Shibboleth + Jasig CAS

[Kevin P. Foote]

On Mon, 2 Dec 2013, Gianluigi Ruggeri wrote:

> I have re configurated another machine in the same way about shibboleth.
> I uploaded the metadata file in testShib and I applyed these changes:
>
> "To work with TestShib, you'll need to make a couple minor
> modifications to your configuration. We only really need to change
> relying-party.xml, located at
> /opt/shibboleth-idp/conf/relying-party.xml.
>
> Uncomment the URLMD <MetadataProvider>. Change the metadataURL
> tohttp://www.testshib.org/metadata/testshib-providers.xml and the
> backingFile to something liketestshib.xml.
>
> Comment out the <MetadataFilter> elements inside the URLMD <MetadataProvider>.
> "
>
> when I try to test my shibboleth iDP I see the old error message:
>
> 2013-12-02 09:02:34 DEBUG OpenSAML.MessageEncoder.SAML2Redirect
> [1048]: message encoded, sending redirect to client
> 2013-12-02 09:02:45 DEBUG Shibboleth.Listener [1046]: dispatching
> message (default/TestShib::run::SAML2SI)
> 2013-12-02 09:02:45 WARN Shibboleth.SessionInitiator.SAML2 [1046]:
> unable to locate metadata for provider
> (https://vincenteauth2.resiltech.net:8443/idp/shibboleth)
>
> Why?? The configuration is the same!!
> Is possibile to check my metadata file in TestShibb?

The last metadata file recorded for you is listing the following
entityId

file: idp-metadata_shibTest.xml

entityID="https://vincenteauth2.resiltech.net/idp/shibboleth

You need to use this entityId to choose the correct IdP when accessing
the protected resource at the TestShib SP.

You should also be able to locate this error by using the instructions on
the TestShib site that indicates to look at the last X number of log
entries.

------
thanks
  kevin.foote