"The application you have accessed is not registered for use with this service." while testing shibboleth-idp on testshib
Remi Mayrand-Provencher
remi.mayrand-provencher at inLibro.com
Wed Jul 22 15:59:23 EDT 2015
Hi, it's my first time trying to install Shibboleth idp 3 and I've been
trying to make it working for a while now, and the best I could get from
testshib when trying to test it was the page at this URL:
https://184.107.146.250/idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZJNT4MwHMa%2FCukdyssYrBkkuB1cMpUM9ODFFOhGk9Ji%2F8WXby8bU%2BfB3Zr0eenzS5dAO9GTbDCt3LHXgYGxPjohgZwuEjRoSRQFDkTSjgExNSmyuy3xHZf0WhlVK4GsDIBpw5VcKQlDx3TB9Buv2eNum6DWmB4IxtA7ZsyHlleO0gdcjIdKCWZaB0DhY6yP84eiRNZ61HFJj4m%2Ffi%2BeOZ4bOd5s7vihi3nT4%2FEJey7Y2bxjDdesNrgoHpC1WSfopaHVLAjqBaXxfO8v4op68yaO4jCmQe021SgDGNhGgqHSJMh3vdB2I9v3S2
9BvIiEwTOy8vPSGy4bLg%2FXsVSTCMhtWeb2NOiJaTiNGQUoXR7hklOxvsB9PZZ%2BM0bpf0Thh6gN%2FRJftEyVPbkfYzfrXAlef1qZEOp9pRk1LEEewulk%2Bfsd0i8%3D&RelayState=cookie%3A1437592673_1eac
Here is what it contains :
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<title>Web Login Service - Unsupported Request</title>
<link rel="stylesheet"type="text/css"href="/idp/css/main.css <view-source:https://184.107.146.250/idp/css/main.css>">
</head>
<body>
<div class="wrapper">
<div class="container">
<header>
<img src="/idp/images/dummylogo.png <view-source:https://184.107.146.250/idp/images/dummylogo.png>"alt="Replace or remove this logo">
<h3>Web Login Service - Unsupported Request</h3>
</header>
<div class="content">
The application you have accessed is not registered for use with this service.</div>
</div>
<footer>
<div class="container container-footer">
<p class="footer-text">Insert your footer text here.</p>
</div>
</footer>
</div>
</body>
</html>
I installed my shibboleth-idp on a server and I am testing it from my
local browser. I can access https://184.107.146.250/idp/status from my
local computer (where 184.107.146.250 is my server's IP) and I get this
result :
### Operating Environment Information
operating_system: Linux
operating_system_version: 2.6.32-5-amd64
operating_system_architecture: amd64
jdk_version: 1.7.0_75
available_cores: 4
used_memory: 345 MB
maximum_memory: 773 MB
### Identity Provider Information
idp_version: 3.1.2
start_time: 2015-07-22T14:42:55-04:00
current_time: 2015-07-22T15:14:07-04:00
uptime: 1871692 ms
service: shibboleth.LoggingService
last successful reload attempt: 2015-07-22T18:42:45Z
last reload attempt: 2015-07-22T18:42:45Z
service: shibboleth.ReloadableAccessControlService
last successful reload attempt: 2015-07-22T18:42:48Z
last reload attempt: 2015-07-22T18:42:48Z
service: shibboleth.MetadataResolverService
last successful reload attempt: 2015-07-22T18:42:48Z
last reload attempt: 2015-07-22T18:42:48Z
metadata source: ShibbolethMetadata
service: shibboleth.RelyingPartyResolverService
last successful reload attempt: 2015-07-22T18:42:48Z
last reload attempt: 2015-07-22T18:42:48Z
service: shibboleth.NameIdentifierGenerationService
last successful reload attempt: 2015-07-22T18:42:48Z
last reload attempt: 2015-07-22T18:42:48Z
service: shibboleth.AttributeResolverService
last successful reload attempt: 2015-07-22T18:42:47Z
last reload attempt: 2015-07-22T18:42:47Z
service: shibboleth.AttributeFilterService
last successful reload attempt: 2015-07-22T18:42:47Z
last reload attempt: 2015-07-22T18:42:47Z
Here is the content of idp-process.log when I try to test my idp:
2015-07-22 15:21:49,564 - DEBUG
[org.opensaml.profile.action.impl.DecodeMessage:64] - Profile Action
DecodeMessage: Decoding message using message decoder of ty
pe
org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder
for this request
2015-07-22 15:21:49,565 - DEBUG
[org.opensaml.messaging.decoder.servlet.BaseHttpServletRequestXMLMessageDecoder:64]
- Beginning to decode message from HttpServl
etRequest
2015-07-22 15:21:49,565 - DEBUG
[org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:64]
- Decoded RelayState: cookie:1437592673_1eac
2015-07-22 15:21:49,565 - DEBUG
[org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:96]
- Base64 decoding and inflating SAML message
2015-07-22 15:21:49,566 - DEBUG
[org.opensaml.core.xml.util.XMLObjectSupport:161] - Parsing InputStream
into DOM document
2015-07-22 15:21:49,566 - DEBUG
[org.opensaml.core.xml.util.XMLObjectSupport:171] - Unmarshalling DOM
parsed from InputStream
2015-07-22 15:21:49,567 - DEBUG
