Receiving unable to locate metadata error for testshib sp for IDP siteminderidp.shaku08.edu
Kunal Shah
ks186033 at gmail.com
Wed Jun 20 13:07:54 EDT 2018
The message in native.log appear at 2018-06-20 14:28:38. Around same
time shibd.log says this.
2018-06-20 14:23:02 INFO Shibboleth.AttributeFilter : reload thread
started...running when signaled
2018-06-20 14:27:58 DEBUG Shibboleth.Listener [1]: dispatching message
(default::getHeaders::Application)
2018-06-20 14:27:58 DEBUG Shibboleth.Listener [1]: dispatching message
(default/Login::run::SAML2SI)
2018-06-20 14:27:58 DEBUG XMLTooling.StorageService [1]: inserted
record (531967b93ad043fd65b381dc9f4dbf64562e71e1fa30a29efcad90074d7c0a1b)
in context (RelayState) with expiration (1529505478)
2018-06-20 14:27:58 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1]:
validating input
2018-06-20 14:27:58 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1]:
marshalling, deflating, base64-encoding the message
2018-06-20 14:27:58 DEBUG XMLTooling.XMLObject [1]: starting to
marshal samlp:AuthnRequest
2018-06-20 14:27:58 DEBUG XMLTooling.XMLObject [1]: creating root
element to marshall
2018-06-20 14:27:58 DEBUG XMLTooling.XMLObject [1]: marshalling
namespace attributes for XMLObject
2018-06-20 14:27:58 DEBUG XMLTooling.XMLObject [1]: marshalling text
and child elements for XMLObject
2018-06-20 14:27:58 DEBUG XMLTooling.XMLObject [1]: starting to
marshalling saml:Issuer
2018-06-20 14:27:58 DEBUG XMLTooling.XMLObject [1]: creating root
element to marshall
2018-06-20 14:27:58 DEBUG XMLTooling.XMLObject [1]: marshalling
namespace attributes for XMLObject
2018-06-20 14:27:58 DEBUG XMLTooling.XMLObject [1]: marshalling text
and child elements for XMLObject
2018-06-20 14:27:58 DEBUG XMLTooling.XMLObject [1]: caching DOM for XMLObject
2018-06-20 14:27:58 DEBUG XMLTooling.XMLObject [1]: starting to
marshalling samlp:NameIDPolicy
2018-06-20 14:27:58 DEBUG XMLTooling.XMLObject [1]: creating root
element to marshall
2018-06-20 14:27:58 DEBUG XMLTooling.XMLObject [1]: marshalling
namespace attributes for XMLObject
2018-06-20 14:27:58 DEBUG XMLTooling.XMLObject [1]: marshalling text
and child elements for XMLObject
2018-06-20 14:27:58 DEBUG XMLTooling.XMLObject [1]: caching DOM for XMLObject
2018-06-20 14:27:58 DEBUG XMLTooling.XMLObject [1]: caching DOM for
XMLObject (document is bound)
2018-06-20 14:27:58 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1]:
marshalled message:
<samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
AssertionConsumerServiceURL="https://shibspdemo.test.edu/Shibboleth.sso/SAML2/POST"
Destination="https://cassoidp.shaku08.edu/affwebservices/public/saml2sso"
ID="_05993a5e9bc5798520ce5ff7a7629b57"
IssueInstant="2018-06-20T14:27:58Z"
ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Version="2.0"><saml:Issuer
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">https://shibdemo.shaku08.edu/shibboleth</saml:Issuer><samlp:NameIDPolicy
AllowCreate="1"/></samlp:AuthnRequest>
2018-06-20 14:27:58 DEBUG OpenSAML.MessageEncoder.SAML2Redirect [1]:
message encoded, sending redirect to client
2018-06-20 14:28:38 DEBUG Shibboleth.Listener [2]: dispatching message
(default/SAML2/POST)
2018-06-20 14:28:38 DEBUG OpenSAML.MessageDecoder.SAML2POST [2]:
validating input
2018-06-20 14:28:38 DEBUG OpenSAML.MessageDecoder.SAML2POST [2]:
decoded SAML message:
<Response xmlns="urn:oasis:names:tc:SAML:2.0:protocol"
Destination="https://shibspdemo.test.edu/Shibboleth.sso/SAML2/POST"
ID="_73633d055b0f5bab32151d6f0ee5e56db5fa"
InResponseTo="_05993a5e9bc5798520ce5ff7a7629b57"
IssueInstant="2018-06-20T14:28:36Z" Version="2.0">
<ns1:Issuer xmlns:ns1="urn:oasis:names:tc:SAML:2.0:assertion"
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">siteminderidp</ns1:Issuer>
<Status>
<StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
</Status>
<ns2:Assertion xmlns:ns2="urn:oasis:names:tc:SAML:2.0:assertion"
ID="_4e77e5062925b41245ea25d803a117639151"
Id="_4e77e5062925b41245ea25d803a117639151"
IssueInstant="2018-06-20T14:28:36Z" Version="2.0">
<ns2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity">siteminderidp</ns2:Issuer><ds:Signature
xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:SignedInfo>
<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
<ds:Reference URI="#_4e77e5062925b41245ea25d803a117639151">
<ds:Transforms>
<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
</ds:Transforms>
<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
<ds:DigestValue>z3vV+LydnKC+8l6M8x7YlAeiaAA=</ds:DigestValue>
</ds:Reference>
</ds:SignedInfo>
<ds:SignatureValue>
Y2+rsxj7tvAwvkbfIDRJDSnauSIDCzd5RC6HdaXYMlaLThdFElneWWZrTWI6JvYzhra4pUZKEkw6
PXwXbAxj7fLTOn7DEWxSLUd6h8qhOQ8E408MZ9i6b4+oMPHkz0C4k2V+3Q9FJafW2QgW0+5eamUd
15d1YhE2f+WVj6IguPHUZ7trJOPzhucG61us2w9JxIX9tBjOkllJjFXZiCKIWLrtUkxDIrxunWo8
RB5S0CA3D+dgEc49Q2hxwkDsBPss2pZQ7x01eEKkm4GjbtXQKtvqusxq0av09Ujffem9ExFoioFA
jCA1Gy3KcfqwQy9Tb3cm72yJdTlpk3xMHyfDoA==
</ds:SignatureValue>
<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
<ds:X509Data>
<ds:X509Certificate>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=
</ds:X509Certificate>
</ds:X509Data>
</ds:KeyInfo>
</ds:Signature>
<ns2:Subject>
<ns2:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">amaclead at gmail.com</ns2:NameID>
