Metadata backing store does not contain any EntityDescriptors with the ID

[Matt Jamison]

What does your relying-party.xml look like for this SP?

~Matt

On Wed, Mar 22, 2017 at 10:23 AM, Mohamed Lrhazi <lrhazi at cua.edu> wrote:

> Hello,
>
> am newbie trying to add a new SP to a fairly new deployment of Shibboleth
> IdP.... I have a couple that work, but this new one fails with error:
>
> The application you have accessed is not registered for use with this
> service.
>
> Looking in the log I see that this SP was not detected apparently:
>
>
>
> Mar 22 09:56:27 10.3.5.101 a7d49c9c9bb5[1205]:  2017-03-22 13:56:23,008 -
> DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver:434]
> - Metadata Resolver FilesystemMetadataResolver HTTPMetadataEMAINT: *Metadata
> backing store does not contain any EntityDescriptors with the ID:
> https://testx32.emaint.com/SAML <https://testx32.emaint.com/SAML>*
> Mar 22 09:56:27 10.3.5.101 a7d49c9c9bb5[1205]:  2017-03-22 13:56:23,008 -
> DEBUG [org.opensaml.saml.metadata.resolver.impl.
> AbstractBatchMetadataResolver:161] - Metadata Resolver
> FilesystemMetadataResolver HTTPMetadataEMAINT: Resolved 0 candidates via
> EntityIdCriterion: EntityIdCriterion [id=https://testx32.emaint.com/SAML]
>
>
> Eventhough the ID seems correct in the metadata file:
>
> [root at ibp-prod-2 customized-shibboleth-idp]# grep -r emaint.com.xml  .
> ./conf/metadata-providers.xml:   <MetadataProvider id="HTTPMetadataEMAINT"
> xsi:type="FilesystemMetadataProvider"
> *metadataFile="%{idp.home}/metadata/emaint.com.xml"*/>
> [root at ibp-prod-2 customized-shibboleth-idp]#
>
> [root at ibp-prod-2 customized-shibboleth-idp]#
> [root at ibp-prod-2 customized-shibboleth-idp]# grep -r '
> https://testx32.emaint.com/SAML' .
> ./conf/attribute-filter.xml:            <Rule xsi:type="Requester" value="
> https://testx32.emaint.com/SAML" />
> *./metadata/emaint.com.xml:*                     *entityID="https://testx32.emaint.com/SAML
> <https://testx32.emaint.com/SAML>"*>
>
> [root at ibp-prod-2 customized-shibboleth-idp]#
>
>
> I don't seem to find any unprintable chars involved... What would cause it
> to not locate the SP metadata? Could it be because the metadata file itself
> is incorrect?
> Are there tools to verify that?
>
> Thanks a lot,
> Mohamed.
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170322/a04fe96a/attachment.html>