Metadata backing store does not contain any EntityDescriptors with the ID
Mohamed Lrhazi
lrhazi at cua.edu
Wed Mar 22 10:23:10 EDT 2017
Hello,
am newbie trying to add a new SP to a fairly new deployment of Shibboleth
IdP.... I have a couple that work, but this new one fails with error:
The application you have accessed is not registered for use with this
service.
Looking in the log I see that this SP was not detected apparently:
Mar 22 09:56:27 10.3.5.101 a7d49c9c9bb5[1205]: 2017-03-22 13:56:23,008 -
DEBUG
[org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver:434] -
Metadata Resolver FilesystemMetadataResolver HTTPMetadataEMAINT: *Metadata
backing store does not contain any EntityDescriptors with the ID:
https://testx32.emaint.com/SAML <https://testx32.emaint.com/SAML>*
Mar 22 09:56:27 10.3.5.101 a7d49c9c9bb5[1205]: 2017-03-22 13:56:23,008 -
DEBUG
[org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver:161]
- Metadata Resolver FilesystemMetadataResolver HTTPMetadataEMAINT: Resolved
0 candidates via EntityIdCriterion: EntityIdCriterion [id=
https://testx32.emaint.com/SAML]
Eventhough the ID seems correct in the metadata file:
[root at ibp-prod-2 customized-shibboleth-idp]# grep -r emaint.com.xml .
./conf/metadata-providers.xml: <MetadataProvider id="HTTPMetadataEMAINT"
xsi:type="FilesystemMetadataProvider"
*metadataFile="%{idp.home}/metadata/emaint.com.xml"*/>
[root at ibp-prod-2 customized-shibboleth-idp]#
[root at ibp-prod-2 customized-shibboleth-idp]#
[root at ibp-prod-2 customized-shibboleth-idp]# grep -r '
https://testx32.emaint.com/SAML' .
./conf/attribute-filter.xml: <Rule xsi:type="Requester" value="
https://testx32.emaint.com/SAML" />
*./metadata/emaint.com.xml:*
*entityID="https://testx32.emaint.com/SAML
<https://testx32.emaint.com/SAML>"*>
[root at ibp-prod-2 customized-shibboleth-idp]#
I don't seem to find any unprintable chars involved... What would cause it
to not locate the SP metadata? Could it be because the metadata file itself
is incorrect?
Are there tools to verify that?
Thanks a lot,
Mohamed.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170322/4a8ccd09/attachment.html>
More information about the users
mailing list