Again...No return endpoint available for relying party

[Yu Chen]

I know this is an old issue but I checked all the previous posts and common
troubleshooting pages but none works for me. 

Anyway, I can successfully get authenticated from
<sp-domain>/Shibboleth.sso/Login but after that it says: Error Message: No
peer endpoint available to which to send SAML response. Following the
previous posts, I double checked all possible configurations file under SP,
such as shibboelth2.xml,idp-metadata.xml, relying-party.xml. Here is some
snippet of configuration that I assume related. 


==shibboleth2.xml==
<ApplicationDefaults entityID="https://ligo.tw.rpi.edu/idp/shibboleth"
homeURL="https://ligo.tw.rpi.edu/secure/test.php" REMOTE_USER="eppn
persistent-id targeted-id">
<SSO entityID="https://ligo.tw.rpi.edu/idp/shibboleth">
              SAML2 SAML1
            </SSO>
<SessionInitiator type="Chaining" Location="/Login" isDefault="true"
id="Intranet" relayState="cookie"
entityID="https://ligo.tw.rpi.edu/idp/shibboleth">
                <SessionInitiator type="SAML2" defaultACSIndex="1"
acsByIndex="false" template="bindingTemplate.html"/>
                <SessionInitiator type="Shib1" defaultACSIndex="5"/>
            </SessionInitiator>

<MetadataProvider type="XML" file="idp-metadata.xml"/>

==idp-metadata.xml==
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata"
xmlns:ds="http://www.w3.org/2000/09/xmldsig#"
xmlns:shibmd="urn:mace:shibboleth:metadata:1.0"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
entityID="https://ligo.tw.rpi.edu/idp/shibboleth">

<SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest"
Location="https://ligo.tw.rpi.edu/idp/profile/Shibboleth/SSO"/>

        <SingleSignOnService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Location="https://ligo.tw.rpi.edu/idp/profile/SAML2/POST/SSO"/>

        <SingleSignOnService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
Location="https://ligo.tw.rpi.edu/idp/profile/SAML2/POST-SimpleSign/SSO"/>

        <SingleSignOnService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
Location="https://ligo.tw.rpi.edu/idp/profile/SAML2/Redirect/SSO"/>

==relying-party.xml==
<metadata:MetadataProvider id="IdPMD"
xsi:type="metadata:FilesystemMetadataProvider"
                                  
metadataFile="/opt/shibboleth-idp/metadata/idp-metadata.xml"
                                   maxRefreshDelay="P1D" />
<metadata:MetadataProvider xsi:type="FilesystemMetadataProvider"
xmlns="urn:mace:shibboleth:2.0:metadata" id="SPMETADATA"
metadataFile="/opt/shibboleth-idp/metadata/sp-metadata.xml" />


Any suggestion is appreciated, thanks!






--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Again-No-return-endpoint-available-for-relying-party-tp7595783.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.