<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style id="owaParaStyle" type="text/css">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body ocsi="0" fpstyle="1">
<div style="direction: ltr;font-family: Book Antiqua;color: #000000;font-size: 12pt;">
Hi,<br>
<br>
We are trying to setup communication with a new service provider from our idp, their information was added to the relying-party.xml, attribute-filter.xml and we have obtained their metadata.<br>
<br>
After authentication with the new service provider we see that no attributes are released, the error message the admin of the service provider gave us is
<br>
<br>
<tt><font size="2">> 2012-06-06 08:52:19 ERROR Shibboleth.AttributeResolver.Query [1959]: exception during SAML query to
</font></tt><a href="https://authfed.fiu.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery:" target="_blank"><tt><font size="2">https://authfed.fiu.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery:</font></tt></a><tt><font size="2"> CURLSOAPTransport failed while
contacting SOAP endpoint (</font></tt><a href="https://authfed.fiu.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery" target="_blank"><tt><font size="2">https://authfed.fiu.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery</font></tt></a><tt><font size="2">): couldn't
connect to host<br>
> 2012-06-06 08:52:19 ERROR Shibboleth.AttributeResolver.Query [1959]: unable to obtain a SAML response from attribute authority</font></tt>
<br>
<br>
On our idp-process.log we see the following:<br>
<br>
14:36:17.672 - INFO [Shibboleth-Access:74] - 20120611T183617Z|74.122.104.103|authfed.fiu.edu:8443|/profile/SAML2/SOAP/AttributeQuery|<br>
14:36:17.810 - INFO [Shibboleth-Audit:989] - 20120611T183617Z|urn:oasis:names:tc:SAML:2.0:bindings:SOAP|_87853969cb3681e9897bf8a6da613477|https://corp.collegenet.com/shibboleth-sp/|urn:mace:shibboleth:2.0:profiles:saml2:query:attribute|https://authfed.fiu.edu/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:SOAP|_363c828d29c131d01fa04d605feea6bd|jdoe011|||||<br>
<br>
<br>
<br>
We have opened up our firewall rules to the ips mentioned by the service provider but we still encounter this problem. We have previously configured other sp's with no problem.<br>
<br>
Has anybody else encountered this problem. If so any help would be much appreciated.<br>
<br>
Thanks!<br>
<br>
Here is our attribute-filter.xml file<br>
<br>
<afp:AttributeFilterPolicy id="collegenetdev"><br>
<afp:PolicyRequirementRule xsi:type="basic:AttributeRequesterString" value="https://corp.collegenet.com/shibboleth-sp"/><br>
<afp:AttributeRule attributeID="uid"><br>
<afp:PermitValueRule xsi:type="basic:ANY"/><br>
</afp:AttributeRule><br>
<afp:AttributeRule attributeID="firstName"><br>
<afp:PermitValueRule xsi:type="basic:ANY"/><br>
</afp:AttributeRule><br>
<afp:AttributeRule attributeID="lastName"><br>
<afp:PermitValueRule xsi:type="basic:ANY"/><br>
</afp:AttributeRule><br>
<afp:AttributeRule attributeID="email"><br>
<afp:PermitValueRule xsi:type="basic:ANY"/><br>
</afp:AttributeRule><br>
<afp:AttributeRule attributeID="employeeType"><br>
<afp:PermitValueRule xsi:type="basic:ANY"/><br>
</afp:AttributeRule><br>
</afp:AttributeFilterPolicy><br>
<br>
<br>
<div><br>
<div><font face="Book Antiqua">___________________<br>
</font><font face="book antiqua">Juan Quintanilla</font></div>
<div><font face="book antiqua">305-348-6573</font></div>
<div><font face="book antiqua"><a href="mailto:jquin014@fiu.edu">jquin014@fiu.edu</a></font></div>
</div>
</div>
</body>
</html>