"The application you have accessed is not registered for use with this service." while testing shibboleth-idp on testshib
Remi Mayrand-Provencher
remi.mayrand-provencher at inLibro.com
Wed Jul 22 16:32:49 EDT 2015
Thank you for answering so quickly!
I've never seen anywhere that I had to configure attribute-filter.xml. I
just searched a little bit but couldn't find any recommendations about
what to change in this file.
What do you think are some changes to do in attribute-filter.xml? Also,
according to the testshib configure page, the only changes needed are in
metadata-provider.xml and as far as I know I changed it the right way.
Here are both of those files :
Attribute-filter.xml
<?xml version="1.0" encoding="UTF-8"?>
<!--
This file is an EXAMPLE policy file. While the policy presented in
this
example file is illustrative of some simple cases, it relies on the
names of
non-existent example services and the example attributes
demonstrated in the
default attribute-resolver.xml file.
Deployers should refer to the documentation for a complete list of
components
and their options.
-->
<afp:AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"
xmlns:afp="urn:mace:shibboleth:2.0:afp"
xmlns:basic="urn:mace:shibboleth:2.0:afp:mf:basic"
xmlns:saml="urn:mace:shibboleth:2.0:afp:mf:saml"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="urn:mace:shibboleth:2.0:afp
http://shibboleth.net/schema/idp/shibboleth-afp.xsd
urn:mace:shibboleth:2.0:afp:mf:basic
http://shibboleth.net/schema/idp/shibboleth-afp-mf-basic.xsd
urn:mace:shibboleth:2.0:afp:mf:saml
http://shibboleth.net/schema/idp/shibboleth-afp-mf-saml.xsd">
<!-- Release some attributes to an SP. -->
<afp:AttributeFilterPolicy id="example1">
<afp:PolicyRequirementRule
xsi:type="basic:AttributeRequesterString" value="https://sp.example.org" />
<afp:AttributeRule attributeID="eduPersonPrincipalName">
<afp:PermitValueRule xsi:type="basic:ANY" />
</afp:AttributeRule>
<afp:AttributeRule attributeID="uid">
<afp:PermitValueRule xsi:type="basic:ANY" />
</afp:AttributeRule>
<afp:AttributeRule attributeID="mail">
<afp:PermitValueRule xsi:type="basic:ANY" />
</afp:AttributeRule>
</afp:AttributeFilterPolicy>
<!-- Release eduPersonAffiliation to two specific SPs. -->
<afp:AttributeFilterPolicy id="example2">
<afp:PolicyRequirementRule xsi:type="basic:OR">
<basic:Rule xsi:type="basic:AttributeRequesterString"
value="https://sp.example.org" />
<basic:Rule xsi:type="basic:AttributeRequesterString"
value="https://another.example.org/shibboleth" />
</afp:PolicyRequirementRule>
<afp:AttributeRule attributeID="eduPersonScopedAffiliation">
<afp:PermitValueRule xsi:type="basic:ANY" />
</afp:AttributeRule>
</afp:AttributeFilterPolicy>
</afp:AttributeFilterPolicyGroup>
metadata-provider.xml
<?xml version="2.0" encoding="UTF-8"?>
<!-- This file is an EXAMPLE metadata configuration file. -->
<MetadataProvider id="ShibbolethMetadata"
xsi:type="ChainingMetadataProvider"
xmlns="urn:mace:shibboleth:2.0:metadata"
xmlns:resource="urn:mace:shibboleth:2.0:resource"
xmlns:security="urn:mace:shibboleth:2.0:security"
xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="urn:mace:shibboleth:2.0:metadata
http://shibboleth.net/schema/idp/shibboleth-metadata.xsd
urn:mace:shibboleth:2.0:resource
http://shibboleth.net/schema/idp/shibboleth-resource.xsd
urn:mace:shibboleth:2.0:security
http://shibboleth.net/schema/idp/shibboleth-security.xsd
urn:oasis:names:tc:SAML:2.0:metadata
http://docs.oasis-open.org/security/saml/v2.0/saml-schema-metadata-2.0.xsd">
<!--
==========================================================================================
-->
<!-- Metadata
Configuration -->
<!-- -->
<!-- Below you place the mechanisms which define how to load the
metadata for the SP you will -->
<!-- provide a service to. -->
<!-- -->
<!-- Two examples are provided. The Shibboleth Documentation
at -->
<!--
https://wiki.shibboleth.net/confluence/display/IDP30/MetadataConfiguration
-->
<!-- provides more details. -->
<!-- -->
<!-- NOTE. This file SHOULD NOT contain the metadata for this
IdP. -->
<!-- -->
<!--
==========================================================================================
-->
<!-- Example HTTP metadata provider. Use this if you want to download
the metadata from a remote service.
