shibsp::ConfigurationException error

[Cantor, Scott]

On 3/2/15, 10:28 PM, "Mike De Lise" <mdelise at gmail.com> wrote:
>
>On the IDP box I did wget https://pirlxjira1/Shibboleth.sso/Metadata
>and put it in /opt/shibboleth-idp/metadata/idp-metadata.xml

That's incorrect. Put it in a separate file.

>The first part of that metadata file looks like the follow:
><md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
>ID="_8f11a0cd2126cf3e75cf86d49dc98beff68a9dec"
>entityID="https://pirlx66vm1/idp/shibboleth">

That would be what the original file contained, but that isn't what the 
SP's metadata would contain.

>Should the default /opt/shibboleth-idp/metadata/idp-metadata.xml point
>to the SP box or itself?

Itself. Ignore it.

>Is this because the acl is only for localhost?

Yes, as documented.

-- Scott