<ns2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:bearer">
<ns2:SubjectConfirmationData
InResponseTo="_05993a5e9bc5798520ce5ff7a7629b57"
NotOnOrAfter="2018-06-20T14:30:06Z"
Recipient="https://shibspdemo.test.edu/Shibboleth.sso/SAML2/POST"/>
</ns2:SubjectConfirmation>
</ns2:Subject>
<ns2:Conditions NotBefore="2018-06-20T14:28:06Z"
NotOnOrAfter="2018-06-20T14:30:06Z">
<ns2:AudienceRestriction>
<ns2:Audience>https://shibdemo.shaku08.edu/shibboleth</ns2:Audience>
</ns2:AudienceRestriction>
</ns2:Conditions>
<ns2:AuthnStatement AuthnInstant="2018-06-20T14:28:35Z"
SessionIndex="CNdmAdFDQVv3cgYKd+2OZpm8jRI=/fCDjg=="
SessionNotOnOrAfter="2018-06-20T14:30:06Z">
<ns2:AuthnContext>
<ns2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</ns2:AuthnContextClassRef>
</ns2:AuthnContext>
</ns2:AuthnStatement>
</ns2:Assertion>
</Response>
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject.Builder [2]: located
XMLObjectBuilder for element name:
{urn:oasis:names:tc:SAML:2.0:protocol}Response
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: unmarshalling DOM
element (Response)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: unmarshalling
attributes for DOM element (Response)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: processing generic attribute
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: processing generic attribute
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: processing generic attribute
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: processing generic attribute
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: processing generic attribute
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: found default
namespace declaration, adding it to the list of namespaces on the
XMLObject
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: unmarshalling
child nodes of DOM element (Response)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: processing text
content at position (0)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject.Builder [2]: located
XMLObjectBuilder for element name: ns1:Issuer
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: unmarshalling
child element (ns1:Issuer)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: unmarshalling DOM
element (ns1:Issuer)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: unmarshalling
attributes for DOM element (ns1:Issuer)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: processing generic attribute
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: found namespace
declaration, adding it to the list of namespaces on the XMLObject
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: unmarshalling
child nodes of DOM element (ns1:Issuer)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: processing text
content at position (0)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: processing text
content at position (1)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject.Builder [2]: located
XMLObjectBuilder for element name:
{urn:oasis:names:tc:SAML:2.0:protocol}Status
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: unmarshalling
child element ({urn:oasis:names:tc:SAML:2.0:protocol}Status)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: unmarshalling DOM
element (Status)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: unmarshalling
child nodes of DOM element (Status)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: processing text
content at position (0)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject.Builder [2]: located
XMLObjectBuilder for element name:
{urn:oasis:names:tc:SAML:2.0:protocol}StatusCode
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: unmarshalling
child element ({urn:oasis:names:tc:SAML:2.0:protocol}StatusCode)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: unmarshalling DOM
element (StatusCode)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: unmarshalling
attributes for DOM element (StatusCode)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: processing generic attribute
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: unmarshalling
child nodes of DOM element (StatusCode)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: element had no children
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: processing text
content at position (1)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: processing text
content at position (2)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject.Builder [2]: located
XMLObjectBuilder for element name: ns2:Assertion
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: unmarshalling
child element (ns2:Assertion)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: unmarshalling DOM
element (ns2:Assertion)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: unmarshalling
attributes for DOM element (ns2:Assertion)
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: processing generic attribute
2018-06-20 14:28:38 DEBUG XMLTooling.XMLObject [2]: processing generic attribute
2018-06-20 14:38:02 INFO XMLTooling.StorageService : purged 1 expired
record(s) from storage
Essentially it found SAML assertion and started to process. But there
is no error.
