SAML1

[Arnal, Pascal]

Hi,

I'm come back on this problem after working on the others.
I can't get SAML 1 assertion in my SP with logs :

Log of the SP :
2015-03-16 09:57:49 ERROR Shibboleth.AttributeResolver.Query [4]: exception during SAML query to https://IDP_URL:8443/idp/profile/SAML1/SOAP/AttributeQuery: CURLSOAPTransport failed while contacting SOAP endpoint (https://IDP_URL:8443/idp/profile/SAML1/SOAP/AttributeQuery): Failed connect to IDP_URL:8443; Connection refused
2015-03-16 09:57:49 ERROR Shibboleth.AttributeResolver.Query [4]: unable to obtain a SAML response from attribute authority
2015-03-16 09:57:49 INFO Shibboleth.SessionCache [4]: new session created: ID (_30b2fc7d8496d63b20467ccf2fb26a14) IdP (https://IDP_URL/idp/shibboleth) Protocol(urn:oasis:names:tc:SAML:1.1:protocol) Address (xxxxxx)

Log of the IDP :
2015-03-16 09:57:49,294 - INFO [Shibboleth-Audit.SSO:241] - 20150316T135749Z|urn:mace:shibboleth:1.0:profiles:AuthnRequest|_E24C384BDFDF7BEB364C1AAAB6F9FD79!1426514268|https://SP_URL/sp/shibboleth|http://shibboleth.net/ns/profiles/saml1/sso/browser|https://IDP_URL/idp/shibboleth|urn:oasis:names:tc:SAML:1.0:profiles:browser-post|_e58df4062eb390cce5bd7e694f9a56f3|USER_ID|urn:oasis:names:tc:SAML:1.0:am:password|SHIB_USER_UID,SHIB_USER_MAIL,SHIB_USER_GIVENNAME,SHIB_USER_MEMBER,SHIB_USER_COMPANY,SHIB_USER_DISPLAYNAME|AAdzZWNyZXQxdYIXcddaXPJZZXKROo7iKwSfAFTAgLZPE4PRW5NTm550rKdSiekmTYKcsqTotFMWxkBnt5Cj580oOEhAfuabFvgMZK6EIqHBSLFPmOlEAvanq/Vg9uJjXf4d0IINqNiRAAOHVVgzD1cSKXb1q71PIvuGtlGZ1w/c4mXCPAk=|_d6aa8474d8316cd3b15653c793242dd3

Can you please help me ?

Thanks

-----Message d'origine-----
De : users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] De la part de Cantor, Scott
Envoyé : 4 mars 2015 13:32
À : Shib Users
Objet : Re: SAML1

On 3/4/15, 6:23 PM, "Arnal, Pascal" <Pascal.Arnal at lacapitale.com> wrote:


>
>But the result is identical.
>No value in my headers.

Then either the IdP isn't releasing attributes (see IdP log) or you are incorrect about the lack of a message about a query failing in the SP log.
Based on what you posted, it's the latter, which is what I told you to start with.

-- Scott

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

AVIS: Ce courriel privilégié et confidentiel est destiné à la seule personne ou entité à laquelle il est adressé. Pour toute autre personne, toute action prise en rapport à ce courriel ainsi que toute lecture, reproduction, transmission et/ou divulgation d'une partie ou de l'ensemble de celui-ci est interdite. Si vous n'êtes pas la personne autorisée à recevoir ce courriel, S.V.P. le retourner à l'expéditeur et le détruire. Bien que ce courriel ait été traité contre les virus, il est de la responsabilité du destinataire de s'assurer que l'envoi en est exempt. Nos communications avec vous peuvent contenir des renseignements confidentiels ou protégés par le secret professionnel. Si vous désirez que nous communiquions avec vous par un autre moyen de transmission que le courrier électronique ordinaire non sécurisé, veuillez nous en aviser.

NOTICE: This privileged and confidential email is intended only for the individual or entity to whom it is addressed. With regard to all others, any action related with this email as well as any reading, reproduction, transmission and/or dissemination in whole or in part of the information included in this email is prohibited. If you are not the addressee, immediately return the email to sender prior to destroying all copies. Even if this email is believed to be free from any virus, it is the responsibility of the recipient to make sure that it is virus exempt. Our communications to you may contain confidential information or information protected under solicitor-client privilege. Please advise if you wish us to use a mode of communication other than regular, unsecured e-mail in our communications with you.