IDP somehow uses localhosts:8080 as the recipient endpoint

[Nate Klingenstein]

Yu,

Your SP is trying to communicate with your IdP directly on 8080, which shouldn't be a port that the IdP listens on in normal deployments anyway.  I think you missed a step.  Your IdP is also convinced that requests are coming in to the server name localhost, which means you haven't virtualized your hosting environemtn properly.

You'll want to ensure your IdP listeners -- whether Apache Tomcat, Apache HTTPD, whatever -- are listening on 443(and optionally 8443), know their own names, and that your IdP metadata matches it(and it probably matches what it should be already).

Hope this helps,
Nate.

On Feb 16, 2014, at 7:42 AM, Yu Chen <cheny18 at rpi.edu<mailto:cheny18 at rpi.edu>>
 wrote:

Hi,

I am trying to deploy shibboleth IDP and SP on a single virtual server inside a physical machine, whose address is https://dcotest.tw.rpi.edu<https://dcotest.tw.rpi.edu/>. I followed the tutorial of installation and everything looks fine except going to https://dcotest.tw.rpi.edu/secure, where it says: Error Message: Message did not meet security requirements. And when I look into the log file of IDP, I found:

00:52:38.111 - ERROR [org.opensaml.common.binding.decoding.BaseSAMLMessageDecoder:215] - SAML message intended destination endpoint 'https://dcotest.tw.rpi.edu/idp/profile/SAML2/Redirect/SSO' did not match the recipient endpoint 'http://localhost:8080/idp/profile/SAML2/Redirect/SSO'

I found that there was someone else raising similar problems before, which is http://shibboleth.1660669.n2.nabble.com/SAML-message-intended-destination-endpoint-td6653987.html#a6654327. Someone suggest that to look into the IDP metadata to make sure there is no ‘localhost’ path, which I double checked my file and found none.

Can anyone help me on this? Is there anywhere else that IDP will somehow use localhost as the prefix? Thanks!

Cheers
Yu

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140216/b3729c7e/attachment.html