agnew]

On Nov 30, 2013, at 9:44 PM, Cantor, Scott wrote:

You'll have to compare the credentials on the IdP to the message in the
log and to what's in the metadata you gave the SP.


In this context, what do we mean by credentials?

The signing keypair. The public key certificate principally, which is in
idp.crt.

To be honest, I would probably look into registering your SP with
testshib.org<http://testshib.org> and running some tests with that. To rule out some kind of
really low level problem with your system.

My team looked with joy at testshib until we realised the server needs to be on the internet to use it. Unfortunately, our security policies and network design don't permit any box we are building to be on DMZ or internet. Therefore we have to fix this some other way.

Again, this is a test setup and the SP and IDP are both mine. If there's anything I can do with both to ensure they are happy with each other I can at this point change anything anywhere. The point here is that we know how to build a working setup because this is a service we are soon offering.

I will be looking into the suggestions from your post. If I have success I will definitely post the solution to the list.

Thanks!

Sam



-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>


--
Sam Agnew
System Administrator
IT Department
Weill Cornell Medical College in Qatar



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131201/8a600f16/attachment.html