users Digest, Vol 48, Issue 159
Mathi Vairaperumal
mvairaperumal at coca-cola.com
Fri Jun 26 15:00:29 EDT 2015
Dave,
Thanks for the quick response.
We will request enabling the IdP logs level to WARn and see what the actual time is
Thanks
__________________________________________
Mathi Vairaperumal | Capgemini US LLC, Detroit
Custom Solutions Development
TOGAF 8 Certified Architect
Certified Scrum Master
Cell: +1 248 250 0498 (Office)
Cell: +1 248 767 6594 (Personal)
mathivanan.vairaperumal at capgemini.com
______________________________________
-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of users-request at shibboleth.net
Sent: Friday, June 26, 2015 2:45 PM
To: users at shibboleth.net
Subject: users Digest, Vol 48, Issue 159
Send users mailing list submissions to
users at shibboleth.net
To subscribe or unsubscribe via the World Wide Web, visit
http://shibboleth.net/mailman/listinfo/users
or, via email, send a message with subject or body 'help' to
users-request at shibboleth.net
You can reach the person managing the list at
users-owner at shibboleth.net
When replying, please edit your Subject line so it is more specific than "Re: Contents of users digest..."
Today's Topics:
1. RE: idP v3 - Integrating with 3rd party API (Cantor, Scott)
2. Re: Message Expired Exception while integrating with
Shibboleth (Emilio Penna)
3. Re: Message Expired Exception while integrating with
Shibboleth (IAM David Bantz)
4. Error When Using University's Idp (Antelmo Aguilar)
----------------------------------------------------------------------
Message: 1
Date: Fri, 26 Jun 2015 18:23:53 +0000
From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Users <users at shibboleth.net>
Subject: RE: idP v3 - Integrating with 3rd party API
Message-ID:
<9846A6064BD102419D06814DD0D78DE11A5FB0 at CIO-TNC-D2MBX02.osuad.osu.edu>
Content-Type: text/plain; charset="utf-8"
> Regarding building a custom data connector, V2 is well documented
> regarding spring custom config schema etc. For v3, I generally read
> the source code. Could you point me to where I should start?
Oh, it's largely the same, though the specific package APIs are not exactly the same.
There's nothing fundamentally different, the same steps are involved.
-- Scott
------------------------------
Message: 2
Date: Fri, 26 Jun 2015 15:42:32 -0300
From: Emilio Penna <emilio.penna at seciu.edu.uy>
To: users at shibboleth.net
Subject: Re: Message Expired Exception while integrating with
Shibboleth
Message-ID: <558D9D18.70903 at seciu.edu.uy>
Content-Type: text/plain; charset=windows-1252
a simple first thing to check: clock difference between SP and IdP?
it seems like there's almost 1 day of difference between time informed by SP and time of the assertion ...
SP:
> The system encountered an error at Fri Jun 26 17:12:25 2015
Assertion:
<ns2:Assertion ...
IssueInstant="2015-06-25T18:40:16Z"
...
<ns2:Conditions NotBefore="2015-06-25T18:39:46Z"
NotOnOrAfter="2015-06-25T18:41:46Z"
>
regards
Emilio
El 26/06/2015 a las 03:15 p.m., Mathi Vairaperumal escribi?:
> Hi,
>
>
>
> We are getting the following exceptions while integrating with
> Shibboleth. Can you please help us in resolving the issue?
>
>
>
> Siteminder Assertion is returning the response with all the required
> SAML attributes. Please find attached the SAML response for the
> exception environment
>
>
>
> Please let us know if you need any additional details
>
>
> opensaml::SecurityPolicyException
>
> The system encountered an error at Fri Jun 26 17:12:25 2015
>
> To report this problem, please contact the site administrator at
> secops at coca-cola.com <mailto:secops at coca-cola.com>.
>
> Please include the following message in any email:
>
> *opensaml::SecurityPolicyException at
> (https://cepgdev.coke.com/Shibboleth.sso/SAML2/POST)*
>
> Message expired, was issued too long ago.
>
>
>
>
>
>
>
> *Thanks*
>
> __________________________________________
>
> Mathi Vairaperumal *|* *Capgemini US LLC,***Detroit Custom Solutions
> Development
>
> */TOGAF 8 Certified Architect /*
> */Certified Scrum Master/*
>
>
> */Cell: +1 248 250 0498 (Office)/*
> Cell: +1 248 767 6594 (Personal)
> mathivanan.vairaperumal at capgemini.com <http://www.capgemini.com/>
>
> ______________________________________
>
>
>
>
> ----------------------------------------------------------------------
> --
>
> CONFIDENTIALITY NOTICE
> NOTICE: This message is intended for the use of the individual or
> entity to which it is addressed and may contain information that is
> confidential, privileged and exempt from disclosure under applicable
> law. If the reader of this message is not the intended recipient, you
> are hereby notified that any printing, copying, dissemination,
> distribution, disclosure or forwarding of this communication is
> strictly prohibited. If you have received this communication in error,
> please contact the sender immediately and delete it from your system. Thank You.
