Problems configuring 2nd SP host to the same IDP

Tony Autin tony.autin at innosoft.ca
Wed Jul 2 15:03:57 EDT 2014


Hi Scott,

Sorry that last message should have said, "I'm now getting this error in
the native.log:"

Here is an update block from the native.log

2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>> http://www.w3.org/2001/xml.xsd with baseURI
>> C:\ProgramData\Shibboleth\SP\xml\opensaml\sstc-saml-metadata-ui-v1.0.xsd
>
> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : unauthorized entity
>> request (http://www.w3.org/2001/xml.xsd), blocking it
>
> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>> urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol with baseURI
>> C:/opt/shibboleth-sp/etc/shibboleth/shibboleth2.xml
>
> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>> saml-schema-metadata-2.0.xsd with baseURI
>> C:\ProgramData\Shibboleth\SP\xml\opensaml\sstc-saml-idp-discovery.xsd
>
> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>> urn:oasis:names:tc:SAML:profiles:SSO:request-init with baseURI
>> C:/opt/shibboleth-sp/etc/shibboleth/shibboleth2.xml
>
> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>> saml-schema-metadata-2.0.xsd with baseURI
>> C:\ProgramData\Shibboleth\SP\xml\opensaml\sstc-request-initiation.xsd
>
> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>> urn:oasis:names:tc:SAML:profiles:v1metadata with baseURI
>> C:/opt/shibboleth-sp/etc/shibboleth/shibboleth2.xml
>
> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>> urn:oasis:names:tc:SAML:protocol:ext:third-party with baseURI
>> C:/opt/shibboleth-sp/etc/shibboleth/shibboleth2.xml
>
> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>> saml-schema-assertion-2.0.xsd with baseURI
>> C:\ProgramData\Shibboleth\SP\xml\opensaml\sstc-saml-protocol-ext-thirdparty.xsd
>
>
 I had to trim the log down, but most of it is attached.


On Wed, Jul 2, 2014 at 1:59 PM, Tony Autin <tony.autin at innosoft.ca> wrote:

