New Shibboleth daemon on new server - user/wayf page just reloads over and over

[Kevin P. Foote]

On Fri, 20 Sep 2013, Kevin P. Foote wrote:

>
> On Fri, 20 Sep 2013, Ben Turner wrote:
>
>> So following up we did update our service provider to point to the incommon discovery service.  Upon pointing new.educause.edu to https://wayf.incommonfederation.org/DS/WAYF?entityID=https%3A%2F%2Fnew.educause.edu%2Fshibboleth-sp&return=https%3A%2F%2Fnew.educause.edu%2FShibboleth.sso%2FLogin%3FSAMLDS%3D1%26%26target%3Dss%253Amem%253A91141d2bd6a5caee5ad152fa1bcd058582984d82255097e469514ed0790c4ce1
>>
>> I receive the Invalid Query response when I arrive on the incommon page.  Looking into this response further it is describing a missing value in our configuration for <idpdisc:DiscoveryResponse>
>>
>> however, when I visit our metadata I see that we do have a value for this in our metadata file at https://new.educause.edu/Shibboleth.sso/Metadata which has me confused as to where the value should be that it is missing from.  Is there another file that should have that configured or is our entry in the metadata file correct?  I haven't seen any other reference to metadata files in the system.
>>
>> This would appear to point to our underlying issue.  This almost strikes me as an install issue.  Is that possible that something may have gone afoul in the install process?
>>
>
>
>
> Here is what InC metadata says.. for your DiscoverResponse.
>
> <DiscoveryResponse
> xmlns="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
> Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
> Location="http://new.educause.edu/Shibboleth.sso/Login" index="1"/>
>
> Shouldn't your Location be "https"

I should add .. your MD registered with testshib has the following for
DiscoverResponse, which you say works fine.

<idpdisc:DiscoveryResponse
xmlns:idpdisc="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
Location="https://new.educause.edu/Shibboleth.sso/DS" index="1"/>



------
thanks
  kevin.foote