New Shibboleth daemon on new server - user/wayf page just reloads over and over

[Ben Turner]

So when we visit http for http://new.educause.edu/Shibboleth.sso/Login (I
have updated the incommon metadata so that should be updated soon to https
correctly) then I am cycled through the same wayf selection over and over.
 If you select a university from that list, it then sends the request to
new.educause.edu which then cycles the user back to the original user wayf
view from the incommon site.

Is there a configuration that I am lacking that would appear to be causing
that behavior?


-

Ben Turner, CSM
Manager, Web Development
 
EDUCAUSE <http://www.educause.edu/>
Uncommon Thinking for the Common Good
282 Century Place, Suite 5000, Louisville, CO 80027
direct: 303.939.0300 | main: 303.449.4430 | fax: 303.440.0461 |
educause.edu <http://www.educause.edu/>





On 9/20/13 8:24 AM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

>On 9/20/13 10:12 AM, "Ben Turner" <bturner at educause.edu> wrote:
>
>>I receive the Invalid Query response when I arrive on the incommon page.
>>Looking into this response further it is describing a missing value in
>>our configuration for <idpdisc:DiscoveryResponse>
>
>I wasn't thinking about it, unless your metadata is registered with
>InCommon that's not going to help much to try that service.
>
>>however, when I visit our metadata I see that we do have a value for this
>>in our metadata file at https://new.educause.edu/Shibboleth.sso/Metadata
>>which has me confused as to where the value should be that it is missing
>>from.
>
>That is not your metadata. Metadata is a projection of your system you
>give to others in ways that depend on the management process involved in
>those relationships, it has no independent existence on your server.
>InCommon metadata is managed using the InCommon administration tool,
>nowhere else.
>
>>This would appear to point to our underlying issue.
>
>It has absolutely nothing to do with it.
>
>-- Scott
>
>
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net