Using Shibboleth with radius
Christoph Pleger
Christoph.Pleger at cs.tu-dortmund.de
Mon Jul 21 08:15:17 UTC 2025
Hello,
I upgraded a machine with a very old Debian OS version to a newer, but
still old Debian version, thereby going from shibboleth 2.6.0 to 3.0.4.
Unfortunately, though shibd starts with the old configuration file, the
apache does not work like expected anymore, but the corresponding web
page shows in the browser:
Unknown or Unusable Identity Provider
The identity provider supplying your login credentials is not
authorized for use with this service or does not support the necessary
capabilities.
To report this problem, please contact the site administrator at
root at localhost.
Please include the following error message in any email:
Identity provider lookup failed at
(https://example.tu-dortmund.de/otrs/index.pl/index.pl)
EntityID: https://idp.example.org/idp/shibboleth
opensaml::saml2md::MetadataException: Unable to locate metadata for
identity provider (https://idp.example.org/idp/shibboleth)
Please help. I attached the configuration file (with DNS names
replaced), I hope that it helps to understand how the whole thing
should work ..
Regards
Christoph
-------------- next part --------------
A non-text attachment was scrubbed...
Name: shibboleth2.xml
Type: application/xml
Size: 12764 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20250721/8121254d/attachment.wsdl>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part
URL: <http://shibboleth.net/pipermail/users/attachments/20250721/8121254d/attachment.sig>
More information about the users
mailing list