Error decoding authentication request message & SAML response contained an error

[Gilles Badouet]

Hello all,

I set up an IdP and SP in an ad-hoc network using the latest Shibboleth providers versions. My IdP is running within Tomcat 6 and my SP within IIS7.  I faked everything properly and also configured well local hostnames resolution so that each server can be accessible from each other through http and https.
SP hostname: ans.247lib.com
IdP hostname: amlib.co.uk

When it came to get IDP and SP talk each other after configuring the relying-party.xml and shibboleth2.xml files as indicated in the Shibboleth wiki pages, I first encountered the following problem: "Error decoding authentication request message" when trying to browse  https://ans.247.com/secure. It looks like the authentication request is sent to the Idp, but no authentication response since the url I get back for the above error message is https://amlib.co.uk:8443/idp/profile/SAML2/Redirect/SSO . When I also looked at the shibd log, I could read  "no metadata found, can't establish identity of issuer (https://amlib.co.uk/idp:8443/shibboleth)".  I thought that it was an issue at the level of metadata configuration in Shibboleth2.xml file.

I therefore modified a bit the metadata element in Shibboleth2.xml, the error message is now  opensaml::FatalProfileException at (http://ans.247lib.com/Shibboleth.sso/SAML2/POST)

SAML response contained an error.

Error from identity provider:

Status: urn:oasis:names:tc:SAML:2.0:status:Responder
Sub-Status: urn:oasis:names:tc:SAML:2.0:status:AuthnFailed
Note: My metadata elements configuration are as below:
For Shibboleth2.xml:

<MetadataProvider type="XML" uri="http://amlib.co.uk:8080/idp/profile/Metadata/SAML"
              backingFilePath="idp-metadata.xml" reloadInterval="7200">
        </MetadataProvider>

For Relying-party:
<MetadataProvider xsi:type="ChainingMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata"
                          id="ShibbolethMetadata">
        <MetadataProvider xsi:type="FileBackedHTTPMetadataProvider"
                          id="AnsMetadata"
                                   metadataURL="http://ans.247lib.com/Shibboleth.sso/Metadata"
                                   backingFile="C:\IDP\metadata\some-metadata.xml" />
</MetadataProvider>


Kindly help please




Kind regards





Gilles Rubens Badouet

Student ID: 3940347

Faculty of Engineering and Computing

MSc Network Computing Course

Mobile: 07424486426
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130701/d955e5ce/attachment.html