"Credential failed name check" ERROR

[IAM David Bantz]

I haven't seen this error previously. This is early processing of incoming
request; it seems to say checking a signed request failed, but refers to
"Credential" failed, providing a CN that makes no sense either Cherwell or
to me (subjectName='CN=ualaska.cherwellondemand.com,OU=Domain Control
Validated')
Is that the CN from a certificate? Not a certificate in the SP metadata!

Pointers appreciated.

David Bantz
U Alaska

21:13:01:722  ERROR [137.229.6.120]
org.opensaml.security.x509.impl.BasicX509CredentialNameEvaluator:300 >
 Credential
failed name check: [subjectName='CN=ualaska.cherwellondemand.com,OU=Domain
Control Validated']


21:13:01:729  WARN [137.229.6.120]
net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:202 >  Profile
Action WebFlowMessageHandlerAdaptor: Exception handling message

org.opensaml.messaging.handler.MessageHandlerException: Validation of
protocol message signature failed

        at
org.opensaml.saml.common.binding.security.impl.SAMLProtocolMessageXMLSignatureSecurityHandler.doEvaluate(SAMLProtocolMessageXMLSignatureSecurityHandler.java
:145)


21:13:01:730  WARN [137.229.6.120]
org.opensaml.profile.action.impl.LogEvent:105 >  A non-proceed event
occurred while processing the request: MessageAuthenticationErr

or
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20181009/d9a03fe2/attachment.html>