>
> ----------------------------------------------------------------------
> --
>
>
>
------------------------------
Message: 3
Date: Fri, 26 Jun 2015 10:44:10 -0800
From: IAM David Bantz <dabantz at alaska.edu>
To: Shib Users <users at shibboleth.net>
Subject: Re: Message Expired Exception while integrating with
Shibboleth
Message-ID:
<CAJ9XvwEpeKqCkEDQL4tXxHgFHx=+DhYeKzsfXbyXSJbjfR0Tng at mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
The SP and IdP don't agree on the time. The IdP logs at WARN level will detail the time in the message and what the IdP thinks is the current time.
David Bantz
U Alaska IAM
On Fri, Jun 26, 2015 at 10:15 AM, Mathi Vairaperumal < mvairaperumal at coca-cola.com> wrote:
> Hi,
>
>
>
> We are getting the following exceptions while integrating with Shibboleth.
> Can you please help us in resolving the issue?
>
>
>
> Siteminder Assertion is returning the response with all the required
> SAML attributes. Please find attached the SAML response for the
> exception environment
>
>
>
> Please let us know if you need any additional details
> opensaml::SecurityPolicyException
>
> The system encountered an error at Fri Jun 26 17:12:25 2015
>
> To report this problem, please contact the site administrator at
> secops at coca-cola.com.
>
> Please include the following message in any email:
>
> *opensaml::SecurityPolicyException at
> (https://cepgdev.coke.com/Shibboleth.sso/SAML2/POST
> <https://cepgdev.coke.com/Shibboleth.sso/SAML2/POST>)*
>
> Message expired, was issued too long ago.
>
>
>
>
>
>
>
> *Thanks*
>
> __________________________________________
>
> Mathi Vairaperumal *|* *Capgemini US LLC,* Detroit Custom Solutions
> Development
>
> *TOGAF 8 Certified Architect *
> *Certified Scrum Master*
>
>
> *Cell: +1 248 250 0498 <%2B1%20248%20250%200498> (Office)*
> Cell: +1 248 767 6594 (Personal)
> mathivanan.vairaperumal at capgemini.com <http://www.capgemini.com/>
>
> ______________________________________
>
>
>
> ------------------------------
>
> CONFIDENTIALITY NOTICE
> NOTICE: This message is intended for the use of the individual or
> entity to which it is addressed and may contain information that is
> confidential, privileged and exempt from disclosure under applicable
> law. If the reader of this message is not the intended recipient, you
> are hereby notified that any printing, copying, dissemination,
> distribution, disclosure or forwarding of this communication is
> strictly prohibited. If you have received this communication in error,
> please contact the sender immediately and delete it from your system. Thank You.
>
> ------------------------------
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150626/b8c0f858/attachment-0001.html>
------------------------------
Message: 4
Date: Fri, 26 Jun 2015 14:45:51 -0400
From: Antelmo Aguilar <Antelmo.Aguilar.17 at nd.edu>
To: Shib Users <users at shibboleth.net>
Subject: Error When Using University's Idp
Message-ID:
<CAKOQVm1QsMCT89rdZgmAH2FPvx_91iYGWbJuRijKn+p9v9cRJQ at mail.gmail.com>
Content-Type: text/plain; charset="utf-8"
Hello again,
I am trying to configure my Shibboleth SP to talk to the university's test Idp now, but I get the following error after I Iogin that prevents me from getting the attributes from the Idp:
2015-06-26 14:18:42 ERROR Shibboleth.AttributeResolver.Query [5]: exception during SAML query to
https://login-test.cc.nd.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery:
CURLSOAPTransport failed while contacting SOAP endpoint (
https://login-test.cc.nd.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery):
Unknown SSL protocol error in connection to login-test.cc.nd.edu:8443
2015-06-26 14:18:42 ERROR Shibboleth.AttributeResolver.Query [5]: unable to obtain a SAML response from attribute authority
2015-06-26 14:18:42 INFO Shibboleth.SessionCache [5]: new session created:
ID (_90039f523c20b7ddad28967c41ce6aaa) IdP (
https://login-test.cc.nd.edu/idp/shibboleth)
Protocol(urn:oasis:names:tc:SAML:2.0:protocol) Address (129.74.58.169)
When I do *curl -v https://login-test.cc.nd.edu:8443 <https://login-test.cc.nd.edu:8443>*, I get the following error:
* About to connect() to login-test.cc.nd.edu port 8443 (#0)
* Trying 129.74.1.122... connected
* Connected to login-test.cc.nd.edu (129.74.1.122) port 8443 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* NSS error -5961
* Closing connection #0
* SSL connect error
curl: (35) SSL connect error
I am currently trying to fix the issue, but thought it might be a good idea to ask for some help here in case you guys have come across this issue before. I really appreciate any help.
Thanks!
Antelmo
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150626/78de416c/attachment.html>
------------------------------
Subject: Digest Footer
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
------------------------------
End of users Digest, Vol 48, Issue 159
**************************************
________________________________
CONFIDENTIALITY NOTICE
NOTICE: This message is intended for the use of the individual or entity to which it is addressed and may contain information that is confidential, privileged and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are hereby notified that any printing, copying, dissemination, distribution, disclosure or forwarding of this communication is strictly prohibited. If you have received this communication in error, please contact the sender immediately and delete it from your system. Thank You.
________________________________
More information about the users
mailing list