"Error Message: Message did not meet security requirements"

Wed Nov 27 03:01:25 EST 2013

I've changed relying-party.xml as you've mentioned.

I just do not get if there is something wrong with my metadata why I do not get absolutely any Error in my logs. It says that it's successfully loaded.
Here is the last piece of my log:
…
11:45:34.374 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:253] - Beginning refresh of metadata from '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/some-metadata.xml'
11:45:34.385 - DEBUG [org.opensaml.saml2.metadata.provider.ResourceBackedMetadataProvider:126] - resource /Users/mariam/Desktop/tttt/shibboleth-idp/metadata/some-metadata.xml was last modified 2013-11-26T15:15:48.000Z
11:45:34.386 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:260] - Processing new metadata from '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/some-metadata.xml'
11:45:34.386 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:344] - Unmarshalling metadata from '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/some-metadata.xml'
11:45:34.406 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:388] - Filtering metadata from '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/some-metadata.xml'
11:45:34.406 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:397] - Releasing cached DOM for metadata from '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/some-metadata.xml'
11:45:34.407 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:400] - Post-processing metadata from '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/some-metadata.xml'
11:45:34.407 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:403] - Computing expiration time for metadata from '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/some-metadata.xml'
11:45:34.408 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:406] - Expiration of metadata from '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/some-metadata.xml' will occur at 2013-11-27T11:45:34.374Z
11:45:34.408 - INFO [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:423] - New metadata succesfully loaded for '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/some-metadata.xml'
11:45:34.409 - INFO [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:271] - Next refresh cycle for metadata provider '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/some-metadata.xml' will occur on '2013-11-27T10:45:34.382Z' ('2013-11-27T14:45:34.382+04:00' local time)
11:45:34.424 - DEBUG [org.opensaml.xml.security.SecurityHelper:776] - Attempting to match key pair containing key algorithms public 'RSA' private 'RSA', using JCA signature algorithm 'SHA1withRSA'
11:45:34.425 - DEBUG [org.opensaml.xml.security.SigningUtil:115] - Computing signature over input using private key of type RSA and JCA algorithm ID SHA1withRSA
11:45:34.458 - DEBUG [org.opensaml.xml.security.SigningUtil:123] - Computed signature: 1a278b27b0993dd9afcf4f0edb5bde94777769063f49aa7a1ebf6a6d5b68019bb1f046d67296c4431d091de076f20ef5edfaec8a80bbf65ea6341bb50f3ddc8271cf8aedd65dfcf0b37ab0cbeb3097dac7a60ff91d2b09bd1f781327c897590138ff332a3a70018a7ce9bfc4569928bb2ea3b9017399c7eb11c539ef30cc3032bb47882af61255b48114496411f1469b00338ec27ddd0a6b0f8563439faa58d032fa42d927f3f9a4578eadf84079b3b5a8c9a82c192ceb95a3b1f35ec71b6147f87ae80fec0980e0d25922b825902d844a9d5929c88cdf06f2a86e4061461177554d9308bc83d95b7bb3793d341196174dfdb1376c69efa1b54ddd8f0f5992ce
11:45:34.458 - DEBUG [org.opensaml.xml.security.SigningUtil:241] - Verifying signature over input using public key of type RSA and JCA algorithm ID SHA1withRSA
11:45:34.685 - DEBUG [org.opensaml.xml.security.SecurityHelper:776] - Attempting to match key pair containing key algorithms public 'RSA' private 'RSA', using JCA signature algorithm 'SHA1withRSA'
11:45:34.685 - DEBUG [org.opensaml.xml.security.SigningUtil:115] - Computing signature over input using private key of type RSA and JCA algorithm ID SHA1withRSA
11:45:34.696 - DEBUG [org.opensaml.xml.security.SigningUtil:123] - Computed signature: 1a278b27b0993dd9afcf4f0edb5bde94777769063f49aa7a1ebf6a6d5b68019bb1f046d67296c4431d091de076f20ef5edfaec8a80bbf65ea6341bb50f3ddc8271cf8aedd65dfcf0b37ab0cbeb3097dac7a60ff91d2b09bd1f781327c897590138ff332a3a70018a7ce9bfc4569928bb2ea3b9017399c7eb11c539ef30cc3032bb47882af61255b48114496411f1469b00338ec27ddd0a6b0f8563439faa58d032fa42d927f3f9a4578eadf84079b3b5a8c9a82c192ceb95a3b1f35ec71b6147f87ae80fec0980e0d25922b825902d844a9d5929c88cdf06f2a86e4061461177554d9308bc83d95b7bb3793d341196174dfdb1376c69efa1b54ddd8f0f5992ce
11:45:34.696 - DEBUG [org.opensaml.xml.security.SigningUtil:241] - Verifying signature over input using public key of type RSA and JCA algorithm ID SHA1withRSA
11:45:34.719 - INFO [edu.internet2.middleware.shibboleth.common.config.BaseService:180] - shibboleth.RelyingPartyConfigurationManager service loaded new configuration
11:45:34.728 - INFO [edu.internet2.middleware.shibboleth.common.config.BaseService:158] - Loading new configuration for service shibboleth.HandlerManager
11:45:34.746 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.JSPErrorHandlerBeanDefinitionParser:46] - Parsing configuration for JSP error handler.
11:45:34.746 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: Status
11:45:34.747 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAMLMetadata
11:45:34.751 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: ShibbolethSSO
11:45:34.752 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML1AttributeQuery
11:45:34.753 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML1ArtifactResolution
11:45:34.756 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2SSO
11:45:34.756 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2SSO
11:45:34.757 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2SSO
11:45:34.757 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2SSO
11:45:34.758 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2ECP
11:45:34.760 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2SLO
11:45:34.760 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2SLO
11:45:34.760 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2SLO
11:45:34.761 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2SLO
11:45:34.761 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2SLO
11:45:34.762 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2AttributeQuery
11:45:34.763 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2ArtifactResolution
11:45:34.780 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:253] - Beginning refresh of metadata from '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/idp-metadata.xml'
11:45:34.781 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:260] - Processing new metadata from '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/idp-metadata.xml'
11:45:34.781 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:344] - Unmarshalling metadata from '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/idp-metadata.xml'
11:45:34.789 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:388] - Filtering metadata from '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/idp-metadata.xml'
11:45:34.789 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:397] - Releasing cached DOM for metadata from '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/idp-metadata.xml'
11:45:34.790 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:400] - Post-processing metadata from '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/idp-metadata.xml'
11:45:34.790 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:403] - Computing expiration time for metadata from '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/idp-metadata.xml'
11:45:34.790 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:406] - Expiration of metadata from '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/idp-metadata.xml' will occur at 2013-11-27T11:45:34.780Z
11:45:34.790 - INFO [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:423] - New metadata succesfully loaded for '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/idp-metadata.xml'
11:45:34.791 - INFO [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:271] - Next refresh cycle for metadata provider '/Users/mariam/Desktop/tttt/shibboleth-idp/metadata/idp-metadata.xml' will occur on '2013-11-27T10:45:34.782Z' ('2013-11-27T14:45:34.782+04:00' local time)
11:45:34.938 - INFO [edu.internet2.middleware.shibboleth.common.config.BaseService:180] - shibboleth.HandlerManager service loaded new configuration

