<div class="gmail_extra"><div class="im" style>>>I have no idea what you're doing or what its doing, but that won't work. I <br>>>would start by determining what SAML version is being used in the request <br>
>>to the IdP based on logs, and then see if the problem is the IdP mixing<br>>>the protocols or something like that. <br><br></div><span style>the SAML version used for that request is SAML1 as I have AssertionConsumerServiceIndex=</span><span style>"3" for SAML1 while AssertionConsumerServiceIndex=</span><span style>"1" for SAML 2. does the binding protocol in the response should match AssertionConsumerServiceIndex in the AuthnRequest. for this case SAML:2.0:protocol in the response should be SAML:1.0:protocol b/c </span><span style>AssertionConsumerServiceIndex=</span><span style>3 in the request? </span><br style>
<br style><span style>------------ shibd.log--------------------- </span><br style><div class="im" style><samlp:AuthnRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol" AssertionConsumerServiceIndex="3" <br>
Destination="<a href="https://idp/oala/sso%22" rel="nofollow" link="external" target="_blank" style="color:rgb(17,85,204)">https://idp/oala/sso"</a> <br>ID="_5124840678baec7acf44e329acac5d9f" <br>IssueInstant="2012-04-19T18:03:49Z" Version="2.0"><br>
</div><span style><saml:Issuer xmlns:saml="urn:oasis:names:</span><span style>tc:SAML:2.0:assertion"></span><a href="https://sp.xx/shibboleth" rel="nofollow" link="external" target="_blank" style>https://sp.xx/shibboleth</a><div style>
<div class="adm" style="margin-top:5px;margin-right:0px;margin-bottom:5px;margin-left:0px"><div id="q_136d14a45a7636c9_5" class="ajR h4" style="color:rgb(80,0,80);font-size:11px;background-color:rgb(241,241,241);border-top-width:1px;border-right-width:1px;border-bottom-width:1px;border-left-width:1px;border-top-style:solid;border-right-style:solid;border-bottom-style:solid;border-left-style:solid;border-top-color:rgb(221,221,221);border-right-color:rgb(221,221,221);border-bottom-color:rgb(221,221,221);border-left-color:rgb(221,221,221);clear:both;line-height:6px;outline-style:none;outline-width:initial;outline-color:initial;width:20px">
<div class="ajT" style="background-image:url('https://ssl.gstatic.com/ui/v1/icons/mail/ellipsis.png');background-color:initial;height:8px;width:20px;background-repeat:no-repeat no-repeat"></div></div></div></div><span style></ds:Signature><samlp:Status><</span><span style>samlp:StatusCode Value="urn:oasis:names:tc:</span><span style>SAML:2.0:status:Success"/></</span><span style>samlp:Status><saml:</span><span style>EncryptedAssertion xmlns:saml="urn:oasis:names:</span><span style>tc:SAML:2.0:assertion"><</span><span style>EncryptedData xmlns="</span><a href="http://www.w3.org/2001/04/xmlenc#%22" rel="nofollow" link="external" target="_blank" style>http://www.w3.org/2001/04/xmlenc#"</a><span style> Type="</span><a href="http://www.w3.org/2001/04/xmlenc#Element%22%3E" rel="nofollow" link="external" target="_blank" style>http://www.w3.org/2001/04/xmlenc#Element"></a><br style>
<span style><EncryptionMethod Algorithm="</span><a href="http://www.w3.org/2001/04/xmlenc#aes128-cbc%22/%3E" rel="nofollow" link="external" target="_blank" style>http://www.w3.org/2001/04/xmlenc#aes128-cbc"/></a><br style>