[org.opensaml.core.xml.util.XMLObjectSupport:183] - InputStream
succesfully unmarshalled
2015-07-22 15:21:49,567 - DEBUG
[org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:79]
- Decoded SAML message
2015-07-22 15:21:49,567 - DEBUG
[org.opensaml.core.xml.util.XMLObjectSupport:236] - Marshalling XMLObject
2015-07-22 15:21:49,568 - DEBUG
[org.opensaml.core.xml.util.XMLObjectSupport:239] - XMLObject already
had cached DOM, returning that element
2015-07-22 15:21:49,569 - DEBUG [PROTOCOL_MESSAGE:121] -
<?xml version="1.0" encoding="UTF-8"?>
<samlp:AuthnRequest
AssertionConsumerServiceURL="https://sp.testshib.org/Shibboleth.sso/SAML2/POST"
Destination="https://184.107.146.250/idp/profile/SAML2/Redirect/SSO"
ID="_dab433c9aa86f298ba16d87858a3c0db"
IssueInstant="2015-07-22T19:17:53Z"
ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Version="2.0" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
<saml:Issuer
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://sp.testshib.org/shibboleth-sp</saml:Issuer>
<samlp:NameIDPolicy AllowCreate="1"/>
</samlp:AuthnRequest>
2015-07-22 15:21:49,570 - DEBUG
[org.opensaml.messaging.decoder.servlet.BaseHttpServletRequestXMLMessageDecoder:70]
- Successfully decoded message from HttpServletRequest.
2015-07-22 15:21:49,570 - DEBUG
[org.opensaml.profile.action.impl.DecodeMessage:68] - Profile Action
DecodeMessage: Incoming request decoded into a message of type
org.opensaml.saml.saml2.core.impl.AuthnRequestImpl
2015-07-22 15:21:49,571 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] -
Profile Action PopulateAuditContext: Skipping field 'fauth' not included
in audit format
2015-07-22 15:21:49,571 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] -
Profile Action PopulateAuditContext: Skipping field 'D' not included in
audit format
2015-07-22 15:21:49,572 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] -
Profile Action PopulateAuditContext: Skipping field 'pasv' not included
in audit format
2015-07-22 15:21:49,572 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] -
Profile Action PopulateAuditContext: Adding 1 value for field 'b'
2015-07-22 15:21:49,572 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] -
Profile Action PopulateAuditContext: Adding 1 value for field 'I'
2015-07-22 15:21:49,572 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] -
Profile Action PopulateAuditContext: Skipping field 'p' not included in
audit format
2015-07-22 15:21:49,573 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154] -
Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of
type 'org.opensaml.saml.common.binding.impl.CheckMessageVersionHandler'
on INBOUND message context
2015-07-22 15:21:49,574 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] -
Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on
message context containing a message of type
'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'
2015-07-22 15:21:49,575 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154] -
Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of
type
'org.opensaml.saml.saml1.binding.impl.SAML1ArtifactRequestIssuerHandler'
on INBOUND message context
2015-07-22 15:21:49,575 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] -
Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on
message context containing a message of type
'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'
2015-07-22 15:21:49,576 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154] -
Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of
type 'org.opensaml.saml.common.binding.impl.SAMLProtocolAndRoleHandler'
on INBOUND message context
2015-07-22 15:21:49,576 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] -
Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on
message context containing a message of type
'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'
2015-07-22 15:21:49,577 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154] -
Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of
type 'org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler'
on INBOUND message context
2015-07-22 15:21:49,578 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] -
Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on
message context containing a message of type
'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'
2015-07-22 15:21:49,578 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:198]
