ePTID and testShib testing

[Zico]

Thanks for the info, Nate. Understandable.....


On Sat, Apr 19, 2014 at 8:45 PM, Nate Klingenstein <ndk at internet2.edu>wrote:

>  Zico,
>
>  You'll need to check to see how the eduPersonTargetedID is being encoded
> and sent to the SP but odds are you're doing that in a way that TestShib
> should be able to map.  This is almost certainly related to the issues
> TestShib is currently experiencing with attribute mapping which almost
> certainly relate to an attempt to load a really, really large folder full
> of metadata files.
>
>  2014-04-18 13:52:11 INFO Shibboleth.Application : building
> AttributeExtractor of type XML...
> 2014-04-18 13:52:11 DEBUG Shibboleth.AttributeExtractor.XML : using local
> resource (/etc/shibboleth/attribute-map.xml), will monitor for changes
> 2014-04-18 13:52:11 ERROR XMLTooling.Threads : pthread_create error (11):
> Resource temporarily unavailable
> 2014-04-18 13:52:11 CRIT Shibboleth.Application : error building
> AttributeExtractor: Thread creation failed.
>
>  In other words, it's not you.  It's TestShib.  And we're working on it.
>
>  Sorry for the trouble,
> Nate.
>
>  On Apr 19, 2014, at 8:57 AM, Zico <mailzico at gmail.com> wrote:
>
>  Hi,
>
> I am trying to configure and release ePTID from my IDP. Configuration is
> almost done in my knowledge from IDP side but whenever I am testing with
> testShib, the "sample.jsp" page is not returning any "persistent-ID is"
> value.
>
>  From my IDP's SAML assertion, I can see that ePTID is being released:
>
> 10:46:03.940 - INFO [Shibboleth-Audit:1028] -
> 20140419T144603Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|_036ab087c30b046a41cfa4a4885853a1|
> https://sp.testshib.org/shibboleth-sp|urn:mace:shibboleth:2.0:profiles:saml2:sso|https://test.soemthing/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_aff1923b65fb4abc706fed216572a554|shibtester|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport|uid,transientId,eduPersonTargetedID,|_d0492222b3e3f03dae2798356809b4f9|
>
> Here is what I am just getting from testshib testing:
>
> Here are some pieces of information I can tell about you using the
> information Shibboleth gives me:
>
>    - referer is: *https://test.something/idp/profile/SAML2/Redirect/SSO
>    <https://test.something/idp/profile/SAML2/Redirect/SSO>*
>    - Origin is: *https://test.something <https://test.something/>*
>    - Shib-Session-ID is: *_524d77eccc3ea7755bd908e620a0c7b0*
>    - Shib-Session-Index is: *_5cf88111263d43a19b8bf3a383d849fd*
>    - Shib-Identity-Provider is: *https://test.something/idp/shibboleth
>    <https://test.something/idp/shibboleth>*
>    - Shib-Authentication-Method is:
>    *urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport*
>    - Shib-Authentication-Instant is: *2014-04-19T14:46:02.782Z*
>    - Shib-AuthnContext-Class is:
>    *urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport*
>    - Shib-Application-ID is: *default*
>
>
>  Any hint what I am missing?
>
> Thanks in advance!
>
>  --
> Best,
> Zico
>  --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Best,
Zico
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140420/4a7ee96a/attachment.html