<span style><KeyInfo xmlns="</span><a href="http://www.w3.org/2000/09/xmldsig#%22%3E" rel="nofollow" link="external" target="_blank" style>http://www.w3.org/2000/09/xmldsig#"></a><br style><span style><EncryptedKey xmlns="</span><a href="http://www.w3.org/2001/04/xmlenc#%22%3E" rel="nofollow" link="external" target="_blank" style>http://www.w3.org/2001/04/xmlenc#"></a><br style>
<span style><EncryptionMethod Algorithm="</span><a href="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p%22%3E" rel="nofollow" link="external" target="_blank" style>http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"></a><br style>
<span style><DigestMethod xmlns="</span><a href="http://www.w3.org/2000/09/xmldsig#%22" rel="nofollow" link="external" target="_blank" style>http://www.w3.org/2000/09/xmldsig#"</a><span style> Algorithm="</span><a href="http://www.w3.org/2000/09/xmldsig#sha1%22/%3E" rel="nofollow" link="external" target="_blank" style>http://www.w3.org/2000/09/xmldsig#sha1"/></a><br style>
<span style></EncryptionMethod></span><br style><span style><KeyInfo xmlns="</span><a href="http://www.w3.org/2000/09/xmldsig#%22%3E" rel="nofollow" link="external" target="_blank" style>http://www.w3.org/2000/09/xmldsig#"></a><br style>
<span style><X509Data></span><br style><span style><X509Certificate></</span><span style>X509Certificate></span><br style><span style></X509Data></span><br style><span style></KeyInfo></span><br style>
<span style><CipherData></span><div class="im" style><br><br></CipherData><br></EncryptedData></saml:EncryptedAssertion></samlp:Response><br><br>2012-04-19 14:03:52 DEBUG XMLTooling.XMLObject.Builder [88]: located XMLObjectBuilder for element name: samlp:Response <br>
2012-04-19 14:03:52 DEBUG XMLTooling.XMLObject [88]: unmarshalling DOM element (samlp:Response) <br>2012-04-19 14:03:52 DEBUG XMLTooling.XMLObject [88]: unmarshalling attributes for DOM element (samlp:Response) <br>2012-04-19 14:03:52 DEBUG XMLTooling.XMLObject [88]: processing generic attribute <br>
2012-04-19 14:03:52 DEBUG XMLTooling.XMLObject [88]: processing generic attribute <br>2012-04-19 14:03:52 DEBUG XMLTooling.XMLObject [88]: processing generic attribute <br>2012-04-19 14:03:52 DEBUG XMLTooling.XMLObject [88]: processing generic attribute <br>
2012-04-19 14:03:52 DEBUG XMLTooling.XMLObject [88]: processing generic attribute <br></div><font color="#222222" face="arial, sans-serif"><br></font><br><div class="gmail_quote">---------- Forwarded message ----------<br>
From: <b class="gmail_sendername"></b> <span dir="ltr"><<a href="mailto:postmaster@lists1.internet2.edu" target="_blank">postmaster@lists1.internet2.edu</a>></span><br>
Date: Fri, Apr 20, 2012 at 12:25 PM<br>Subject: RE: Re: Decoded message was not a SAML 1.x Response<br>To: hanaa <<a href="mailto:hanan.ebraheem@gmail.com" target="_blank">hanan.ebraheem@gmail.com</a>><br><br><br><div>
The Shibboleth Users list has been moved to <a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>.<br>
Subscription instructions may be found on the Shibboleth web site.<br>
<br>
========== Original Message Headers Follow ==========<br>
<br>
</div>From <a href="mailto:hanan.ebraheem@gmail.com" target="_blank">hanan.ebraheem@gmail.com</a> Fri Apr 20 15:24:53 2012<br>
<div>Return-Path: <<a href="mailto:hanan.ebraheem@gmail.com" target="_blank">hanan.ebraheem@gmail.com</a>><br>
X-Spam-ASN: AS237 <a href="http://207.72.0.0/14" target="_blank">207.72.0.0/14</a><br>