- Metadata document did not contain a descriptor for entity
https://sp.testshib.org/shibboleth-sp
2015-07-22 15:21:49,578 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:281]
- Metadata document did not contain any role descript
ors of type {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor for
entity https://sp.testshib.org/shibboleth-sp
2015-07-22 15:21:49,578 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:252]
- Metadata document does not contain a role of type
{urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor supporting
protocol urn:oasis:names:tc:SAML:2.0:protocol for entity
https://sp.testshib.org/shibboleth-sp
2015-07-22 15:21:49,579 - INFO
[org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:108] -
Message Handler: No metadata returned for
https://sp.testshib.org/shibboleth-sp in role
{urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor with protocol
urn:oasis:names:tc:SAML:2.0:protocol
2015-07-22 15:21:49,579 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154] -
Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler of
type
'org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler'
on INBOUND message context
2015-07-22 15:21:49,580 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] -
Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler on
message context containing a message of type
'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'
2015-07-22 15:21:49,580 - DEBUG
[org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:109]
- Message Handler: No metadata context found, nothing to do
2015-07-22 15:21:49,580 - DEBUG
[net.shibboleth.idp.saml.profile.impl.InitializeRelyingPartyContextFromSAMLPeer:132]
- Profile Action InitializeRelyingPartyContextFromSAMLPeer: Attaching
RelyingPartyContext based on SAML peer https://sp.testshib.org/shibboleth-sp
2015-07-22 15:21:49,581 - DEBUG
[net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:284]
- Resolving relying party configuration
2015-07-22 15:21:49,581 - DEBUG
[net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:290]
- Profile request is unverified, returning configuration
shibboleth.UnverifiedRelyingParty
2015-07-22 15:21:49,581 - DEBUG
[net.shibboleth.idp.profile.impl.SelectRelyingPartyConfiguration:136] -
Profile Action SelectRelyingPartyConfiguration: Found relying party
configuration shibboleth.UnverifiedRelyingParty for request
2015-07-22 15:21:49,582 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] -
Profile Action PopulateAuditContext: Adding 1 value for field 'SP'
2015-07-22 15:21:49,582 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] -
Profile Action PopulateAuditContext: Adding 1 value for field 'IDP'
2015-07-22 15:21:49,583 - WARN
[net.shibboleth.idp.profile.impl.SelectProfileConfiguration:111] -
Profile Action SelectProfileConfiguration: Profile
http://shibboleth.net/ns/profiles/saml2/sso/browser is not available for
relying party configuration shibboleth.UnverifiedRelyingParty
2015-07-22 15:21:49,584 - DEBUG
[org.opensaml.saml.common.profile.logic.DefaultLocalErrorPredicate:154]
- No SAMLBindingContext or binding URI available, error must be handled
locally
2015-07-22 15:21:49,586 - DEBUG [org.apache.velocity:100] - No class
specified for #evaluate() context, so #set calls will now alter the
global context and no longer be local. This is a change from earlier
versions due to VELOCITY-704. If you need references within #evaluate
to stay local, please use the automatically provided $evaluate namespace
instead (e.g. #set($evaluate.foo = 'bar') and $evaluate.foo).
2015-07-22 15:22:48,357 - DEBUG
[org.opensaml.storage.impl.MemoryStorageService:94] - Running cleanup task
2015-07-22 15:22:48,357 - DEBUG
[org.opensaml.storage.impl.MemoryStorageService:122] - No expired
records found in storage
2015-07-22 15:27:47,470 - INFO
[net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategy:327]
- Default key version has not changed, still secret1
2015-07-22 15:32:48,357 - DEBUG
[org.opensaml.storage.impl.MemoryStorageService:94] - Running cleanup task
2015-07-22 15:32:48,357 - DEBUG
[org.opensaml.storage.impl.MemoryStorageService:122] - No expired
records found in storage
Is there anything obvious that I am missing? Tell me if you need
anything else to be able to better answer me.
Thank you!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150722/4304658e/attachment-0001.html>
More information about the users
mailing list