Metadata issue

[Cantor, Scott]

> Some precisions on my shibboleth2.xml and relying-party.xml basic
> configurations are as follow:

Don't try and automate metadata exchange like this, because you will get it wrong. Get the metadata from the systems, review it for correctness with regard to URLs, use of http vs https, etc., and then place it locally for consumption for testing.

> <MetadataProvider type="XML" uri="http://shibtest.example.com/idp-
> metadata.xml"

There is no metadata likely to be found at that URL, and the log probably says that. Also, that's not a real hostname unless you faked it (you don't say).

> metadataURL="http://sp.example.org/shibboleth.sso/Metadata"

Likewise there is no guarantee the metadata coming back from that has what you need in it, nor is it likely that sp.example.org would resolve at all unless you manipulated /etc/hosts.

You are doing the most difficult thing you can do to test this, using one machine for both and using fake names. That's just asking for confusion, so I don't recommend that approach.

-- Scott