You *MUST* provider the SignatureValidationFilter in order to
function securely.
Get the PubLic key, and validate it via some out of band
mechanism, from the
party publishing the metadata
The EntityRoleWhiteList saves memory by only loading metadata
from entity types
that you will interoperate with.
<MetadataProvider id="HTTPMetadata"
xsi:type="FileBackedHTTPMetadataProvider"
backingFile="/opt/shibboleth-idp/metadata/testshib-providers.xml"
metadataURL="http://www.testshib.org/metadata/testshib-providers.xml"/>
<MetadataFilter xsi:type="SignatureValidation"
requireSignedMetadata="false">
<PublicKey>
THIS IS AN EXAMPLE
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg0TyQAP/tIvOH89EtaX
uRRn8SYzTj7W1TbNY4VvBmobjkRmSkki4hH9x4sQpi635wn6WtXTN/FNNmkTK3N/
LspmBWxfZS+n+cc7I82E5yvCAPX67QsZgqgglp2W5dvK/FsMMCS6X6SVqzBLMP88
NenXKxY+HMxMs0sT0UKYh1cAEqadrHRBO65aDBcm5a0sBVYt9K6pgaOHrp/zSIbh
nR5tFFLjBbtFktDpHL3AdGBH3OYidNGKBO3tJ3Ms7LeKXsM0+0Y4P+9fHZINL2X3
E2N6GVnKs5PZTg9sP0FtIpAbYm/+zCx7Yj1ET/Er8mDd6tNVGSQsn9s5xUBwGqn1
4wIDAQAB
</PublicKey>
</MetadataFilter>
<MetadataFilter xsi:type="EntityRoleWhiteList">
<RetainedRole>md:SPSSODescriptor</RetainedRole>
</MetadataFilter>
</MetadataProvider>
-->
<!-- Example file metadata provider. Use this if you want to load
metadata
from a local file. You might use this if you have some local SPs
which are not "federated" but you wish to offer a service to.
If you do not provide a SignatureValidation filter then you *have*
to know that the file is valid.
<MetadataProvider id="LocalMetadata"
xsi:type="FilesystemMetadataProvider" metadataFile="PATH_TO_YOUR_METADATA"/>
-->
</MetadataProvider>
On 15-07-22 04:16 PM, McKean, Brandon Scott - mckeanbs wrote:
> Hi Remi,
>
> When I first was setting up Shibboleth I'd get this error when my
> attribute-filter.xml needed adjusting to allow testshib. This is
> assuming you already have metadata for them configured in
> metadata-providers.xml and their file there. I believe testshib has
> some examples to this end, but if now I can share mine.
