No peer endpoint available to which to send SAML response

[voyage_34]

I have a working IDP/SP configuration, but suddenly requirements have
changed. We have registered our site with AKAMAI which does not allow reply
from IDP to https for the SP. Using firebug i see the following (among
others):

https://HOST/Shibboleth.sso/SAML2/POST for my SP when i have handlerSSL=true
(which is normal i guess). When i try to change to handlerSSL=false i get
the error "No peer endpoint available to which to send SAML response". I
would like for the IDP to return something like
http://HOST/Shibboleth.sso/SAML2/POST
Is that possible? And what should i change in that case?

My configuration is:

relying-party.xml (IDP):
        <metadata:MetadataProvider id="COM2CERT"
xsi:type="metadata:FileBackedHTTPMetadataProvider"
                        metadataURL="https://HOST/Shibboleth.sso/Metadata"
                       
backingFile="/opt/shibboleth-idp/metadata/com2cert-metadata.xml">
          <metadata:MetadataFilter xsi:type="metadata:ChainingFilter">
                  <metadata:MetadataFilter
xsi:type="metadata:EntityRoleWhiteList">
                     
<metadata:RetainedRole>samlmd:SPSSODescriptor</metadata:RetainedRole>
                  </metadata:MetadataFilter>
          </metadata:MetadataFilter>
        </metadata:MetadataProvider>


shibboleth2.xml (SP):
    <RequestMapper type="Native">
        <RequestMap>
                <Host name="HOST">
                </Host>
                <Host name="HOST2" applicationId="HOST2"/>
        </RequestMap>
    </RequestMapper>

    
    <ApplicationDefaults entityID="http://HOST/shibboleth"
                         REMOTE_USER="nickname eppn persistent-id
targeted-id"
                         signing="false" encryption="false">

        <Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
                checkAddress="false" handlerSSL="false" cookieProps="http"
               
exportLocation="http://localhost/Shibboleth.sso/GetAssertion"
exportACL="127.0.0.1"
                idpHistoryDays="7">

           <SSO entityID="https://idp-tek.cti.gr/idp/shibboleth">
              SAML2 SAML1
            </SSO>

            
            <Logout>SAML2 Local</Logout>

            
            <NameIDMgmt>SAML2</NameIDMgmt>

            
            <Handler type="MetadataGenerator" Location="/Metadata"
signing="false"/>

            
            <Handler type="Status" Location="/Status" acl="127.0.0.1 ::1"/>

            
            <Handler type="Session" Location="/Session"
showAttributeValues="false"/>

            
            <Handler type="DiscoveryFeed" Location="/DiscoFeed"/>
        </Sessions>





--
View this message in context: http://shibboleth.1660669.n2.nabble.com/No-peer-endpoint-available-to-which-to-send-SAML-response-tp7602625.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.