<html><head><base href="x-msg://1163/"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>On 26 Jun 2012, at 15:35, DE VEGA BARREIRO, Manuel (Manuel) wrote:</div><div><br></div><div>I can't help but notice a difference between the two samples:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span class="Apple-style-span" style="font-family: Arial, sans-serif; font-size: small; ">Authentication and profile exchange between IDP and SP works fine, but time to time SP client refuse to accept IDP certificate:</span><span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div><font face="Arial, sans-serif" size="2"><div><font face="FuturaA Bk BT, sans-serif" size="2"> </font></div><div>2012-06-26 12:29:49 DEBUG XMLTooling.SOAPTransport.CURL [91]: sending SOAP message to<span class="Apple-converted-space"> </span><a href="https://10.122.4.76:7122/coi-idp/AA">https://10.122.4.76:7122/coi-idp/AA</a></div><div>2012-06-26 12:29:49 DEBUG XMLTooling.libcurl [91]: About to connect() to 10.122.4.76 port 7122</div><div>2012-06-26 12:29:49 DEBUG XMLTooling.libcurl [91]: Trying 10.122.4.76...</div><div>2012-06-26 12:29:49 DEBUG XMLTooling.libcurl [91]: connected</div></font></div></span></blockquote><div><br></div><div>[…]</div><div><br></div><blockquote type="cite"><span class="Apple-style-span" style="border-collapse: separate; font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; font-size: medium; "><div><font face="Arial, sans-serif" size="2"><div>I’m sure that certificate are ok, because most of the time SP accept it without any complains:</div><div> </div><div>2012-06-26 12:13:28 DEBUG XMLTooling.SOAPTransport.CURL [86]: sending SOAP message to<span class="Apple-converted-space"> </span><a href="https://10.122.4.76:7122/coi-idp/AA">https://10.122.4.76:7122/coi-idp/AA</a></div><div>2012-06-26 12:13:28 DEBUG XMLTooling.libcurl [86]: Connection 0 seems to be dead!</div><div>2012-06-26 12:13:28 DEBUG XMLTooling.libcurl [86]: Closing connection #0</div><div>2012-06-26 12:13:28 DEBUG XMLTooling.libcurl [86]: About to connect() to 10.122.4.76 port 7122</div><div>2012-06-26 12:13:28 DEBUG XMLTooling.libcurl [86]: Trying 10.122.4.76...</div><div>2012-06-26 12:13:28 DEBUG XMLTooling.libcurl [86]: connected</div></font></div></span></blockquote><div><br></div><div>So in these two particular cases, the SP was in a different state with respect to having previously communicated with the IdP. It's conceivable this is related to your problem. I'd suggest that if you have lots more logs you try looking through them for all occurrences, and see if this difference is consistent between the "good" and "bad" cases.</div><div><br></div><div>I'm not saying it will tell us what the problem is, but it might be a clue.</div><div><br></div></div><div apple-content-edited="true"><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div><span class="Apple-tab-span" style="white-space: pre; "> </span>-- Ian<br></div><div><span class="Apple-style-span" style="font-size: medium; "><br></span></div></span></span><br class="Apple-interchange-newline">
</div>
<br></body></html>