Getting "No peer endpoint" on new installation
George Boney
gcboney at bellsouth.net
Fri May 17 21:19:08 EDT 2013
Hello there,
I have an issue I cannot seem to fix and I would appreciate any
help you can provide. I am using Shibboleth on a CentOS system (the
SP) and testshib.org as the IDP. Here is basically what happens
a) Try to access 'secure' page
b) Presented with login -- login as myself
c) Get error "No Peer Endpoint"
I am at a loss at what more I can do to debug this. It appears the IDP
cannot find the system name in the metadata. I have reloaded the
metadata a couple of times, and recopied Shibboleth2.xml, restart shib
and http, etc. (Though the last few times the Shibboleth2.xml has not
had any changes in it.)
Any help or suggestions about how to troubleshoot that you can provide
would be appreciated.
/Low Priority: I also have a question about how to set this up so I can
use different IDP's for different URL (/secure/dir1/* goes to IDP-A,
/secure/dir2/* goes to IDP-B). If you could recommend a good web
source, white paper, book, etc. that discusses this, I would appreciate
it./
Thanks,
George Boney
*Detailed Flow and description.*
Try to access URL "george.rmtcentral.net/secure/hello.cgi"
(BTW, you can access "george.rmtcentral.net/unsecure/hello.cgi" just
to see the expected result)
It asks for a login (myself/myself) and then presents a page that says:
-------------------------------------------------------------
Something horrible happened. ...
Error Message: No peer endpoint available to which to send SAML response
---------------------------------------------------------------
*The log file says*:
...
20:26:39.906 - DEBUG
[edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:170]
- Incoming request contains a login context and indicates principal was
authenticated, processing second leg of request
20:26:39.907 - DEBUG
[edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:128]
- Looking up relying party configuration for
https://george.rmtcentral.net/shibboleth
20:26:39.907 - DEBUG
[edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:134]
- No custom relying party configuration found for
https://george.rmtcentral.net/shibboleth, looking up configuration based
on metadata groups.
20:26:39.908 - DEBUG
[edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:157]
- No custom or group-based relying party configuration found for
https://george.rmtcentral.net/shibboleth. Using default relying party
configuration.
20:26:39.909 - WARN
[org.opensaml.saml2.binding.AuthnResponseEndpointSelector:206] - Relying
party 'https://george.rmtcentral.net/shibboleth' requested the response
to be returned to endpoint with ACS URL
'http://george.rmtcentral.net/Shibboleth.sso/SAML2/POST' and binding
'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' however no endpoint,
with that URL and using a supported binding, can be found in the
relying party's metadata
20:26:39.909 - ERROR
[edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:429]
- No return endpoint available for relying party
https://george.rmtcentral.net/shibboleth
*Metadata*
The metadata file ("Meda_George_Data." Attached) shows
<!--This is example metadata only. Do *NOT* supply it as is without
review, and do *NOT* provide it in real time to your partners.-->
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui"
ID="_19d9edf1851c00adc2a634793a1f9e536282b96c"
entityID="https://george.rmtcentral.net/shibboleth">
<md:Extensions xmlns:
....
<md:SingleLogoutService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
Location="https://george.rmtcentral.net/Shibboleth.sso/SLO/Redirect"/>
<md:SingleLogoutService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Location="https://george.rmtcentral.net/Shibboleth.sso/SLO/POST"/>
<md:SingleLogoutService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
Location="https://george.rmtcentral.net/Shibboleth.sso/SLO/Artifact"/>
<md:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Location="https://george.rmtcentral.net/Shibboleth.sso/SAML2/POST"
index="1"/>
<md:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
Location="https://george.rmtcentral.net/Shibboleth.sso/SAML2/POST-SimpleSign"
index="2"/>
...
<md:AssertionConsumerService
Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"
Location="https://george.rmtcentral.net/Shibboleth.sso/SAML/Artifact"
index="6"/>
</md:SPSSODescriptor>
</md:EntityDescriptor>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130517/a1331c3f/attachment-0002.html
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130517/a1331c3f/attachment-0003.html
More information about the users
mailing list