<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>There is no requirement to use TestShib, it's there as a convenience so you have a known working installation to test yours against.</div>
<div><br>
</div>
<div>Looking at your log, it appears the ERROR messages are referring to your login handlers not being set up properly. Out of the box, Shib itself does not know how to authenticate a user, you must configure a login handler for that. Several are included in
the distribution that you can choose from and/or you can write your own.</div>
<div><br>
</div>
<div>I would suggest looking at your login handler set up first. Make sure what you've set up is correct and has access to validate credentials. Also make sure there are no ERROR level logs on a start up prior to attempting a login.</div>
<div><br>
</div>
<div>Paul</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>"Geo P.C." <<a href="mailto:pcgeopc@gmail.com">pcgeopc@gmail.com</a>><br>
<span style="font-weight:bold">Reply-To: </span>Shibboleth Users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br>
<span style="font-weight:bold">Date: </span>Wed, 21 Mar 2012 16:46:31 +0530<br>
<span style="font-weight:bold">To: </span>Shibboleth Users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br>
<span style="font-weight:bold">Subject: </span>Re: Error in Shibboleth IdP<br>
</div>
<div><br>
</div>
We are able to test both servers shibboleth idp and shibboleth sp in two different servers seperately with testshib. So let me know whether we can avoid testshib and we can use our shibboleth idp and sp for SSO authentication. Please update me.<br>
<br>
Thanks<br>
Geo<br>
<br>
<br>
<div class="gmail_quote">On Wed, Mar 21, 2012 at 12:44 PM, Geo P.C. <span dir="ltr">
<<a href="mailto:pcgeopc@gmail.com">pcgeopc@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>We configured Shibboleth IdP as per the instruction in <a title="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPInstall" href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPInstall" target="_blank">
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPInstall</a> and tested with testshib. While testing Identity Provider through
<a title="https://sp.testshib.org/" href="https://sp.testshib.org/" target="_blank">
https://sp.testshib.org/</a> we given the entityID as <a title="https://shibboleth.citrus.local/idp/shibboleth" href="https://shibboleth.citrus.local/idp/shibboleth" target="_blank">
https://shibboleth.citrus.local/idp/shibboleth</a> but we are getting an error message in browser as follows:</div>
<h3><font face="Times New Roman">-------------</font></h3>
<h3><font face="Times New Roman">ERROR</font></h3>
<p><font face="Times New Roman"><font style="FONT-SIZE:13.6pt">An error occurred while processing your request. Please contact your helpdesk or user ID office for assistance.</font></font></p>
<p><font face="Times New Roman"><font style="FONT-SIZE:13.6pt">This service requires cookies. Please ensure that they are enabled and try your going back to your desired resource and trying to login again.</font></font></p>
<p><font face="Times New Roman"><font style="FONT-SIZE:13.6pt">Use of your browser's back button may cause specific errors that can be resolved by going back to your desired resource and trying to login again.</font></font></p>
<p><font face="Times New Roman"><font style="FONT-SIZE:13.6pt">If you think you were sent here in error, please contact technical support</font></font></p>
<div><font face="Times New Roman"><b><font style="FONT-SIZE:13.6pt">Error Message: Error decoding authentication request message</font></b>
</font></div>
<div><b><font face="Times New Roman">-----------------</font></b></div>
<div><b><font face="Times New Roman">In idp-process.log it shows:</font></b></div>
<div><b></b></div>
<div>12:33:18.417 - INFO [Shibboleth-Access:74] - 20120321T070318Z|192.168.1.75|shibboleth.citrus.local:443|/profile/SAML2/Redirect/SSO|</div>
<div>12:33:19.459 - ERROR [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:618] - No user identified by login handler.</div>
<div>12:33:19.467 - ERROR [edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine:563] - Authentication failed with the error:</div>
<div>edu.internet2.middleware.shibboleth.idp.authn.AuthenticationException: No user identified by login handler.</div>
<div>at edu.internet2.middleware.shibboleth.idp.authn.AuthenticationEngine.validateSuccessfulAuthentication(AuthenticationEngine.java:619) [shibboleth-identityprovider-2.3.6.jar:na]</div>
<div>................</div>
<div></div>
<div></div>
<div>12:33:19.475 - INFO [Shibboleth-Access:74] - 20120321T070319Z|192.168.1.75|shibboleth.citrus.local:443|/profile/SAML2/Redirect/SSO|</div>
<div>12:33:19.481 - WARN [edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler:373] - Error decoding authentication request message</div>
<div>org.opensaml.ws.message.decoder.MessageDecodingException: No SAMLRequest or SAMLResponse query path parameter, invalid SAML 2 HTTP Redirect message</div>
<div></div>
<div>---------------------</div>
<div></div>
<div>Can anyone please help us on it.<br>
<br>
</div>
<div></div>
<div>Thanks<br>
<br>
</div>
<font color="#888888">
<div>Geo<br>
</div>
</font></blockquote>
</div>
<br>
-- To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a></span>
</body>
</html>