Using Shibboleth with radius

Christoph Pleger Christoph.Pleger at cs.tu-dortmund.de
Mon Jul 21 08:15:17 UTC 2025


Hello,

I upgraded a machine with a very old Debian OS version to a newer, but
still old Debian version, thereby going from shibboleth 2.6.0 to 3.0.4.
Unfortunately, though shibd starts with the old configuration file, the
apache does not work like expected anymore, but the corresponding web
page shows in the browser:

Unknown or Unusable Identity Provider

The identity provider supplying your login credentials is not
authorized for use with this service or does not support the necessary
capabilities.

To report this problem, please contact the site administrator at
root at localhost.

Please include the following error message in any email:

Identity provider lookup failed at
(https://example.tu-dortmund.de/otrs/index.pl/index.pl)

EntityID: https://idp.example.org/idp/shibboleth

opensaml::saml2md::MetadataException: Unable to locate metadata for
identity provider (https://idp.example.org/idp/shibboleth)

Please help. I attached the configuration file (with DNS names
replaced), I hope that it helps to understand how the whole thing
should work ..

Regards
  Christoph 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: shibboleth2.xml
Type: application/xml
Size: 12764 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20250721/8121254d/attachment.wsdl>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://shibboleth.net/pipermail/users/attachments/20250721/8121254d/attachment.sig>


More information about the users mailing list