>
> Brandon
>
> On Wed, 2015-07-22 at 15:59 -0400, Remi Mayrand-Provencher wrote:
>> Hi, it's my first time trying to install Shibboleth idp 3 and I've
>> been trying to make it working for a while now, and the best I could
>> get from testshib when trying to test it was the page at this URL:
>> https://184.107.146.250/idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZJNT4MwHMa%2FCukdyssYrBkkuB1cMpUM9ODFFOhGk9Ji%2F8WXby8bU%2BfB3Zr0eenzS5dAO9GTbDCt3LHXgYGxPjohgZwuEjRoSRQFDkTSjgExNSmyuy3xHZf0WhlVK4GsDIBpw5VcKQlDx3TB9Buv2eNum6DWmB4IxtA7ZsyHlleO0gdcjIdKCWZaB0DhY6yP84eiRNZ61HFJj4m%2Ffi%2BeOZ4bOd5s7vihi3nT4%2FEJey7Y2bxjDdesNrgoHpC1WSfopaHVLAjqBaXxfO8v4op68yaO4jCmQe021SgDGNhGgqHSJMh3vdB2I9v3S2
>> 9BvIiEwTOy8vPSGy4bLg%2FXsVSTCMhtWeb2NOiJaTiNGQUoXR7hklOxvsB9PZZ%2BM0bpf0Thh6gN%2FRJftEyVPbkfYzfrXAlef1qZEOp9pRk1LEEewulk%2Bfsd0i8%3D&RelayState=cookie%3A1437592673_1eac
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__184.107.146.250_idp_profile_SAML2_Redirect_SSO-3FSAMLRequest-3DfZJNT4MwHMa-252FCukdyssYrBkkuB1cMpUM9ODFFOhGk9Ji-252F8WXby8bU-252BfB3Zr0eenzS5dAO9GTbDCt3LHXgYGxPjohgZwuEjRoSRQFDkTSjgExNSmyuy3xHZf0WhlVK4GsDIBpw5VcKQlDx3TB9Buv2eNum6DWmB4IxtA7ZsyHlleO0gdcjIdKCWZaB0DhY6yP84eiRNZ61HFJj4m-252Ffi-252BeOZ4bOd5s7vihi3nT4-252FEJey7Y2bxjDdesNrgoHpC1WSfopaHVLAjqBaXxfO8v4op68yaO4jCmQe021SgDGNhGgqHSJMh3vdB2I9v3S29BvIiEwTOy8vPSGy4bLg-252FXsVSTCMhtWeb2NOiJaTiNGQUoXR7hklOxvsB9PZZ-252BM0bpf0Thh6gN-252FRJftEyVPbkfYzfrXAlef1qZEOp9pRk1LEEewulk-252Bfsd0i8-253D-26RelayState-3Dcookie-253A1437592673-5F1eac&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=9DTUyvzo75ZjbG8QsnPgqZWYBmIMT4gmn4eS-COwVS4&e=>
>>
>> Here is what it contains :
>>
>> <!DOCTYPE html>
>> <html>
>> <head>
>> <meta charset="utf-8">
>> <title>Web Login Service - Unsupported Request</title>
>> <link rel="stylesheet"type="text/css"href="/idp/css/main.css <view-source:https://184.107.146.250/idp/css/main.css>">
>> </head>
>>
>> <body>
>> <div class="wrapper">
>> <div class="container">
>> <header>
>> <img src="/idp/images/dummylogo.png <view-source:https://184.107.146.250/idp/images/dummylogo.png>"alt="Replace or remove this logo">
>> <h3>Web Login Service - Unsupported Request</h3>
>> </header>
>>
>> <div class="content">
>> The application you have accessed is not registered for use with this service.</div>
>> </div>
>>
>> <footer>
>> <div class="container container-footer">
>> <p class="footer-text">Insert your footer text here.</p>
>> </div>
>> </footer>
>>
>> </div>
>> </body>
>> </html>
>>
>> I installed my shibboleth-idp on a server and I am testing it from my
>> local browser. I can access https://184.107.146.250/idp/status
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__184.107.146.250_idp_status&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=tawisOrEZkPFIhRQtxDq5RJY1wH3rhd12mdYjW6LZzU&e=>
>> from my local computer (where 184.107.146.250 is my server's IP) and
>> I get this result :
>>
>> ### Operating Environment Information
>> operating_system: Linux
>> operating_system_version: 2.6.32-5-amd64
>> operating_system_architecture: amd64
>> jdk_version: 1.7.0_75
>> available_cores: 4
>> used_memory: 345 MB
>> maximum_memory: 773 MB
>>
>> ### Identity Provider Information
>> idp_version: 3.1.2
>> start_time: 2015-07-22T14:42:55-04:00
>> current_time: 2015-07-22T15:14:07-04:00
>> uptime: 1871692 ms
>>
>> service: shibboleth.LoggingService
>> last successful reload attempt: 2015-07-22T18:42:45Z
>> last reload attempt: 2015-07-22T18:42:45Z
>>
>> service: shibboleth.ReloadableAccessControlService
>> last successful reload attempt: 2015-07-22T18:42:48Z
>> last reload attempt: 2015-07-22T18:42:48Z
>>
>> service: shibboleth.MetadataResolverService
>> last successful reload attempt: 2015-07-22T18:42:48Z
