open ports / version mismatch

[Brian Tingle]

Hi,

As you may know, I'm investigating an issue where my SP works with testshib.org; but it does not work with my identity management group's test IdP.  The test IdP operator says that the test IdP works with other SPs, therefore the problem is on my end.

I'm going to set up my own test IdP to investigate the issue to try to reproduce the error.  I was reading https://wiki.shibboleth.net/confluence/display/SHIB2/IdPSPLocalTestInstall#IdPSPLocalTestInstall-Preparation<https://wiki.shibboleth.net/confluence/display/SHIB2/IdPSPLocalTestInstall> and it says "Port 80 and 443 need to be open. Watch out for firewalls and permission problems."

nuxeo at nuxeo-dev:~/servers/shibboleth/var/run/shibboleth> curl -k https://idt1.ucop.edu/
Hello world IDT1
nuxeo at nuxeo-dev:~/servers/shibboleth/var/run/shibboleth> curl -k http://idt1.ucop.edu/
curl: (7) Failed connect to idt1.ucop.edu:80; Connection timed out

Port 80 is not open between my SP and my IdP -- could this be the root of my error:

Status: urn:oasis:names:tc:SAML:2.0:status:Responder
Sub-Status: urn:oasis:names:tc:SAML:2.0:status:AuthnFailed

?

Grasping at straws, my IdP mentioned that they were using an old version of the IdP software.  Could there be a version incompatibility issue?  Do I need to install and old version of the SP to match the IdP he is running?

Thanks -- Brian
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130612/53375ec6/attachment.html