Hi Chard,<br><br>thanks for the quick response.<br>I started from scratch again and followed you advices to use the official documentation.<br>At the end I got it to work properly. Now I can protect a ressource and access it the shib acces page.<br>
Nevertheless while following the instruction some issues came up.<br>One is after follwing the IdP installtin instructin on: <br><br><a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPInstall" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPInstall</a><br>
<br>I wasn't able to access the <tt><a href="https://hostname/idp/profile/Status" rel="nofollow" target="_blank">https://HOSTNAME/idp/profile/Status</a> </tt>page. Got some kind of bad cert error.<br><br>After I changed in apache server.xml<br>
<br>
<pre><Connector port=<span>"8443"</span>
protocol=<span>"org.apache.coyote.http11.Http11Protocol"</span>
SSLImplementation=<span>"edu.internet2.middleware.security.tomcat6.DelegateToApplicationJSSEImplementation"</span>
scheme=<span>"https"</span>
SSLEnabled=<span>"true"</span>
clientAuth=<span>"<b>true</b>"</span>
keystoreFile=<span>"IDP_HOME/credentials/idp.jks"</span>
keystorePass=<span>"PASSWORD"</span> /><br><br>to <br><br><Connector port=<span>"8443"</span>
protocol=<span>"org.apache.coyote.http11.Http11Protocol"</span>
SSLImplementation=<span>"edu.internet2.middleware.security.tomcat6.DelegateToApplicationJSSEImplementation"</span>
scheme=<span>"https"</span>
SSLEnabled=<span>"true"</span>
clientAuth=<span>"<b>false</b>"</span>
keystoreFile=<span>"IDP_HOME/credentials/idp.jks"</span>
keystorePass=<span>"PASSWORD"</span> /><br></pre>it worked.<br><br>Stephan<br><br><br><div class="gmail_quote">
2012/6/16 Chad La Joie <span dir="ltr"><<a href="mailto:lajoie@itumi.biz" target="_blank">lajoie@itumi.biz</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
First, be sure you're using the actual Shibboleth documentation not some<br>
third party document.<br>
<br>
Second, turn on logging for the LDAP library and see what it says.<br>
<div><br>
On 6/16/12 11:06 AM, Stephan Hackstedt wrote:<br>
> Hi,<br>
><br>
> I'm new to Shibboleth and trying to setup a test environment on a single<br>
> Windows / x64 machine.<br>
> I followed some tutorials. Now I'm at a point where I'm trying to access<br>
> a ressource on the SP. The redirection to the IdP loginpage works fine.<br>
> But I cannot login, no matter if I use the right user/pw combination or not.<br>
> I'm using LDAP as storage for the user data.<br>
> I tested two different LDAP Systems (APacheDS, OpenDS) but I couldnt get<br>
> it to work. The same error with both.<br>
><br>
> The connection to the LDAP service can be established successfull on IdP<br>
> Startup, but after redirection and typing username and passwort at the<br>
> login screen Shibboleth IdP always gives the message "Credentials not<br>
> recognized".<br>
> Are there other configuration files, beside login.conf and<br>
> attribute-resolver,xmlm which I need to consider?<br>
><br>
> It would be nice, if some has a hint for me regarding my problem, My<br>
> progress really stucks.<br>
><br>
> conf snippets:<br>
><br>
><br>
> attribute-resolver.xml:<br>
> *<br>
> <!-- Example LDAP Connector for OpenDS--><br>
> <resolver:DataConnector id="myLDAP" xsi:type="dc:LDAPDirectory"<br>
</div>> ldapURL="ldap://<a href="http://127.0.0.1:12389" target="_blank">127.0.0.1:12389</a> <<a href="http://127.0.0.1:12389" target="_blank">http://127.0.0.1:12389</a>>"<br>
<div>> baseDN="ou=people,dc=example,dc=com"<br>
> principal="cn=Directory Manager"<br>
> principalCredential="secret2"><br>
> <dc:FilterTemplate><br>
> <![CDATA[<br>
> (uid=$requestContext.principalName)<br>
> ]]><br>
</div>> </dc:FilterTemplate>*<br>
><br>
> login.config:<br>
><br>
> *ShibUserPassAuth {<br>
<div>> edu.vt.middleware.ldap.jaas.LdapLoginModule required<br>
> host="127.0.0.1"<br>
> base="ou=people,dc=example,dc=com"<br>
> bindDn ="cn=Directory Manager"<br>
> bindCredential="secret2"<br>
> port="12389"<br>
> ssl="false"<br>
> tls="false"<br>
> userField="uid";<br>
</div>> };*<br>
><br>
> Regards,<br>
> Stephan<br>
><br>
<span><font color="#888888">><br>
> --<br>
> To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
><br>
<br>
--<br>
Chad La Joie<br>
<a href="http://www.itumi.biz" target="_blank">www.itumi.biz</a><br>
trusted identities, delivered<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</font></span></blockquote></div><br>