testshib.org not accepting SP metadata

[Kevin Foote]

Agreed no ACS elements.
I believe a SPSSO descriptor requires those to be valid.

- sent from mobile

On Dec 19, 2014, at 7:03 PM, Nate Klingenstein <ndk at internet2.edu<mailto:ndk at internet2.edu>> wrote:

Stuart,

After a quick glance, it looks to me like you don’t have any assertion consumer services, which wouldn’t make for a very functional SP and apparently is schema invalid, among other things.  That likely took some fiddling in shibboleth2.xml that will cause further problems.  If you’re looking at all this fresh, it might make sense to start over and hew closer to the testing instructions provided by TestShib.

Take care,
Nate.

On Dec 19, 2014, at 7:48 PM, Stuart Kacy <Stuart at cabells.com<mailto:Stuart at cabells.com>> wrote:


Thank you so much for helping me with this.  No rush!

Sent using CloudMagic for the Android

On Fri, Dec 19, 2014 at 8:44 PM, Nate Klingenstein <ndk at internet2.edu<mailto:ndk at internet2.edu>> wrote:

Any suggestions from you geniuses would be greatly appreciated.

I think ya got the wrong list.

I checked the logs and it thinks that your metadata is invalid for the following reason.  I have been debugging problems since early in the morning, so I can’t debug anything now, but hopefully the schema invalidity is accurate and it’ll give you something to go on.  If not, the validator is probably busted due to something silly like ports, and Kevin will do a much better job fixing that than me.

Thanks for your patience with your friendly neighborhood best-effort-service TestShib. :D

/tmp/phpo9fR7D:38: element SPSSODescriptor: Schemas validity error : Element '{urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor': Missing child element(s). Expected is one of ( {urn:oasis:names:tc:SAML:2.0:metadata}SingleLogoutService, {urn:oasis:names:tc:SAML:2.0:metadata}ManageNameIDService, {urn:oasis:names:tc:SAML:2.0:metadata}NameIDFormat, {urn:oasis:names:tc:SAML:2.0:metadata}AssertionConsumerService ).
/tmp/phpo9fR7D fails to validate
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141220/fec9b9bb/attachment-0001.html