IdP - 'No local entity id' error message

[John Horne]

On Mon, 2014-03-17 at 16:47 +0000, Cantor, Scott wrote:
> On 3/17/14, 11:41 AM, "John Horne" <john.horne at plymouth.ac.uk> wrote:
> 
> >Hello,
> >
> >I'm trying to sort out a problem on a legacy shibboleth IdP server. It
> >is running 2.1.5 software.
> >
> >The error I am seeing in the 'idp-process' log file is:
> >
> >===============================
> >15:23:19.322 - DEBUG
> >[edu.internet2.middleware.shibboleth.common.attribute.resolver.provider.Sh
> >ibbolethAttributeResolver:325] - Resolving data connector StoredId for
> >principal xxx
> >15:23:19.326 - ERROR
> >[edu.internet2.middleware.shibboleth.common.attribute.AttributeAuthorityCL
> >I:350] - Error encountered during attribute resolution and filtering
> >edu.internet2.middleware.shibboleth.common.attribute.resolver.AttributeRes
> >olutionException: No local entity ID given in resolution context
> 
> That's from running the command line tool, if you don't supply a
> requesting SP entityID on the command line as a parameter. It isn't
> relevant that I can see to any running IdP scenario.
> 
Interesting. You are correct, it is from 'aacli', but an SP entityid is
supplied on the command-line using the '--requester' option. What I just
did now was add an '--issuer' option too, and that worked (got no
error). However, I noticed in the log file DEBUG statements saying:

==========
No entity metadata available, unable to check if entity is in group
http://ukfederation.org.uk
==========

Seems like something is going wrong with the metadata.




John.

-- 
----------------------------------------------------
John Horne                   Tel: +44 (0)1752 587287
Plymouth University, UK      Fax: +44 (0)1752 587001