Receiving unable to locate metadata error for testshib sp for IDP siteminderidp.shaku08.edu

[Cantor, Scott]

On 6/20/18, 11:50 AM, "users on behalf of Kunal Shah" <users-bounces at shibboleth.net on behalf of ks186033 at gmail.com> wrote:

> I started with pointing it to testshib SP so that I can check if IDP is giving proper response. I found error. Since I didn't
> have more logs, I setup shibboleth SP on my other centos server and enabled debug logs.

Since you took the time to do this right and actually test with a real SP, I'll weigh in...

> Didn't find much in shibd.log but ssl error log in SP's /var/log/httpd/ssl_error_log file makes these entries. 

Anything from mod_shib in the Apache log is just a partial subset of logs in native.log. The error is weird and I have no idea what it is, it doesn't even look like a mod_shib error despite it apparently being one, but I'd check the real log before assuming anything more.

If there's nothing in shibd.log, it isn't getting far enough to start processing the SAML POST at all. That would fit there being an error in native.log, but that's not typical. Of course if the IdP is broken and sending garbage anything is possible.

-- Scott