Error Message: No peer endpoint available to which to send SAML response

[Yu Chen]

Hi, 

We've got some problems while trying to have multiple websites under
protection of a single SP. We configured our machine following the
instruction here
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplicationOverride. 

Basically, we have one physical machine and there are 3 domain names bundle
with it, say A.edu, B.edu and C.edu. And we want to have
https://A.edu/secure/test.php, https://B.edu/secure/test.php,
https://C.edu/secure/test.php. At the moment, we configure the default
sp-metadata.xml with the application-id for A.edu and it works perfectly.And
we configure the shibboleth2.xml, we use the override field for the other
two sites. 

The current situation is, when we go to the 3 protected sites, they will
redirect to the IDP login page successfully. However, after we enter the
LDAP credentials, only the sites under https://A.edu/secure/test.php is able
to be logined in successfully, while the other two says
Error Message: No peer endpoint available to which to send SAML response

And I did check the boot-up log of SP, where it says 
2014-06-17 23:12:00 INFO Shibboleth.Application : adding
AssertionConsumerService for Binding
(urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST) at (/SAML2/POST)
2014-06-17 23:12:00 INFO Shibboleth.Listener : registered remoted message
endpoint (https://B.edu/Shibboleth.sso/SAML2/POST)

So I assume the service has been registered. 

Here is the related info: 

IDP:
Error Message: No peer endpoint available to which to send SAML response

IDP log
23:12:25.506 - WARN
[org.opensaml.saml2.binding.AuthnResponseEndpointSelector:206] - Relying
party 'https://sso.deepcarbon.net/shibboleth' requested the response to be
returned to endpoint with ACS URL
'https://info.deepcarbon.net/Shibboleth.sso/SAML2/POST'  and binding
'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' however no endpoint, with
that URL and using a supported binding,  can be found in the relying party's
metadata
23:12:25.506 - ERROR
[edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:447]
- No return endpoint available for relying party
https://sso.deepcarbon.net/shibboleth

SP:
Shibboleth2.xml
 <RequestMapper type="Native">
        <RequestMap applicationId="default">
            <Host name="sso.deepcarbon.net">
                <Path name="secure" authType="shibboleth"
requireSession="true"/>
            </Host>
            <Host name="info.deepcarbon.net"
applicationId="https://info.deepcarbon.net/Shibboleth.sso">
                <Path name="secure" authType="shibboleth"
requireSession="true"/>
            </Host>
            <Host name="deepcarbon.net"
applicationId="https://deepcarbon.net/Shibboleth.sso">
                <Path name="secure" authType="shibboleth"
requireSession="true"/>
            </Host>
        </RequestMap>
</RequestMapper>

<ApplicationOverride id="https://info.deepcarbon.net/Shibboleth.sso"
entityID="https://sso.deepcarbon.net/shibboleth" />
<ApplicationOverride id="https://deepcarbon.net/Shibboleth.sso"
entityID="https://sso.deepcarbon.net/shibboleth" />

SP log:
2014-06-17 23:12:00 INFO Shibboleth.Application : adding
AssertionConsumerService for Binding
(urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST) at (/SAML2/POST)
2014-06-17 23:12:00 INFO Shibboleth.Listener : registered remoted message
endpoint (https://info.deepcarbon.net/Shibboleth.sso/SAML2/POST)

According to the SP log, looks like the service is not found however it says
it is registered. 

Can anyone help on this? Thanks!





--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Error-Message-No-peer-endpoint-available-to-which-to-send-SAML-response-tp7602241.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.