Internation dateline issue

[Mike Flynn]

OK, the customer in AU (University of the Sunshine Coast) is running Shibboleth.  I had them try both SP and Idp initiated...

When service started at the SP, their Shibboleth IDP threw the error below:

org.opensaml.ws.security.SecurityPolicyException: Message was rejected due to issue instant expiration


An IDP initiated attempt produced the error below:

07:23:11.330 - WARN [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:348] - Message did not meet security requirements
org.opensaml.ws.security.SecurityPolicyException: Validation of request simple signature failed for context issuer

He has the same 3 minute window that I use on my server.  I have asked if they connect to any other SPs on this side of the dateline - Nighttime there now so I won't hear anything until tomorrow.  Just thought I would throw this up here again in case anyone had any insight on it.

________________________________
 From: Mike Flynn <shibbolethlynda at yahoo.com>
To: Shib Users <users at shibboleth.net> 
Sent: Friday, January 18, 2013 10:34 AM
Subject: Re: Internation dateline issue
 

Thanks, Scott.


________________________________
 From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Users <users at shibboleth.net> 
Sent: Friday, January 18, 2013 10:28 AM
Subject: Re: Internation dateline issue
 
On 1/18/13 12:55 PM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>What is the max time devaiation that Shib allows?  They are running Shib
>it seems.

Defaults to 3 minutes on the SP, I think the IdP is the same.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net



--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130122/04985d67/attachment.html