Receiving unable to locate metadata error for testshib sp for IDP siteminderidp.shaku08.edu

[Kunal Shah]

On further research I found that this error is actually coming from
/var/log/httpd/ssl_error_log

[Wed Jun 20 14:28:38.091829 2018] [mod_shib:error] [pid 1251] [client
123.201.54.30:18945] Invalid attribute: Id, referer:
https://cassoidp.shaku08.edu/affwebservices/public/saml2sso?SMASSERTIONREF=QUERY&SAMLRequest=fZJNU4MwFEX%2FCpN9CY1SSqYwg%2B3CzlTt2OrCjRPgVTJCgrzE6r83gB910204uTf3DAsUTd3yzJpK3cObBTTeR1Mr5MOHhNhOcS1QIleiAeSm4LvsZsOZH%2FC200YXuiZehgidkVottULbQLeD7l0W8HC%2FSUhlTIucUqxkjm0JjfaN6%2FGhtHTnznJdg6l8RE37aEa3d7s98VaOkUr0qX8ZhXCYLFsfK%2FFqg%2FkQIg6HI%2BQ4ViJtbV7LgvYDmKOJt14l5DkI4%2FhChBDnRRjF85AFBYSHQySiGYvzMHIYooW1QiOUSQgLpvNJMJuwYD%2B95Czi4fyJeNvvyVdSlVK9nPeTjxDy6%2F1%2BOxlXPUKHwyIHkHTRP5IPxd2J9%2FOx4kc2SU%2FVDmJPteCv2wU96RlLW37rgterrXauPr2srvVx2YEwkJApoel45f%2BfkX4B&RelayState=ss%3Amem%3A531967b93ad043fd65b381dc9f4dbf64562e71e1fa30a29efcad90074d7c0a1b&SAMLTRANSACTIONID=23fc9d12-a96163d2-1ebf1443-77008b54-13086b4d-ee8

does this make sense? something to do with cert ?

I have converted using dos2unix and reuploaded and error persists.




On Wed, Jun 20, 2018 at 3:07 PM Kunal Shah <ks186033 at gmail.com> wrote:

> Hi Rod,
>
> Thanks for your help. I will check each step by step.
>
> I am using CA Single Sign On policy server as IDP. To test that IDP I use
> testshib's SP. it is at SP I get this error.
>
> My IDP guys are saying once SAML leaves IDP, only SP can tell what is
> wrong with it and if it can be fixed at IDP side, it will be fixed. But
> only SP can say why it is not accepting SAML.
>
> Thanks
>
> On Wed, Jun 20, 2018 at 2:34 PM, Rod Widdowson <rdw at steadingsoftware.com>
> wrote:
>
>> Kunai,
>> I'm sorry, but have a busy day ahead and I (like all the Shibboleth
>> developers) am not paid to answer mail here. You will need to reply on the
>> generosity of other but
>>
>> > xmltooling::UnmarshallingException at (
>> https://www.testshib.org/Shibboleth.sso/SAML2/POST)
>>
>> It seems unlikely to the level of impossibility that this doesn't log
>> anything so it may be to do with testshib.
>>
>> > Invalid attribute: Id
>>
>> On your side I'd look for bogosity introduced into the SAML pushed to the
>> SP. In particular an attribute called Id
>>
>> Also can I confirm that you are testing a Shibboleth SP pushing SAML to
>> the SP?
>>
>> > (https://www.ca.com/us/products/ca-single-sign-on.html
>>
>> Doesn't sound very Shibboleth to me.
>>
>> --
>> For Consortium Member technical support, see
>> https://wiki.shibboleth.net/confluence/x/coFAAg
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180620/c78c9529/attachment.html>