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on <a href="http://sa1.internet2.edu" target="_blank">sa1.internet2.edu</a><br>
X-Spam-Level:<br>
X-Spam-Status: No, score=-1.6 required=7.0 tests=AWL,RCVD_IN_DNSWL_MED,<br>
SPF_NEUTRAL,URI_HEX autolearn=ham version=3.2.5<br>
X-Original-To: <a href="mailto:shibboleth-users@lists1.internet2.edu" target="_blank">shibboleth-users@lists1.internet2.edu</a><br>
Delivered-To: <a href="mailto:shibboleth-users@lists1.internet2.edu" target="_blank">shibboleth-users@lists1.internet2.edu</a><br>
Received: from <a href="http://sfpop-ironport03.merit.edu" target="_blank">sfpop-ironport03.merit.edu</a> (<a href="http://sfpop-ironport03.merit.edu" target="_blank">sfpop-ironport03.merit.edu</a> <a href="tel:%5B207.75.116.62" value="+12077511662" target="_blank">[207.75.116.62</a>])<br>
</div> by <a href="http://lists1.internet2.edu" target="_blank">lists1.internet2.edu</a> (Postfix) with ESMTP id 82DDA1A0057<br>
for <<a href="mailto:shibboleth-users@lists1.internet2.edu" target="_blank">shibboleth-users@lists1.internet2.edu</a>>; Fri, 20 Apr 2012 15:24:53 -0400 (EDT)<br>
X-Merit-ExtLoop1: 1<br>
X-IronPort-Anti-Spam-Filtered: true<br>
X-IronPort-Anti-Spam-Result: AvkBAGy3kU/Yi+wamWdsb2JhbABEDp9mgyyOGCIBAQEBAQgLCwcUJ4IJAQEEAToUDhIbCxguIw4VEQ4oBIdfAQMGBQuoSYM2hGYKGScXTYh8kGcEiGOCHYMPiHuRXFeBNgYR<br>
X-IronPort-AV: E=Sophos;i="4.75,454,1330923600";<br>
d="scan'208";a="286651218"<br>
<div>Received: from <a href="http://sam.nabble.com" target="_blank">sam.nabble.com</a> ([216.139.236.26])<br>
</div> by <a href="http://sfpop-ironport03.merit.edu" target="_blank">sfpop-ironport03.merit.edu</a> with ESMTP/TLS/AES256-SHA; 20 Apr 2012 15:24:52 -0400<br>
<div>Received: from <a href="http://jim.nabble.com" target="_blank">jim.nabble.com</a> ([192.168.236.80])<br>
by <a href="http://sam.nabble.com" target="_blank">sam.nabble.com</a> with esmtp (Exim 4.72)<br>
(envelope-from <<a href="mailto:hanan.ebraheem@gmail.com" target="_blank">hanan.ebraheem@gmail.com</a>>)<br>
</div> id 1SLJRs-000250-0f<br>
for <a href="mailto:shibboleth-users@internet2.edu" target="_blank">shibboleth-users@internet2.edu</a>; Fri, 20 Apr 2012 12:24:52 -0700<br>
Date: Fri, 20 Apr 2012 12:24:52 -0700 (PDT)<br>
<div>From: hanaa <<a href="mailto:hanan.ebraheem@gmail.com" target="_blank">hanan.ebraheem@gmail.com</a>><br>
To: <a href="mailto:shibboleth-users@internet2.edu" target="_blank">shibboleth-users@internet2.edu</a><br>
</div>Message-ID: <<a href="mailto:1334949892008-7485582.post@n2.nabble.com" target="_blank">1334949892008-7485582.post@n2.nabble.com</a>><br>
In-Reply-To: <<a href="mailto:1334942374922-7485203.post@n2.nabble.com" target="_blank">1334942374922-7485203.post@n2.nabble.com</a>><br>
References: <CAGy7Xg0z_H=<a href="mailto:KNN6zh5sFf8kmKnUZ_2XcORMAb4xOPZK%2BkgRy1g@mail.gmail.com" target="_blank">KNN6zh5sFf8kmKnUZ_2XcORMAb4xOPZK+kgRy1g@mail.gmail.com</a>> <<a href="mailto:CBB70000.1FEA5%25cantor.2@osu.edu" target="_blank">CBB70000.1FEA5%cantor.2@osu.edu</a>> <<a href="mailto:1334942374922-7485203.post@n2.nabble.com" target="_blank">1334942374922-7485203.post@n2.nabble.com</a>><br>
<div><div>Subject: Re: Decoded message was not a SAML 1.x Response<br>
MIME-Version: 1.0<br>
Content-Type: text/plain; charset=us-ascii<br>
Content-Transfer-Encoding: 7bit<br>
</div></div></div><br><br clear="all"><div><br></div>-- <br>hhhh<br>
</div>