Encryption Parameters error

[Mary Wiegand]

Thanks for the response Scott. 

That doesn't seem to make a difference. I currently have all the encryptionAssertions set to False and I still get the errors I sent previously. 

Mary 
-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of users-request at shibboleth.net
Sent: Wednesday, March 08, 2017 3:24 PM
To: users at shibboleth.net
Subject: users Digest, Vol 69, Issue 47

Send users mailing list submissions to
	users at shibboleth.net

To subscribe or unsubscribe via the World Wide Web, visit
	http://shibboleth.net/mailman/listinfo/users
or, via email, send a message with subject or body 'help' to
	users-request at shibboleth.net

You can reach the person managing the list at
	users-owner at shibboleth.net

When replying, please edit your Subject line so it is more specific than "Re: Contents of users digest..."


Today's Topics:

   1. Re: Unable to download shibboleth-2.6.0-2.1.x86_64.rpm from
      openSUSE mirror, package missing? (Cantor, Scott)
   2. Encryption Parameters error (Mary Wiegand)
   3. Re: Encryption Parameters error (Cantor, Scott)


----------------------------------------------------------------------

Message: 1
Date: Wed, 8 Mar 2017 22:27:35 +0000
From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Users <users at shibboleth.net>
Subject: Re: Unable to download shibboleth-2.6.0-2.1.x86_64.rpm from
	openSUSE mirror, package missing?
Message-ID: <B9442F1C-140F-47D5-9634-9018981AAB8D at osu.edu>
Content-Type: text/plain; charset="utf-8"

On 3/8/17, 5:25 PM, "users on behalf of Ryan Larscheidt" <users-bounces at shibboleth.net on behalf of larscheidt at wisc.edu> wrote:

> That worked, thank you!

I wasn't sure that trick would keep working. I would guess they'll plug it eventually if they realize people have figured it out.

-- Scott



------------------------------

Message: 2
Date: Wed, 8 Mar 2017 23:19:43 +0000
From: Mary Wiegand <mwiegand at bastyr.edu>
To: "users at shibboleth.net" <users at shibboleth.net>
Subject: Encryption Parameters error
Message-ID:
	<91E6DED00B6EB54FA8C003273890EFA258E74595 at MITHRANDIR2.middleearth.prv>
Content-Type: text/plain; charset="us-ascii"

I'm getting the following errors in my shibboleth process log:
Delegation request was not explicitly indicated, using default value: NOT_REQUESTED DEBUG [net.shibboleth.idp.saml.saml2.profile.delegation.impl.PopulateDelegationContext:294] - Issuance of a delegated Assertion is not in effect, skipping further processing DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:305] - Profile Action PopulateEncryptionParameters: Encryption for assertions (true), identifiers (false), attributes(false) DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:315] - Profile Action PopulateEncryptionParameters: Resolving EncryptionParameters for request DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:380] - Profile Action PopulateEncryptionParameters: Adding entityID to resolution criteria DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:391] - Profile Action PopulateEncryptionParameters: Adding role metadata to resolution criteria WARN [org.opensaml.xmlsec.impl.BasicEncryptionParametersResolver:248] - Validation failure: Failed to resolve both a data and a key encryption credential DEBUG [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:331] - Profile Action PopulateEncryptionParameters: Failed to resolve EncryptionParameters WARN [net.shibboleth.idp.saml.saml2.profile.impl.PopulateEncryptionParameters:348] - Profile Action PopulateEncryptionParameters: Resolver returned no EncryptionParameters

I'm pretty sure it has something to do with it being delegated but I haven't been able to find anything useful to change or test. Everything else appears to be working properly though.
Any ideas would be appreciated.

-Mary
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170308/74f6df06/attachment-0001.html>

------------------------------

Message: 3
Date: Wed, 8 Mar 2017 23:23:46 +0000
From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Users <users at shibboleth.net>
Subject: Re: Encryption Parameters error
Message-ID: <421E24E9-69F9-4268-954C-D1C0700C98F5 at osu.edu>
Content-Type: text/plain; charset="utf-8"

You are requiring encryption, which is the default, and the SP in question has no key in its metadata. If you want it to work you either disable encryption in an override for that SP or make a global decision to make encryption optional via the documented property for that, in which case any SP without a key will work silently without encryption, regardless of what data you happen to be sending it.

-- Scott



------------------------------

Subject: Digest Footer

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

------------------------------

End of users Digest, Vol 69, Issue 47
*************************************