artifact resolution not working in idp v3

[Gerd Schering]

On 15.08.2016 13:17, Peter Schober [via Shibboleth] wrote:
> * Gerd Schering <[hidden email] </user/SendEmail.jtp?type=node&node=7627537&i=0>>
> [2016-08-14 17:54]:
>> Because our elearning platform needs artifact resolution we switched back to
>> v 2.4.
>
> But you do have the new IDP machine still running somewhere? Otherwise
> there's little to test.
>
Yes the new IdP is still running, shibboleth --> shibboleth-n3
>>
> (https://shibboleth.tubit.tu-berlin.de:8443/idp/profile/SAML2/SOAP/ArtifactResolution):
>> Connection timed out after 10001 milliseconds
>
> Well, can you connect to that endpoint (from the SP but really from
> anywhere other than the IDP itself)? There's no guesswork
> involved. Even netcat would suffice.
> You can also test this with curl even if the IDP currently does not
> answer to the hostname above. Using curl's --resolve parameter you
> wouldn't even have to adjust the local hosts file to map a request for
> an arbitrary hostname to a given IP address for curl's purposes.
> -peter
I can reach the 8843 port of the IdP from elsewhere, not only locally from the IdP 
machine itself.
I have no access to the SP, but the longer I think about the more shure I am, 
there's a firewall blocking.
So excuse me, having posted my question before ruling out this scenario.

Nevertheless, thank you very much for your answer.
Gerd
-- 





--
View this message in context: http://shibboleth.1660669.n2.nabble.com/artifact-resolution-not-working-in-idp-v3-tp7627531p7627539.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160815/e1556c1b/attachment.html>