shibsp::ConfigurationException error

[Cantor, Scott]

On 3/2/15, 3:15 PM, "Mike De Lise" <mdelise at gmail.com> wrote:
>
>The weird thing is, last night I was getting
>opensaml:saml2md:MetadataException Unable to locate metadata for
>identity provider.

It's a related error that just doesn't come up often, you now have 
metadata but it's wrong. There are no IDPSSODescriptor roles present with 
the right protocol constants in them to use.

>shibd.log shows
>
>2015-03-02 13:47:05 DEBUG Shibboleth.Listener [2]: dispatching message
>(default/Login::run::SAML2SI)
>2015-03-02 13:47:05 INFO Shibboleth.SessionInitiator.SAML2 [2]: unable
>to locate SAML 2.0 identity provider role for provider
>(https://10.10.0.37/idp/shibboleth)
>2015-03-02 13:47:05 DEBUG Shibboleth.Listener [2]: dispatching message
>(default/Login::run::Shib1SI)
>2015-03-02 13:47:05 INFO Shibboleth.SessionInitiator.Shib1 [2]: unable
>to locate Shibboleth-aware identity provider role for provider
>(https://10.10.0.37/idp/shibboleth)

They're on INFO because neither protocol is required in any given case, 
but collectively that's the error. It tries to issue requests using each 
protocol it knows about and then gives up. The metadata for the IdP is 
wrong, basically.

-- Scott