>> last reload attempt: 2015-07-22T18:42:48Z
>>
>> metadata source: ShibbolethMetadata
>>
>> service: shibboleth.RelyingPartyResolverService
>> last successful reload attempt: 2015-07-22T18:42:48Z
>> last reload attempt: 2015-07-22T18:42:48Z
>>
>> service: shibboleth.NameIdentifierGenerationService
>> last successful reload attempt: 2015-07-22T18:42:48Z
>> last reload attempt: 2015-07-22T18:42:48Z
>>
>> service: shibboleth.AttributeResolverService
>> last successful reload attempt: 2015-07-22T18:42:47Z
>> last reload attempt: 2015-07-22T18:42:47Z
>>
>> service: shibboleth.AttributeFilterService
>> last successful reload attempt: 2015-07-22T18:42:47Z
>> last reload attempt: 2015-07-22T18:42:47Z
>>
>> Here is the content of idp-process.log when I try to test my idp:
>>
>> 2015-07-22 15:21:49,564 - DEBUG
>> [org.opensaml.profile.action.impl.DecodeMessage:64] - Profile Action
>> DecodeMessage: Decoding message using message decoder of ty
>> pe
>> org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder
>> for this request
>> 2015-07-22 15:21:49,565 - DEBUG
>> [org.opensaml.messaging.decoder.servlet.BaseHttpServletRequestXMLMessageDecoder:64]
>> - Beginning to decode message from HttpServl
>> etRequest
>> 2015-07-22 15:21:49,565 - DEBUG
>> [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:64]
>> - Decoded RelayState: cookie:1437592673_1eac
>> 2015-07-22 15:21:49,565 - DEBUG
>> [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:96]
>> - Base64 decoding and inflating SAML message
>> 2015-07-22 15:21:49,566 - DEBUG
>> [org.opensaml.core.xml.util.XMLObjectSupport:161] - Parsing
>> InputStream into DOM document
>> 2015-07-22 15:21:49,566 - DEBUG
>> [org.opensaml.core.xml.util.XMLObjectSupport:171] - Unmarshalling DOM
>> parsed from InputStream
>> 2015-07-22 15:21:49,567 - DEBUG
>> [org.opensaml.core.xml.util.XMLObjectSupport:183] - InputStream
>> succesfully unmarshalled
>> 2015-07-22 15:21:49,567 - DEBUG
>> [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:79]
>> - Decoded SAML message
>> 2015-07-22 15:21:49,567 - DEBUG
>> [org.opensaml.core.xml.util.XMLObjectSupport:236] - Marshalling XMLObject
>> 2015-07-22 15:21:49,568 - DEBUG
>> [org.opensaml.core.xml.util.XMLObjectSupport:239] - XMLObject already
>> had cached DOM, returning that element
>> 2015-07-22 15:21:49,569 - DEBUG [PROTOCOL_MESSAGE:121] -
>> <?xml version="1.0" encoding="UTF-8"?>
>> <samlp:AuthnRequest
>>
>> AssertionConsumerServiceURL="https://sp.testshib.org/Shibboleth.sso/SAML2/POST"
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_Shibboleth.sso_SAML2_POST&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=JVoxNB4p0Lqn1Uy4BICUmhtJ28KhrttWpRnSlopoYpM&e=>
>>
>> Destination="https://184.107.146.250/idp/profile/SAML2/Redirect/SSO"
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__184.107.146.250_idp_profile_SAML2_Redirect_SSO&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=nPpeFfPLNwohHYupQKjXsIBTHOQdN_Iya1SqELwLwvA&e=>
>> ID="_dab433c9aa86f298ba16d87858a3c0db"
>> IssueInstant="2015-07-22T19:17:53Z"
>> ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
>> Version="2.0" xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol">
>> <saml:Issuer
>> xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://sp.testshib.org/shibboleth-sp
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_shibboleth-2Dsp&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=B8iniOxp9z2q9YajBjgw_00GQcyqRkgMaoTIHyplOUc&e=></saml:Issuer>
>> <samlp:NameIDPolicy AllowCreate="1"/>
>> </samlp:AuthnRequest>
>> 2015-07-22 15:21:49,570 - DEBUG
>> [org.opensaml.messaging.decoder.servlet.BaseHttpServletRequestXMLMessageDecoder:70]
>> - Successfully decoded message from HttpServletRequest.