Mariam Hakobyan
iOS Developer

o: 801.477.9766 / m: 37477655516
hakobyanmariam at attask.com / www.attask.com

On Nov 26, 2013, at 7:38 PM, Kevin P. Foote [via Shibboleth] <ml-node+s1660669n7591802h59 at n2.nabble.com> wrote:

> 
> On Tue, 26 Nov 2013, Mariam Hakobyan wrote: 
> 
> > Kevin, you are right. "entityID" in original metadata generated by SP is "http://midp.10.39.2.130.xip.io:8080/SAML2". 
> > I was getting "SPSSODescriptor role metadata for entityID 'http://midp.10.39.2.130.xip.io:8080/SAML2' could not be resolved" error and though that entityID should be changed to fix this issue. Now I reverted it back, though I still see "Error Message: Message did not meet security requirements" message. 
> > 
> 
> You are still having problems with metadata / metadata correctness. 
> 
> All you need for file based MD is something like this.. 
> 
> <metadata:MetadataProvider id="MYSPMD" 
>     xsi:type="ResourceBackedMetadataProvider" 
>     xmlns="urn:mace:shibboleth:2.0:metadata" > 
>   <metadata:MetadataResource 
>    xsi:type="resource:FilesystemResource" 
>    file="/opt/shibboleth-idp/metadata/YOUR_MDFILE.xml" /> 
> </metadata:MetadataProvider> 
> 
> 
> ------ 
> thanks 
>   kevin.foote 
> -- 
> To unsubscribe from this list send an email to [hidden email] 
> 
> 
> If you reply to this email, your message will be added to the discussion below:
> http://shibboleth.1660669.n2.nabble.com/Error-Message-Message-did-not-meet-security-requirements-tp7591791p7591802.html
> To unsubscribe from "Error Message: Message did not meet security requirements", click here.
> NAML

block-bar.jpg (2K) <http://shibboleth.1660669.n2.nabble.com/attachment/7591830/0/block-bar.jpg>
twitter.png (1K) <http://shibboleth.1660669.n2.nabble.com/attachment/7591830/1/twitter.png>
facebook.png (1K) <http://shibboleth.1660669.n2.nabble.com/attachment/7591830/2/facebook.png>
googleplus.png (1K) <http://shibboleth.1660669.n2.nabble.com/attachment/7591830/3/googleplus.png>
linkedin.png (1K) <http://shibboleth.1660669.n2.nabble.com/attachment/7591830/4/linkedin.png>

--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Error-Message-Message-did-not-meet-security-requirements-tp7591791p7591830.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131127/4dd75cd1/attachment-0001.html 