shib_check_user

[Peter Schober]

* Marc Kalberer <info at programmers.ch> [2014-08-06 17:07]:
> I got an error while authenticating (No peer endpoint available to
> which to send SAML response ) .

That's from the IDP, the Troubleshooting -> Common errors page has
more info on that:
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPTroubleshootingCommonErrors#IdPTroubleshootingCommonErrors-EndpointIssues

> The logs show me
> 
>    2014-08-06 16:59:39 ERROR Shibboleth.Listener [2292098]
>    shib_check_user: error reading size of output message
>    2014-08-06 16:59:39 ERROR Shibboleth.Apache [2292098]
>    shib_check_user: Failure receiving response to remoted message
>    (default::getHeaders::Application).
>
> Are those errors linked ?

I doubt it.

> I'm estonished because apache showme a
> 
>    "GET
>    /Shibboleth.sso/Login?SAMLDS=1&target=http%3A%2F%2Fwww.leclimatentrenosmains.org%2Ftt&entityID=https%3A%2F%2Faai-logon.vho-switchaai.ch%2Fidp%2Fshibboleth
>    HTTP/1.1" 302 660 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64;
>    rv:30.0) Gecko/20100101 Firefox/30.0"
> 
> 
> Is the redirect 302 correct ?

Why not? The SP redirects to the IDP where the endpoint error
happended.
-peter