Request missing SAMLResponse or TARGET form parameters.

[Shirlei]

Hello!
Guys, I'm trying to communicate a shibboleth sp to a simplesaml idp and at
the end of the login process, I got this error:

opensaml::BindingException at
(https://200.237.193.112/Shibboleth.sso/SAML/POST)
Request missing SAMLResponse or TARGET form parameters.

I know by reading other threads that this is version related. I installed
saml tracer plugin and I can see that:

<saml1p:Response
xmlns:saml1p=&quot;urn:oasis:names:tc:SAML:1.0:protocol&quot;
                 IssueInstant=&quot;2014-12-03T10:59:16.133Z&quot;
                 MajorVersion=&quot;1&quot;
                 MinorVersion=&quot;1&quot;
                
Recipient=&quot;https://&lt;HOST>/simplesaml/module.php/saml/sp/saml1-acs.php/default-sp"
(...)

    <saml1:Assertion
xmlns:saml1=&quot;urn:oasis:names:tc:SAML:1.0:assertion&quot;
                    
AssertionID=&quot;_161dee348388d012ea9243e8c72cd860&quot;
                     IssueInstant=&quot;2014-12-03T10:59:16.133Z&quot;
                     Issuer=&quot;https://&lt;HOST>/idp/shibboleth"
                     MajorVersion="1"
                     MinorVersion="1"
                     >

(...)


                <saml1:SubjectConfirmation>
                   
<saml1:ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:bearer</saml1:ConfirmationMethod>
                </saml1:SubjectConfirmation>

My sp shibboleth version:

shibd -v
shibboleth 2.4.3

My shibboleth2.xml:

<SPConfig xmlns="urn:mace:shibboleth:2.0:native:sp:config"
  xmlns:conf="urn:mace:shibboleth:2.0:native:sp:config"
  xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
  xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
  xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
  clockSkew="180">

  <ApplicationDefaults entityID=&quot;&lt;HOST>/shibboleth-sp2"
             REMOTE_USER="eppn persistent-id">
    <Sessions lifetime="28800" timeout="3600" checkAddress="false"
relayState="ss:mem" handlerSSL="false">
      <SSO entityID=&quot;&lt;HOST>/simplesaml/saml2/sp/idpdisco.php">SAML2
SAML1</SSO>
      <Logout>SAML2 Local</Logout>
      <Handler type="MetadataGenerator" Location="/Metadata"
signing="false"/>
      <Handler type="Status"            Location="/Status"/>
      <Handler type="Session"           Location="/Session"
showAttributeValues="false"/>
      <Handler type="DiscoveryFeed"     Location="/DiscoFeed"/>
    </Sessions>
    <Errors supportContact="root at localhost"
logoLocation="/shibboleth-sp/logo.jpg"
styleSheet="/shibboleth-sp/main.css"/>
    <MetadataProvider type=&quot;XML&quot;
uri=&quot;&lt;HOST>/simplesaml/saml2/idp/metadata.php?output=xml"
backingFilePath="ds-metadata.xml" reloadInterval="7200">
     
    </MetadataProvider>
    <AttributeExtractor type="XML" validate="true"
path="attribute-map.xml"/>
    <AttributeResolver type="Query" subjectMatch="true"/>
    <AttributeFilter type="XML" validate="true"
path="attribute-policy.xml"/>
    <CredentialResolver type="File" key="/etc/ssl/private/monipe-bc.key"
certificate="/etc/ssl/certs/monipe-bc.crt"/>
  </ApplicationDefaults>
 <SecurityPolicyProvider type="XML" validate="true"
path="security-policy.xml"/>
  <ProtocolProvider type="XML" validate="true" reloadChanges="false"
path="protocols.xml"/>
</SPConfig>


My saml20-idp-hosted.php on the ssp host:

$metadata['__DYNAMIC:1__'] = array(
        /*
         * The hostname of the server (VHOST) that will use this SAML
entity.
         *
         * Can be '__DEFAULT__', to use this entry by default.
         */
        'host' => '__DEFAULT__',

        /* X.509 key and certificate. Relative to the cert directory. */
        'privatekey' => 'saml.pem',
        'certificate' => 'saml.crt',

        /*
         * Authentication source to use. Must be one that is configured in
         * 'config/authsources.php'.
         */
        'auth' => 'default-sp',

        /* Uncomment the following to use the uri NameFormat on attributes.
*/

        'attributes.NameFormat' =>
'urn:oasis:names:tc:SAML:2.0:attrname-format:uri',
        'authproc' => array(
                // Convert LDAP names to oids.
                100 => array('class' => 'core:AttributeMap', 'name2oid'),
        ),
);


So, my question is
Where should I put effort to solve this version issue: on the sp side or on
the IdP side? This is not clear to me. 

Thank you very much for any advice.

Have a nice day!




--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Request-missing-SAMLResponse-or-TARGET-form-parameters-tp7609623.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.