XML Parsing Error: prefix not bound to a namespace

[Brent Putman]

On 5/6/20 9:14 PM, Lohr, Donald wrote:
>
> The first url returns this message in a web browser and does not load 
> the metadata:
>
> XML Parsing Error: prefix not bound to a namespace
> Location: 
> https://it-federation-dev.jmu.edu/idp/pub/it-federation-dev-metadata.xml
> Line Number 5, Column 13:
>             <shibmd:Scope regexp="false">jmu.edu</shibmd:Scope>


I used curl to download that file in its pristine form and, *it has no 
namespace declarations whatsoever*.  It does not even have namespace 
decls for the standard ones like SAML and XML Signature.  It is utterly 
invalid.  I don't know where/how you got it, it doesn't come from 
Shibboleth software.

Additionally, as I alluded to in my original response, the Shibboleth 
software does not publish anything at /idp/pub like that.  Whatever is 
being done there, it's something that is local to your deployment.  Did 
you perhaps inherit this from someone else?  We do not and can not know 
where that file is coming from, or how it's being published like that.

You'll need to figure out what is going on in your local environment 
and configuration with respect to this URL and file.


>
> The second url returns this message in a web browser, but loads a 
> metadata file:
> *
> *This XML file does not appear to have any style information 
> associated with it. The document tree is shown below.


Just guessing that that is: 
https://it-federation-dev.jmu.edu/idp/shibboleth

That one seems at least seems to be valid XML.  That's the URL for 
accessing the "starter" IdP metadata file that our software does know 
about: idp.home/metadata/idp-metadata.xml



>
> 3) On the only Shibboleth SP (3.1.0) server we are testing with 
> running the shibd -t command returns the following message:
>
> 2020-05-06 21:03:10 ERROR XMLTooling.ParserPool : fatal error on line 
> 5, column 42, message: *prefix 'shibmd' can not be resolved to 
> namespace URI*
> 2020-05-06 21:03:10 ERROR OpenSAML.MetadataProvider.XML : error while 
> loading resource (https://dummy.jmu.edu/idp/pub/dummy-metadata.xml): 
> XML error(s) during parsing, check log for specifics
> 2020-05-06 21:03:10 WARN OpenSAML.MetadataProvider.XML : adjusted 
> reload interval to 600 seconds
> 2020-05-06 21:03:10 CRIT Shibboleth.Application : error initializing 
> MetadataProvider: XML error(s) during parsing, check log for 
> specifics overall configuration is loadable, check console or log for 
> non-fatal problems
>

Any namespace-aware XML parsing software is going to fail with the 
exact same type of error on that first /idp/pub URL.  It's 
fundamentally broken.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200506/b4cc2824/attachment.htm>