testing with sp.testshib.org against my IdP

[Peter Schober]

* Gene Matthews <gmatthew at hitachi-cta.com> [2013-07-12 16:40]:
> I'm new to Shibboleth and implementing SSO. I'm trying to test my new installation of shibboleth-idp by using testshib and getting the following: 
> 
> opensaml::FatalProfileException at ( https://sp.testshib.org/Shibboleth.sso/SAML2/POST ) 
> Error from identity provider: 
> Status: urn:oasis:names:tc:SAML:2.0:status:Responder 
> Sub-Status: urn:oasis:names:tc:SAML:2.0:status:AuthnFailed 

The default configuration of the IdP does not look at your JAAS
login.config, it defaults to RemoteUser (which assumes container based
authentication):

> 19:45:08.805 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:464] - Selecting appropriate login handler from filtered set {urn:oasis:names:tc:SAML:2.0:ac:classes:unspecified=edu.internet2.middleware.shibboleth.idp.authn.provider.RemoteUserLoginHandler at 28cc5e03} 

> 19:45:08.805 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:497] - Authenticating user with login handler of type edu.internet2.middleware.shibboleth.idp.authn.provider.RemoteUserLoginHandler 

[...]

> 19:45:08.810 - DEBUG [edu.internet2.middleware.shibboleth.idp.authn.provider.RemoteUserAuthServlet:77] - No remote user information was present in the request 

Look at your handler.xml and the documentation at
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass
Then comment out the RemoteUser login handler and activate the
UsernamePassword one and restart the container.
-peter