>> 2015-07-22 15:21:49,570 - DEBUG
>> [org.opensaml.profile.action.impl.DecodeMessage:68] - Profile Action
>> DecodeMessage: Incoming request decoded into a message of type
>> org.opensaml.saml.saml2.core.impl.AuthnRequestImpl
>> 2015-07-22 15:21:49,571 - DEBUG
>> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] -
>> Profile Action PopulateAuditContext: Skipping field 'fauth' not
>> included in audit format
>> 2015-07-22 15:21:49,571 - DEBUG
>> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] -
>> Profile Action PopulateAuditContext: Skipping field 'D' not included
>> in audit format
>> 2015-07-22 15:21:49,572 - DEBUG
>> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] -
>> Profile Action PopulateAuditContext: Skipping field 'pasv' not
>> included in audit format
>> 2015-07-22 15:21:49,572 - DEBUG
>> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] -
>> Profile Action PopulateAuditContext: Adding 1 value for field 'b'
>> 2015-07-22 15:21:49,572 - DEBUG
>> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] -
>> Profile Action PopulateAuditContext: Adding 1 value for field 'I'
>> 2015-07-22 15:21:49,572 - DEBUG
>> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198] -
>> Profile Action PopulateAuditContext: Skipping field 'p' not included
>> in audit format
>> 2015-07-22 15:21:49,573 - DEBUG
>> [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154] -
>> Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler
>> of type
>> 'org.opensaml.saml.common.binding.impl.CheckMessageVersionHandler' on
>> INBOUND message context
>> 2015-07-22 15:21:49,574 - DEBUG
>> [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] -
>> Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler
>> on message context containing a message of type
>> 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'
>> 2015-07-22 15:21:49,575 - DEBUG
>> [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154] -
>> Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler
>> of type
>> 'org.opensaml.saml.saml1.binding.impl.SAML1ArtifactRequestIssuerHandler'
>> on INBOUND message context
>> 2015-07-22 15:21:49,575 - DEBUG
>> [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] -
>> Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler
>> on message context containing a message of type
>> 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'
>> 2015-07-22 15:21:49,576 - DEBUG
>> [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154] -
>> Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler
>> of type
>> 'org.opensaml.saml.common.binding.impl.SAMLProtocolAndRoleHandler' on
>> INBOUND message context
>> 2015-07-22 15:21:49,576 - DEBUG
>> [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] -
>> Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler
>> on message context containing a message of type
>> 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'
>> 2015-07-22 15:21:49,577 - DEBUG
>> [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154] -
>> Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler
>> of type
>> 'org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler' on
>> INBOUND message context
>> 2015-07-22 15:21:49,578 - DEBUG
>> [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] -
>> Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler
>> on message context containing a message of type
>> 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'
>> 2015-07-22 15:21:49,578 - DEBUG
>> [org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:198]
>> - Metadata document did not contain a descriptor for entity
>> https://sp.testshib.org/shibboleth-sp
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_shibboleth-2Dsp&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=B8iniOxp9z2q9YajBjgw_00GQcyqRkgMaoTIHyplOUc&e=>
>> 2015-07-22 15:21:49,578 - DEBUG
>> [org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:281]
>> - Metadata document did not contain any role descript
>> ors of type {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor for
>> entity https://sp.testshib.org/shibboleth-sp
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_shibboleth-2Dsp&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=B8iniOxp9z2q9YajBjgw_00GQcyqRkgMaoTIHyplOUc&e=>
>> 2015-07-22 15:21:49,578 - DEBUG
>> [org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:252]
>> - Metadata document does not contain a role of type
>> {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor supporting
>> protocol urn:oasis:names:tc:SAML:2.0:protocol for entity
>> https://sp.testshib.org/shibboleth-sp
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_shibboleth-2Dsp&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=B8iniOxp9z2q9YajBjgw_00GQcyqRkgMaoTIHyplOUc&e=>
