<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hi Scott,<br>
<br>
The host described in the identiyid was down, it's back up now and
now I am getting redirected to the login page properly, although I
am getting an error on that page <br>
<br>
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
<div class="messagebox_content" style="padding-top: 0px;
padding-right: 10px; padding-bottom: 0px; padding-left: 10px;
background-image: initial; background-attachment: initial;
background-origin: initial; background-clip: initial;
background-color: rgb(235, 236, 165); position: relative; color:
rgb(0, 0, 0); font-family: 'Arial Unicode MS', Arial,
sans-serif; font-size: 14px; font-style: normal; font-variant:
normal; font-weight: normal; letter-spacing: normal;
line-height: normal; orphans: 2; text-align: -webkit-auto;
text-indent: 0px; text-transform: none; white-space: nowrap;
widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto;
-webkit-text-stroke-width: 0px; background-position: initial
initial; background-repeat: initial initial; ">
<div class="messagetext" style="font-size: 0.8em; font-weight:
bold; padding-top: 0.75em; padding-right: 1.5em;
padding-bottom: 0.75em; padding-left: 1.5em; "><span
class="infotype" style="color: rgb(77, 109, 139);
padding-right: 0.3em; ">Error:</span>Unable to complete
request at this time. (Request was from an untrusted
provider-3038BC002A3FF031)</div>
</div>
<b class="messagebox" style="display: block; color: rgb(0, 0, 0);
font-family: 'Arial Unicode MS', Arial, sans-serif; font-size:
14px; font-style: normal; font-variant: normal; letter-spacing:
normal; line-height: normal; orphans: 2; text-align:
-webkit-auto; text-indent: 0px; text-transform: none;
white-space: nowrap; widows: 2; word-spacing: 0px;
-webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px;
"><br class="Apple-interchange-newline">
</b><br>
<br>
I think it may have something to do with the idp not being set up
to trust my SP so I'll just ping my IdP and see if they can help
me resolve it.<br>
<br>
thanks for your help!<br>
<br>
Jose<br>
<br>
On 07/25/2012 10:24 AM, Cantor, Scott wrote:<br>
</div>
<blockquote
cite="mid:BA63CEAE152A7742B854C678D949138330A41B51@CIO-KRC-D1MBX01.osuad.osu.edu"
type="cite">
<pre wrap="">On 7/25/12 1:11 PM, "Jose Reyes" <a class="moz-txt-link-rfc2396E" href="mailto:jreyes@egmail.com"><jreyes@egmail.com></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Here is the mention I found on the web and it said the error disappeared
when the identityid was set, or maybe I am just misunderstanding what
they said.
<a class="moz-txt-link-freetext" href="http://shibboleth.1660669.n2.nabble.com/Session-Initiation-URLs-td2529820">http://shibboleth.1660669.n2.nabble.com/Session-Initiation-URLs-td2529820</a>.
html
</pre>
</blockquote>
<pre wrap="">
Thanks. I think you just helped me figure it out. I'll have to think about
it, see if I can do something to handle that case better.
So, the deal is, you have a misconfigured SessionInitiator that is not
able to issue a request to an IdP. When you have a rule set up to require
a session for some resource, it intercepts the request with no session and
tries to dispatch control to the SessionInitiator implicitly. That's
supposed to do *something* and return a response to the client. In your
case, it doesn't do so, and the code falls through to the logic later on.
That logic knows that a session is required and doesn't find one, and so
it panics.
You'd never get that under normal use, but initially setting up things and
getting it slightly wrong, you might.
Basically, you didn't supply an entityID *or* a discovery mechanism. In
newer configs, you have a <SSO> element in place of all the
SessionInitiator stuff. You need to supply either an entityID or a
discoveryProtocol and URL. One of the two.
-- Scott
--
To unsubscribe from this list send an email to <a class="moz-txt-link-abbreviated" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a>
</pre>
</blockquote>
<br>
<br>
</body>
</html>