> Hi Scott,
>
> Sorry that last message should have said, "I'm now getting this error in
> the native.log:"
>
> Here is an update block from the native.log
>
> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>>> http://www.w3.org/2001/xml.xsd with baseURI
>>> C:\ProgramData\Shibboleth\SP\xml\opensaml\sstc-saml-metadata-ui-v1.0.xsd
>>
>> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : unauthorized entity
>>> request (http://www.w3.org/2001/xml.xsd), blocking it
>>
>> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>>> urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol with baseURI
>>> C:/opt/shibboleth-sp/etc/shibboleth/shibboleth2.xml
>>
>> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>>> saml-schema-metadata-2.0.xsd with baseURI
>>> C:\ProgramData\Shibboleth\SP\xml\opensaml\sstc-saml-idp-discovery.xsd
>>
>> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>>> urn:oasis:names:tc:SAML:profiles:SSO:request-init with baseURI
>>> C:/opt/shibboleth-sp/etc/shibboleth/shibboleth2.xml
>>
>> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>>> saml-schema-metadata-2.0.xsd with baseURI
>>> C:\ProgramData\Shibboleth\SP\xml\opensaml\sstc-request-initiation.xsd
>>
>> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>>> urn:oasis:names:tc:SAML:profiles:v1metadata with baseURI
>>> C:/opt/shibboleth-sp/etc/shibboleth/shibboleth2.xml
>>
>> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>>> urn:oasis:names:tc:SAML:protocol:ext:third-party with baseURI
>>> C:/opt/shibboleth-sp/etc/shibboleth/shibboleth2.xml
>>
>> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>>> saml-schema-assertion-2.0.xsd with baseURI
>>> C:\ProgramData\Shibboleth\SP\xml\opensaml\sstc-saml-protocol-ext-thirdparty.xsd
>>
>>
> I had to trim the log down, but most of it is attached.
>
>
> On Wed, Jul 2, 2014 at 1:46 PM, Tony Autin <tony.autin at innosoft.ca> wrote:
>
>> Hi Scott,
>>
>> Sorry that last message should have said, "I'm now getting this error in
>> the native.log:"
>>
>> Here is an update block from the native.log
>>
>> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>>>> http://www.w3.org/2001/xml.xsd with baseURI
>>>> C:\ProgramData\Shibboleth\SP\xml\opensaml\sstc-saml-metadata-ui-v1.0.xsd
>>>
>>> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : unauthorized entity
>>>> request (http://www.w3.org/2001/xml.xsd), blocking it
>>>
>>> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>>>> urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol with baseURI
>>>> C:/opt/shibboleth-sp/etc/shibboleth/shibboleth2.xml
>>>
>>> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>>>> saml-schema-metadata-2.0.xsd with baseURI
>>>> C:\ProgramData\Shibboleth\SP\xml\opensaml\sstc-saml-idp-discovery.xsd
>>>
>>> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>>>> urn:oasis:names:tc:SAML:profiles:SSO:request-init with baseURI
>>>> C:/opt/shibboleth-sp/etc/shibboleth/shibboleth2.xml
>>>
>>> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>>>> saml-schema-metadata-2.0.xsd with baseURI
>>>> C:\ProgramData\Shibboleth\SP\xml\opensaml\sstc-request-initiation.xsd
>>>
>>> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>>>> urn:oasis:names:tc:SAML:profiles:v1metadata with baseURI
>>>> C:/opt/shibboleth-sp/etc/shibboleth/shibboleth2.xml
>>>
>>> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>>>> urn:oasis:names:tc:SAML:protocol:ext:third-party with baseURI
>>>> C:/opt/shibboleth-sp/etc/shibboleth/shibboleth2.xml
>>>
>>> 2014-07-01 16:58:23 DEBUG XMLTooling.ParserPool : asked to resolve
>>>> saml-schema-assertion-2.0.xsd with baseURI
>>>> C:\ProgramData\Shibboleth\SP\xml\opensaml\sstc-saml-protocol-ext-thirdparty.xsd
>>>
>>>
>> Entire log is attached.
>>
>>
>>
>> On Tue, Jul 1, 2014 at 2:46 PM, Tony Autin <tony.autin at innosoft.ca>
>> wrote:
>>
>>> Hi Scott,
>>>
>>> It was too obvious. Thanks
>>>
>>> I'm not getting this error in the native.log:
>>>
>>> 2014-07-01 15:40:20 ERROR Shibboleth.Listener [5668]
>>>> isapi_shib_extension: socket call (unknown) resulted in error (10054):
>>>> Unknown error
>>>
>>>
>>>
>>>
>>>
>>> On Tue, Jul 1, 2014 at 2:35 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
>>>
>>>> > Thanks, sorry for my confusion. Which of these (or all) should be set
>>>> to
>>>> > debug?
>>>>
>>>> None of them, just change the root category.
>>>>
>>>> -- Scott
>>>>
>>>> --
>>>> To unsubscribe from this list send an email to
>>>> users-unsubscribe at shibboleth.net
>>>>
>>>
>>>
>>>
>>> --
>>> Tony Autin
>>> Director of Implementation and Special Projects
>>> 1-888-510-3827 EXT 705
>>> tony.autin at innosoft.ca
>>> www.innosoft.ca
>>>
>>>
>>
>>
>> --
>> Tony Autin
>> Director of Implementation and Special Projects
>> 1-888-510-3827 EXT 705
>> tony.autin at innosoft.ca
>> www.innosoft.ca
>>
>>
>
>
> --
> Tony Autin
> Director of Implementation and Special Projects
> 1-888-510-3827 EXT 705
> tony.autin at innosoft.ca
> www.innosoft.ca
>
>


-- 
Tony Autin
Director of Implementation and Special Projects
1-888-510-3827 EXT 705
tony.autin at innosoft.ca
www.innosoft.ca
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140702/10eb28bc/attachment-0001.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: native.zip
Type: application/zip
Size: 25408 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20140702/10eb28bc/attachment-0001.zip 


More information about the users mailing list