Receiving unable to locate metadata error for testshib sp for IDP siteminderidp.shaku08.edu

[Kunal Shah]

native.log shows this - it has the same error .


2018-06-20 14:28:38 DEBUG Shibboleth.Apache [1251] shib_handler: mapped
https://shibspdemo.test.edu/Shibboleth.sso/SAML2/POST to default

2018-06-20 14:28:38 DEBUG Shibboleth.Listener [1251] shib_handler: sending
message (default/SAML2/POST)

2018-06-20 14:28:38 DEBUG Shibboleth.Listener [1251] shib_handler: trying
to connect to listener

2018-06-20 14:28:38 DEBUG Shibboleth.Listener [1251] shib_handler: socket
(24) connected successfully

2018-06-20 14:28:38 DEBUG Shibboleth.Listener [1251] shib_handler: send
completed, reading response message

2018-06-20 14:28:38 ERROR Shibboleth.Listener [1251] shib_handler: remoted
message returned an error: Invalid attribute: Id

2018-06-20 14:28:38 ERROR Shibboleth.Apache [1251] shib_handler: Invalid
attribute: Id

2018-06-20 14:28:38 DEBUG Shibboleth.Apache [1537] shib_handler: mapped
https://shibspdemo.test.edu/shibboleth-sp/main.css to default

2018-06-20 14:28:38 DEBUG Shibboleth.Apache [1537] shib_handler: mapped
https://shibspdemo.test.edu/shibboleth-sp/logo.jpg to default

2018-06-20 14:28:38 DEBUG Shibboleth.Config : using local resource
(/etc/shibboleth/shibboleth2.xml), will monitor for changes

2018-06-20 14:28:38 DEBUG Shibboleth.Config : loading configuration from
external resource...


On Wed, Jun 20, 2018 at 9:36 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 6/20/18, 11:50 AM, "users on behalf of Kunal Shah" <
> users-bounces at shibboleth.net on behalf of ks186033 at gmail.com> wrote:
>
> > I started with pointing it to testshib SP so that I can check if IDP is
> giving proper response. I found error. Since I didn't
> > have more logs, I setup shibboleth SP on my other centos server and
> enabled debug logs.
>
> Since you took the time to do this right and actually test with a real SP,
> I'll weigh in...
>
> > Didn't find much in shibd.log but ssl error log in SP's
> /var/log/httpd/ssl_error_log file makes these entries.
>
> Anything from mod_shib in the Apache log is just a partial subset of logs
> in native.log. The error is weird and I have no idea what it is, it doesn't
> even look like a mod_shib error despite it apparently being one, but I'd
> check the real log before assuming anything more.
>
> If there's nothing in shibd.log, it isn't getting far enough to start
> processing the SAML POST at all. That would fit there being an error in
> native.log, but that's not typical. Of course if the IdP is broken and
> sending garbage anything is possible.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180620/7ead0ba2/attachment.html>