Unable to establish security of incoming assertion

justin9 justin9 at ymail.com
Thu Jun 27 15:12:24 EDT 2013


An update- the metadata file seems to be reading fine.
below is the details from shib log file -

2013-06-27 14:44:45 INFO Shibboleth.Application : building MetadataProvider
of type XML...
2013-06-27 14:44:45 INFO OpenSAML.MetadataProvider.XML : loaded XML resource
(c:/opt/shibboleth-sp/etc/shibboleth/dev-idpmetadata.xml)
2013-06-27 14:44:46 INFO Shibboleth.Application : building TrustEngine of
type Chaining...
2013-06-27 14:44:46 INFO OpenSAML.MetadataProvider.XML : reload thread
started...running when signaled
2013-06-27 14:44:46 INFO XMLTooling.TrustEngine.Chaining : building
TrustEngine of type ExplicitKey
2013-06-27 14:44:46 INFO XMLTooling.TrustEngine.Chaining : building
TrustEngine of type PKIX
2013-06-27 14:44:46 INFO Shibboleth.Application : building
AttributeExtractor of type XML...
2013-06-27 14:44:46 WARN Shibboleth.AttributeExtractor.XML : attribute
mappings are reloadable; be sure to restart web server when adding new
attribute IDs
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : reload thread
started...running when signaled
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : loaded XML
resource (c:/opt/shibboleth-sp/etc/shibboleth/attribute-map.xml)
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:mace:dir:attribute-def:eduPersonEntitlement
2013-06-27 14:44:46 WARN Shibboleth.AttributeExtractor.XML : attribute
mapping rule (ShibEPEntitlement) uses deprecated aliases feature, consider
revising
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:oid:1.3.6.1.4.1.5923.1.1.1.7
2013-06-27 14:44:46 WARN Shibboleth.AttributeExtractor.XML : attribute
mapping rule (ShibEPEntitlement) uses deprecated aliases feature, consider
revising
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:mace:dir:attribute-def:uid
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:oid:0.9.2342.19200300.100.1.1
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:mace:dir:attribute-def:displayName
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:oid:2.16.840.1.113730.3.1.241
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:mace:dir:attribute-def:givenName
2013-06-27 14:44:46 WARN Shibboleth.AttributeExtractor.XML : attribute
mapping rule (ShibgivenName) uses deprecated aliases feature, consider
revising
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:oid:2.5.4.42
2013-06-27 14:44:46 WARN Shibboleth.AttributeExtractor.XML : attribute
mapping rule (ShibgivenName) uses deprecated aliases feature, consider
revising
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:mace:dir:attribute-def:sn
2013-06-27 14:44:46 WARN Shibboleth.AttributeExtractor.XML : attribute
mapping rule (Shibsurname) uses deprecated aliases feature, consider
revising
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:oid:2.5.4.4
2013-06-27 14:44:46 WARN Shibboleth.AttributeExtractor.XML : attribute
mapping rule (Shibsurname) uses deprecated aliases feature, consider
revising
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:mace:dir:attribute-def:mail
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:oid:0.9.2342.19200300.100.1.3
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:mace:usc.edu:gds:attribute-def:uscUSCID
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:mace:usc.edu:gds:attribute-def:uscHistoricalUSCID
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:mace:usc.edu:gds:attribute-def:uscNetID
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:mace:usc.edu:gds:attribute-def:uscPID
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:mace:usc.edu:gds:attribute-def:uscEID
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:mace:usc.edu:gds:attribute-def:uscOwnerPvid
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:mace:usc.edu:gds:attribute-def:uscPvid
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:mace:usc.edu:gds:attribute-def:uscAffiliation
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute
urn:mace:usc.edu:gds:attribute-def:uscPrimaryAffiliation
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:mace:dir:attribute-def:eduPersonScopedAffiliation
2013-06-27 14:44:46 WARN Shibboleth.AttributeExtractor.XML : attribute
mapping rule (ShibEPAffiliation) uses deprecated aliases feature, consider
revising
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:oasis:names:tc:SAML:2.0:nameid-format:transient
2013-06-27 14:44:46 INFO Shibboleth.AttributeExtractor.XML : creating
mapping for Attribute urn:oasis:names:tc:SAML:2.0:nameid-format:persistent
2013-06-27 14:44:46 INFO Shibboleth.Application : building AttributeFilter
of type XML...
2013-06-27 14:44:46 INFO Shibboleth.AttributeFilter : loaded XML resource
(c:/opt/shibboleth-sp/etc/shibboleth/attribute-policy.xml)
2013-06-27 14:44:46 INFO Shibboleth.Application : building AttributeResolver
of type Query...
2013-06-27 14:44:46 INFO Shibboleth.Application : building
CredentialResolver of type File...
2013-06-27 14:44:46 INFO XMLTooling.SecurityHelper : loading private key
from file (c:/opt/shibboleth-sp/etc/shibboleth/sp-key.pem)
2013-06-27 14:44:46 INFO Shibboleth.AttributeFilter : reload thread
started...running when signaled
2013-06-27 14:44:46 INFO XMLTooling.SecurityHelper : loading certificate(s)
from file (c:/opt/shibboleth-sp/etc/shibboleth/sp-cert.pem)
2013-06-27 14:44:46 INFO Shibboleth.Listener : registered remoted message
endpoint (default::getHeaders::Application)
2013-06-27 14:44:46 INFO Shibboleth.Listener : registered remoted message
endpoint (rename--my-application-name::getHeaders::Application)
2013-06-27 14:44:46 INFO Shibboleth.Listener : listener service starting
2013-06-27 14:46:01 WARN Shibboleth.SSO.SAML2 [1]: detected a problem with
assertion: Unable to establish security of incoming assertion.



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Unable-to-establish-security-of-incoming-assertion-tp7587938p7587939.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.


More information about the users mailing list