aacli.sh will not work properly with shibboleth 3.3.3

Fri Feb 15 11:14:40 EST 2019

I think you do not provide anything on port 80.

If you are using Apache in front of Tomcat, one of examples you should consider is:

<VirtualHost localhost:80>
ProxyPass /idp/ ajp://localhost:8009/idp/
</VirtualHost>

Takeshi

> 2019/02/16 0:46、Noriyuki TAKEI <ntakei at sios.com> wrote:
> 
> Hi,all.
> 
> Thanks for your prompt reply!!
> 
> I found no logs in idp-process.log when executing previous command.
> 
> As Takeshi told me,I executed the following command.
> 
> $ curl -D /dev/stderr 'http://localhost/idp/profile/admin/resolvertest?requester=https%3A%2F%2Ftest-sp1.gakunin.nii.ac.jp%2Fshibboleth-sp&principal=yatest01'
> 
> I got the following result.
> 
> HTTP/1.1 404 Not Found
> Date: Fri, 15 Feb 2019 15:35:52 GMT
> Server: Apache
> Content-Length: 228
> Content-Type: text/html; charset=iso-8859-1
> 
> <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
> <html><head>
> <title>404 Not Found</title>
> </head><body>
> <h1>Not Found</h1>
> <p>The requested URL /idp/profile/admin/resolvertest was not found on this server.</p>
> </body></html>
> 
> I guess that the 404 error above-mentioned causes this problem, but why does 404 error occur?
> 
> On Sat, Feb 16, 2019 at 12:27 AM Takeshi NISHIMURA <takeshi at nii.ac.jp> wrote:
> Hi Noriyuki,
> 
> You can do
> 
> $ curl -D /dev/stderr 'http://localhost/idp/profile/admin/resolvertest?requester=https%3A%2F%2Ftest-sp1.gakunin.nii.ac.jp%2Fshibboleth-sp&principal=yatest01'
> 
> to get more information.
> 
> Best regards,
> Takeshi
> 
> > 2019/02/15 23:20、Noriyuki TAKEI <ntakei at sios.com> wrote:
> > 
> > Hi,all
> > 
> > With  shibboleth 3.3.3, aacli.sh will not work properly.When executing the following command,I got no error, 
> > but I got the following response instead of the value which is expected to send to SP.
> > 
> > # export JAVA_HOME=/usr/local/java;  /opt/shibboleth-idp/bin/aacli.sh --principal yatest01 --requester https://test-sp1.gakunin.nii.ac.jp/shibboleth-sp
> > 
> > (http://localhost/idp/profile/admin/resolvertest?requester=https%3A%2F%2Ftest-sp1.gakunin.nii.ac.jp%2Fshibboleth-sp&principal=yatest01) http://localhost/idp/profile/admin/resolvertest?requester=https%3A%2F%2Ftest-sp1.gakunin.nii.ac.jp%2Fshibboleth-sp&principal=test001
> > 
> > What's wrong?I'd like to let me know the solution.