TestShib

[Sathish Anickode]

I was actually testing through TestShib but was redirected to the following url: https://idp.local.com/idp/Authn/UserPassword, and I encountered similar issue. Once I submitted my user id and password from this page, I got back the following message:

Login has failed. Double-check your username and password.

I verified that my user id and password are correct. I am also not seeing any errors in the logs other than the following in idp-process.log:

15:19:33.504 - INFO [Shibboleth-Access:73] - 20141209T221933Z|127.0.0.1|idp.local.com:443|/profile/SAML2/Redirect/SSO|

 Please let me know if there are any other location that I should check for the logs.

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Kevin Foote
Sent: Tuesday, December 09, 2014 2:09 PM
To: Shib Users
Subject: Re: TestShib


> On Dec 9, 2014, at 1:02 PM, Sathish Anickode <SAnickode at skytouchtechnology.com> wrote:
> 
> I have setup an Idp in my local machine using Tomcat 6.0.43 and was able to access profile/Status page successfully. I have configured my authentication handler for UserNamePassword authentication and configured login.config for ldap authentication using an OpenLDAP store. 
>  
> When I access the login page from idp/login.jsp and submit a valid user id and password, the request is submitted to idp/j_security_check, but I get the following error:
> ERROR
> An error occurred while processing your request. Please contact your helpdesk or user ID office for assistance.
> Error Message: Invalid IdP URL (HTTP 404) I do not see any entries in 
> the log. Based on the error message, it seems that the IdP does not recognize JAAS authentication. Can you please help with what I am missing?

You need to do a full SAML authentication flow for the IdP to work correctly. 

In other words accessing /idp/login.jsp will not get you anywhere with positive results, that is not how it is supposed to work with this software. 

You need to register a Service Provider (SP) with your IdP to verify things work the way they should. 

Feel free to use testshib.org [1] for your testing purposes for thing like this. Then you can access the testshib SP and use your IdP to authenticate. 


[1] https://www.testshib.org/register.html

--------
thanks
 kevin.foote
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net