Message was signed, but signature could not be verified.

[Paul Hethmon]

On Aug 13, 2014, at 7:46 PM, Farzan Qureshi <fqureshi at rosmini.school.nz<mailto:fqureshi at rosmini.school.nz>> wrote:

Yes I am configuring both on the same server.

Not a good idea for your first setup.

But when I access https://idp.rosmini.school.nz/Shibboleth.sso/Metadata I get the meta data file which means that both services are working independently isn't it?

Since the IdP requires a Java container and the SP runs in Apache/IIS, how did you manage it at all?

Regardless, I would toss what you have, it will be simpler. Get two machines to work with, one dedicated to the IdP and the other to the SP. If that really isn't possible, then configure the machine you have with 2 IP addresses. Bind one for the IdP, the other for the SP. Assign them different hostnames. Make them logically separate.

Then go to the wiki and follow the information there on configuring them.

Paul


Paul Hethmon
Chief Software Architect
paul.hethmon at clareitysecurity.com<mailto:paul.hethmon at clareitysecurity.com>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140813/bfc93611/attachment.html