>> 2015-07-22 15:21:49,579 - INFO
>> [org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:108]
>> - Message Handler: No metadata returned for
>> https://sp.testshib.org/shibboleth-sp
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_shibboleth-2Dsp&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=B8iniOxp9z2q9YajBjgw_00GQcyqRkgMaoTIHyplOUc&e=>
>> in role {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor with
>> protocol urn:oasis:names:tc:SAML:2.0:protocol
>> 2015-07-22 15:21:49,579 - DEBUG
>> [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154] -
>> Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler
>> of type
>> 'org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler'
>> on INBOUND message context
>> 2015-07-22 15:21:49,580 - DEBUG
>> [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175] -
>> Profile Action WebFlowMessageHandlerAdaptor: Invoking message handler
>> on message context containing a message of type
>> 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'
>> 2015-07-22 15:21:49,580 - DEBUG
>> [org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:109]
>> - Message Handler: No metadata context found, nothing to do
>> 2015-07-22 15:21:49,580 - DEBUG
>> [net.shibboleth.idp.saml.profile.impl.InitializeRelyingPartyContextFromSAMLPeer:132]
>> - Profile Action InitializeRelyingPartyContextFromSAMLPeer: Attaching
>> RelyingPartyContext based on SAML peer
>> https://sp.testshib.org/shibboleth-sp
>> <https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_shibboleth-2Dsp&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=B8iniOxp9z2q9YajBjgw_00GQcyqRkgMaoTIHyplOUc&e=>
>> 2015-07-22 15:21:49,581 - DEBUG
>> [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:284]
>> - Resolving relying party configuration
>> 2015-07-22 15:21:49,581 - DEBUG
>> [net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:290]
>> - Profile request is unverified, returning configuration
>> shibboleth.UnverifiedRelyingParty
>> 2015-07-22 15:21:49,581 - DEBUG
>> [net.shibboleth.idp.profile.impl.SelectRelyingPartyConfiguration:136]
>> - Profile Action SelectRelyingPartyConfiguration: Found relying party
>> configuration shibboleth.UnverifiedRelyingParty for request
>> 2015-07-22 15:21:49,582 - DEBUG
>> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] -
>> Profile Action PopulateAuditContext: Adding 1 value for field 'SP'
>> 2015-07-22 15:21:49,582 - DEBUG
>> [net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220] -
>> Profile Action PopulateAuditContext: Adding 1 value for field 'IDP'
>> 2015-07-22 15:21:49,583 - WARN
>> [net.shibboleth.idp.profile.impl.SelectProfileConfiguration:111] -
>> Profile Action SelectProfileConfiguration: Profile
>> http://shibboleth.net/ns/profiles/saml2/sso/browser
>> <https://urldefense.proofpoint.com/v2/url?u=http-3A__shibboleth.net_ns_profiles_saml2_sso_browser&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=ypkb6uCEkF0NTlFBeu591LWR4mbomtGGbYpWaufdpRg&e=>
>> is not available for relying party configuration
>> shibboleth.UnverifiedRelyingParty
>> 2015-07-22 15:21:49,584 - DEBUG
>> [org.opensaml.saml.common.profile.logic.DefaultLocalErrorPredicate:154]
>> - No SAMLBindingContext or binding URI available, error must be
>> handled locally
>> 2015-07-22 15:21:49,586 - DEBUG [org.apache.velocity:100] - No class
>> specified for #evaluate() context, so #set calls will now alter the
>> global context and no longer be local. This is a change from earlier
>> versions due to VELOCITY-704. If you need references within #evaluate
>> to stay local, please use the automatically provided $evaluate
>> namespace instead (e.g. #set($evaluate.foo = 'bar') and $evaluate.foo).
>> 2015-07-22 15:22:48,357 - DEBUG
>> [org.opensaml.storage.impl.MemoryStorageService:94] - Running cleanup
>> task
>> 2015-07-22 15:22:48,357 - DEBUG
>> [org.opensaml.storage.impl.MemoryStorageService:122] - No expired
>> records found in storage
>> 2015-07-22 15:27:47,470 - INFO
>> [net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategy:327]
>> - Default key version has not changed, still secret1
>> 2015-07-22 15:32:48,357 - DEBUG
>> [org.opensaml.storage.impl.MemoryStorageService:94] - Running cleanup
>> task
>> 2015-07-22 15:32:48,357 - DEBUG
>> [org.opensaml.storage.impl.MemoryStorageService:122] - No expired
>> records found in storage
>>
>> Is there anything obvious that I am missing? Tell me if you need
>> anything else to be able to better answer me.
>> Thank you!
>> --
>> To unsubscribe from this list send an email tousers-unsubscribe at shibboleth.net <mailto:users-unsubscribe at shibboleth.net>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150722/1395fb85/attachment-0001.html>
More information about the users
mailing list