Error after authentication: No peer endpoint available to which to send SAML response

[Andrej Gregorka]

I fixed that, however i'm getting different error now after login:
opensaml::FatalProfileException at (https://netshib.ixtlan-dev.si/Shibboleth.sso/SAML2/POST)
Unable to establish security of incoming assertion.

The shibd.log shows following messages:
2015-04-13 18:54:46 WARN OpenSAML.MessageDecoder.SAML2 [3]: no metadata found, can't establish identity of issuer (https://netshib.ixtlan-dev.si/idp/shibboleth)
2015-04-13 18:54:46 WARN Shibboleth.SSO.SAML2 [3]: no metadata found, can't establish identity of issuer (https://netshib.ixtlan-dev.si/idp/shibboleth)
2015-04-13 18:54:46 WARN Shibboleth.SSO.SAML2 [3]: detected a problem with assertion: Unable to establish security of incoming assertion.


I'm not sure which metadata is not found. In shibboleth2.config i have defined the location of IdP metadata:
        <MetadataProvider type="XML" uri="https://netshib.ixtlan-dev.si:8443/idp/shibboleth" 
        backingFilePath="idp92-metadata.xml" reloadInterval="7200"/>


Should SP also have the location of SP metadata? I'm not sure where to define that though, I have only defined the loction of SP metadata on IdP.




-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Monday, April 13, 2015 6:36 PM
To: Shib Users
Subject: Re: Error after authentication: No peer endpoint available to which to send SAML response

On 4/13/15, 12:32 PM, "Andrej Gregorka" <Andrej.Gregorka at ixtlan-team.si> wrote:

>Thank you fort the reply. It's possible my SP is misconfigured, but i'm not sure where or what to look for.
>
>I have changed the following settings in /etc/shibboleth/shibboleth2.xml file:
>
>1) Application Defaults:
>    <ApplicationDefaults entityID="https://netshib.ixtlan-dev.si:8443/idp/shibboleth"

That's not your SP's entityID, that's your IdP's entityID.

-- Scott

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net