<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-15">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-text-html" lang="x-western">
<div class="moz-text-html" lang="x-western"> Hello,<br>
<br>
I currently try to setup a test environment using shibboleth,
whereas the URIs of the IDP and SP are:<br>
IDP: <a class="moz-txt-link-freetext"
href="https://idefix.worldtalk.de/idp/">https://idefix.worldtalk.de/idp/</a><br>
SP: <a class="moz-txt-link-freetext"
href="https://idefix.worldtalk.de/sp/">https://idefix.worldtalk.de/sp/</a><br>
<br>
I already found some hints in the archive of this mailing list,
but I still got stuck with the error "<strong>Error Message: No
peer endpoint available to which to send SAML response";<br>
<br>
</strong>What happens is:<br>
* <a class="moz-txt-link-freetext"
href="https://idefix.worldtalk.de/sp/">https://idefix.worldtalk.de/sp/</a>
is redirected to the login page of the IdP<br>
* After Login credentials are entered I get the above error from
the IdP<br>
<br>
Credential Check seems ok, according to idp-processing logs. But
it seems the IdP or SP-Configuration is wrong in a way that it
isn't able to send the reply back to the SP.<br>
I already figured out, that there is a problem with the
"samlp:AuthRequest"-Message, which I assume to be sent by the SP
(unsure).<br>
It contains the parameter AssertionConsumerServiceURL=<a
class="moz-txt-link-rfc2396E"
href="https://idefix.worldtalk.de/Shibboleth.sso/SAML2/POST">"https://idefix.worldtalk.de/Shibboleth.sso/SAML2/POST"</a>
which seems to be wrong (should be /sp/Shibboleth.sso not
/Shibboleth.sso). This seems to cause the later problem with
//// Endpoint with Location '<a class="moz-txt-link-freetext"
href="https://idefix.worldtalk.de/sp/Shibboleth.sso/SAML2/POST">https://idefix.worldtalk.de/sp/Shibboleth.sso/SAML2/POST</a>'
discarded because neither its Location nor ResponseLocation
match ACS URL '<a class="moz-txt-link-freetext"
href="https://idefix.worldtalk.de/Shibboleth.sso/SAML2/POST">https://idefix.worldtalk.de/Shibboleth.sso/SAML2/POST</a>'
////. And in the end the Error message regarding the peer
endpoint, right?<br>
<br>
I need to know where I must change a <a
class="moz-txt-link-rfc2396E"
href="https://idefix.worldtalk.de">"https://idefix.worldtalk.de"</a>
to <a class="moz-txt-link-rfc2396E"
href="https://idefix.worldtalk.de/sp/">"https://idefix.worldtalk.de/sp/"</a>;
I looked in the config files for it but didn't find it...<br>
<br>
Question: Which configuration file needs adaption? Which
line/tag/parameter is probably the root of the problem?<br>
<br>
Thank's a lot.<br>
<br>
Stefan<br>
<br>
<br>
idp-processing.log:<br>
========= CUT HERE ============<br>
18:14:15.474 - DEBUG [PROTOCOL_MESSAGE:113] - <br>
<?xml version="1.0"
encoding="UTF-8"?><samlp:AuthnRequest
xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
AssertionConsumerServiceURL=<a class="moz-txt-link-rfc2396E"
href="https://idefix.worldtalk.de/Shibboleth.sso/SAML2/POST">"https://idefix.worldtalk.de/Shibboleth.sso/SAML2/POST"</a>
Destination=<a class="moz-txt-link-rfc2396E"
href="https://idefix.worldtalk.de/idp/profile/SAML2/Redirect/SSO">"https://idefix.worldtalk.de/idp/profile/SAML2/Redirect/SSO"</a>
ID="_0977a67e9eda780008cca9442eec441c"
IssueInstant="2012-02-17T17:14:15Z"
ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Version="2.0"><br>
<saml:Issuer
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><a
class="moz-txt-link-freetext"
href="https://idefix.worldtalk.de/idp/shibboleth">https://idefix.worldtalk.de/idp/shibboleth</a></saml:Issuer><br>
<samlp:NameIDPolicy AllowCreate="1"/><br>
</samlp:AuthnRequest><br>
<br>
[....]<br>
18:14:20.653 - DEBUG
[org.opensaml.saml2.binding.AuthnResponseEndpointSelector:69] -
Selecting endpoint by ACS URL '<a class="moz-txt-link-freetext"
href="https://idefix.worldtalk.de/Shibboleth.sso/SAML2/POST">https://idefix.worldtalk.de/Shibboleth.sso/SAML2/POST</a>'
and protocol binding
'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' for request
'_0977a67e9eda780008cca9442eec441c' from entity '<a
class="moz-txt-link-freetext"
href="https://idefix.worldtalk.de/idp/shibboleth">https://idefix.worldtalk.de/idp/shibboleth</a>'<br>
<br>
18:14:20.653 - DEBUG
[org.opensaml.saml2.binding.AuthnResponseEndpointSelector:202] -
Endpoint with Location '<a class="moz-txt-link-freetext"
href="https://idefix.worldtalk.de/sp/Shibboleth.sso/SAML2/POST">https://idefix.worldtalk.de/sp/Shibboleth.sso/SAML2/POST</a>'
discarded because neither its Location nor ResponseLocation
match ACS URL '<a class="moz-txt-link-freetext"
href="https://idefix.worldtalk.de/Shibboleth.sso/SAML2/POST">https://idefix.worldtalk.de/Shibboleth.sso/SAML2/POST</a>'<br>
<br>
[....]<br>
<br>
18:14:20.654 - WARN
[org.opensaml.saml2.binding.AuthnResponseEndpointSelector:206] -
Relying party '<a class="moz-txt-link-freetext"
href="https://idefix.worldtalk.de/idp/shibboleth">https://idefix.worldtalk.de/idp/shibboleth</a>'
requested the response to be returned to endpoint with ACS URL '<a
class="moz-txt-link-freetext"
href="https://idefix.worldtalk.de/Shibboleth.sso/SAML2/POST">https://idefix.worldtalk.de/Shibboleth.sso/SAML2/POST</a>'
and binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST'
however no endpoint, with that URL and using a supported
binding, can be found in the relying party's metadata <br>
18:14:20.654 - ERROR
[edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:429]
- No return endpoint available for relying party <a
class="moz-txt-link-freetext"
href="https://idefix.worldtalk.de/idp/shibboleth">https://idefix.worldtalk.de/idp/shibboleth</a><br>
18:14:20.659 - DEBUG
[edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:344]
- No login context in storage service<br>
18:14:20.660 - DEBUG
[edu.internet2.middleware.shibboleth.idp.ui.ServiceContactTag:177]
- No relying party, nothing to display<br>
========= CUT HERE ============</div>
</div>
</body>
</html>