The requested URL /idp/profile/SAML2/Redirect/SSO was not found on this server.

Thu Mar 2 08:54:48 EST 2017

Hi,

I am trying to implement a basic SSO using Shibboleth SP 2.6.0.1 with
Apache web server 2.4 and Shibboleth IDP 3.3.0.

I have successfully tested both SP and IDP with these URLs with successful
response.

Service provider:(Running in Apache web server with port 443)
*https://sp.example.org/Shibboleth.sso/Status
<https://sp.example.org/Shibboleth.sso/Status>*

Identity provider:(Running in Tomcat with port 8443)
*https://localhost:8443/idp/profile/status
<https://localhost:8443/idp/profile/status>*
(Domain name of both SP and IDP have been mapped to 127.0.0.1 is host file)
I am trying to secure one folder in the document root of my Apache web
server by adding this in apache24.config file(Supplied by Shibboleth) which
is included in apache configuration.
*<Location /secure>*
* AuthType shibboleth*
* ShibRequireSession On*
* require valid-user*
*</Location>*

When I am hitting this URL *https://localhost/secure/index.html
<https://localhost/secure/index.html>, * the request is getting redirected
to my IDP with this URL in browser. (Strange part is this URL has the
domain  name of my IDP but it doesn't have the port where IDP is
running[8443]. So I think as port number is missing, it's trying to hit the
same Apache web server with default port 443 where SP is running and
obviously this URL won't be valid. This is my thinking, please rectify if
wrong)
*https://ushydbhapanda1.us.deloitte.com/idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZJLb8IwEIT%2FSuQ7cR6UUosgBXIAqYWIQKX2UjnOllhy7NTr9PHvG14tvfS8szM7n3aCvFEtSztX6w28dYDO%2B2yURnYcJKSzmhmOEpnmDSBzghXpwz2L%2FIC11jgjjCJeigjWSaPnRmPXgC3AvksBu819QmrnWmSUKiO4qg06WtSyLI0CV%2FuIhh4MI5qviy3xsv4CqfnB63dzVyyestkizdNVloZ%2Bh34FykjnwBemobJqaX%2FLq1Rw9tpAJS2IPqlYE2%2BZJeTlRgSjEOIoHsOoDMNKQFmWwe3deCzGMQRBL0PsYKnRce0SEgXh7SCIB0G0DWMWD9kwfCZefq48k7qSev8%2Fn%2FIkQrbYbvPBqd8jWDx26wVkOjlQZsdge8X9f1t%2BgU2mF0DY%2BvDJm1aBb%2Bye4g%2FfCb1KOMW1bNVbLrPcKCm%2BvFQp8zG3wB0kJCR0elr5%2BxPTbw%3D%3D&RelayState=ss%3Amem%3Adc0eb9da120e80e9fe089fe185da947596c266d3bb8ec5d82108dfd17464b6a0
<https://ushydbhapanda1.us.deloitte.com/idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZJLb8IwEIT%2FSuQ7cR6UUosgBXIAqYWIQKX2UjnOllhy7NTr9PHvG14tvfS8szM7n3aCvFEtSztX6w28dYDO%2B2yURnYcJKSzmhmOEpnmDSBzghXpwz2L%2FIC11jgjjCJeigjWSaPnRmPXgC3AvksBu819QmrnWmSUKiO4qg06WtSyLI0CV%2FuIhh4MI5qviy3xsv4CqfnB63dzVyyestkizdNVloZ%2Bh34FykjnwBemobJqaX%2FLq1Rw9tpAJS2IPqlYE2%2BZJeTlRgSjEOIoHsOoDMNKQFmWwe3deCzGMQRBL0PsYKnRce0SEgXh7SCIB0G0DWMWD9kwfCZefq48k7qSev8%2Fn%2FIkQrbYbvPBqd8jWDx26wVkOjlQZsdge8X9f1t%2BgU2mF0DY%2BvDJm1aBb%2Bye4g%2FfCb1KOMW1bNVbLrPcKCm%2BvFQp8zG3wB0kJCR0elr5%2BxPTbw%3D%3D&RelayState=ss%3Amem%3Adc0eb9da120e80e9fe089fe185da947596c266d3bb8ec5d82108dfd17464b6a0>*

And I am getting this response
Not Found

The requested URL /idp/profile/SAML2/Redirect/SSO was not found on this
server.

And nothing is getting updated in any log of IDP.(idp-warn.log or
idp-process.log).

For your information, I can see the SAML authentication request being
generated in SP shibd.log. Here is the log.

2017-03-02 19:02:49 DEBUG Shibboleth.Listener [4]: dispatching message
(default::getHeaders::Application)
2017-03-02 19:02:49 DEBUG Shibboleth.Listener [4]: dispatching message
(default/Login::run::SAML2SI)
2017-03-02 19:02:49 DEBUG XMLTooling.StorageService [4]: inserted record (
2c6aad9c474bf8f6a36331a8617adc7d31cc9b6e0d0f7d7c3d1ce4bbb8e472f2) in
context (RelayState) with expiration (1488462169)
2017-03-02 19:02:49 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [4]:
validating input
2017-03-02 19:02:49 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [4]:
marshalling, deflating, base64-encoding the message
2017-03-02 19:02:49 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [4]:
marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
AssertionConsumerServiceURL="https://localhost/Shibboleth.sso/SAML2/POST"
Destination="https://USHYDBHAPANDA1.us.deloitte.com/idp/profile/SAML2/
Redirect/SSO
<https://ushydbhapanda1.us.deloitte.com/idp/profile/SAML2/Redirect/SSO>"
ID="_ac9f6e4583b05af0e864068313f498ed" IssueInstant="2017-03-02T13:32:49Z"
ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:
tc:SAML:2.0:assertion">https://sp.example.org/shibboleth</
saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2017-03-02 19:02:49 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [4]:
message encoded, sending redirect to client
2017-03-02 19:04:41 DEBUG Shibboleth.Listener [4]: dispatching message
(default/Login::run::SAML2SI)
2017-03-02 19:04:41 DEBUG XMLTooling.StorageService [4]: inserted record (
dc0eb9da120e80e9fe089fe185da947596c266d3bb8ec5d82108dfd17464b6a0) in
context (RelayState) with expiration (1488462281)
2017-03-02 19:04:41 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [4]:
validating input
2017-03-02 19:04:41 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [4]:
marshalling, deflating, base64-encoding the message
2017-03-02 19:04:41 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [4]:
marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
AssertionConsumerServiceURL="https://localhost/Shibboleth.sso/SAML2/POST"
Destination="https://USHYDBHAPANDA1.us.deloitte.com/idp/profile/SAML2/
Redirect/SSO
<https://ushydbhapanda1.us.deloitte.com/idp/profile/SAML2/Redirect/SSO>"
ID="_5c061e3238e6b11dcebbb07988c83e00" IssueInstant="2017-03-02T13:34:41Z"
ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Version="2.0"><saml:Issuer xmlns:saml="urn:oasis:names:
tc:SAML:2.0:assertion">https://sp.example.org/shibboleth</
saml:Issuer><samlp:NameIDPolicy AllowCreate="1"/></samlp:AuthnRequest>
2017-03-02 19:04:41 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [4]:
message encoded, sending redirect to client
Can anyone help me with this issue please ? I have to prepare this demo
within few days.

*Thanks and regards,*

*Bhawani shankar Panda*
Application developer,
Deloitte USI consulting,
Hyderabad, India
*Thanks and regards,*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170302/8a511ab4/attachment.html>