SP not working in prod

[Herriott, Cascade]

Hi all,

We're trying to implement shibboleth and have successfully done so with our dev idP (which is on V3), but when we try to perform the same action with our production idP (currently on V2) we run into errors (see below).

I am wondering if the different versioning is causing the issue? If so, we do plan on upgrading our production idP to V3 in the next couple of weeks. If it's something outside of that I'm up for suggestions.

When targeting our production idP we can authenticate against it, but then we run into issues and shibboleth errors out.

I see two possible issue points.


1)      In the Shibd.log I noticed that the key algorithm don't match up.


XMLTooling.CredentialCriteria [2]: key algorithm didn't match ('AES' != 'RSA')

I dug around that for a bit and it looks like we're still getting attributes passed back to us so I think this issue is resolving itself.


2)      What looks more likely the culprit is this error I found in the native.log file



ERROR Shibboleth.Listener [15288] isapi_shib_extension: socket call (unknown) resulted in error (10054): Unknown error



I've compared this against our dev idp and we do not get this error in there.

Can anyone point me in the right direction?

Thanks,

-Cascade

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180427/fefff935/attachment.html>