Initial Setup -- Cannot Get SP and IDP Talking

Cantor, Scott cantor.2 at osu.edu
Wed Dec 4 10:15:18 EST 2013


On 12/4/13, 3:34 AM, "Sam Agnew" <saa2012 at qatar-med.cornell.edu> wrote:

>This was finally the missing link. I moved my old /etc/shibboleth and
>reinstalled which gave me new default config files. I then copied the
>sp-cert and sp-key from old install to match anything I might have
>configured on idp that pointed to the old sp. I then
> tracked down all occurrences of the old entityID
>(https://unixadmin.qatar-med.cornell.edu) and swapped with the new one
>(https://unixadmin.qatar-med.cornell.edu/shibboleth).
> I used the shibboleth2.xml generated by testshib as my starting point.

Can you elaborate on what the actual problem was?

I guess you're saying that the old config was in fact in a pre-2.5 state.
That shouldn't matter, but obviously it was also broken in some way.

-- Scott




More information about the users mailing list