Am I missing a setting in shibd.logger? my shibd.logger is this
# set overall behavior
log4j.rootCategory=DEBUG, shibd_log, warn_log
# fairly verbose for DEBUG, so generally leave at INFO
log4j.category.XMLTooling.XMLObject=DEBUG
log4j.category.XMLTooling.KeyInfoResolver=DEBUG
log4j.category.Shibboleth.IPRange=DEBUG
log4j.category.Shibboleth.PropertySet=DEBUG
# raise for low-level tracing of SOAP client HTTP/SSL behavior
log4j.category.XMLTooling.libcurl=DEBUG
# useful categories to tune independently:
#
# tracing of SAML messages and security policies
log4j.category.OpenSAML.MessageDecoder=DEBUG
log4j.category.OpenSAML.MessageEncoder=DEBUG
log4j.category.OpenSAML.SecurityPolicyRule=DEBUG
#log4j.category.XMLTooling.SOAPClient=DEBUG
# interprocess message remoting
#log4j.category.Shibboleth.Listener=DEBUG
# mapping of requests to applicationId
log4j.category.Shibboleth.RequestMapper=DEBUG
# high level session cache operations
#log4j.category.Shibboleth.SessionCache=DEBUG
# persistent storage and caching
#log4j.category.XMLTooling.StorageService=DEBUG
# logs XML being signed or verified if set to DEBUG
log4j.category.XMLTooling.Signature.Debugger=DEBUG, sig_log
log4j.additivity.XMLTooling.Signature.Debugger=false
# the tran log blocks the "default" appender(s) at runtime
# Level should be left at INFO for this category
log4j.category.Shibboleth-TRANSACTION=INFO, tran_log
log4j.additivity.Shibboleth-TRANSACTION=false
# uncomment to suppress particular event types
#log4j.category.Shibboleth-TRANSACTION.AuthnRequest=WARN
#log4j.category.Shibboleth-TRANSACTION.Login=WARN
#log4j.category.Shibboleth-TRANSACTION.Logout=WARN
# define the appenders
log4j.appender.shibd_log=org.apache.log4j.RollingFileAppender
log4j.appender.shibd_log.fileName=/var/log/shibboleth/shibd.log
log4j.appender.shibd_log.maxFileSize=1000000
log4j.appender.shibd_log.maxBackupIndex=10
log4j.appender.shibd_log.layout=org.apache.log4j.PatternLayout
log4j.appender.shibd_log.layout.ConversionPattern=%d{%Y-%m-%d
%H:%M:%S} %p %c %x: %m%n
log4j.appender.warn_log=org.apache.log4j.RollingFileAppender
log4j.appender.warn_log.fileName=/var/log/shibboleth/shibd_warn.log
log4j.appender.warn_log.maxFileSize=1000000
log4j.appender.warn_log.maxBackupIndex=10
log4j.appender.warn_log.layout=org.apache.log4j.PatternLayout
log4j.appender.warn_log.layout.ConversionPattern=%d{%Y-%m-%d %H:%M:%S}
%p %c %x: %m%n
log4j.appender.warn_log.threshold=WARN
log4j.appender.tran_log=org.apache.log4j.RollingFileAppender
log4j.appender.tran_log.fileName=/var/log/shibboleth/transaction.log
log4j.appender.tran_log.maxFileSize=1000000
log4j.appender.tran_log.maxBackupIndex=20
log4j.appender.tran_log.layout=org.apache.log4j.PatternLayout
log4j.appender.tran_log.layout.ConversionPattern=%d{%Y-%m-%d %H:%M:%S}
%p %c %x: %m%n
log4j.appender.sig_log=org.apache.log4j.FileAppender
log4j.appender.sig_log.fileName=/var/log/shibboleth/signature.log
log4j.appender.sig_log.layout=org.apache.log4j.PatternLayout
log4j.appender.sig_log.layout.ConversionPattern=%m
On Wed, Jun 20, 2018 at 10:26 PM Cantor, Scott <cantor.2 at osu.edu> wrote:
>
> On 6/20/18, 12:52 PM, "Kunal Shah" <ks186033 at gmail.com> wrote:
>
> > native.log shows this - it has the same error .
>
> And there is absolutely no chance that shibd.log isn't logging something about it.
>
> -- Scott
>
>
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
More information about the users
mailing list