<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
span.EmailStyle17
{font-family:"Calibri","sans-serif";
color:windowtext}
.MsoChpDefault
{font-family:"Calibri","sans-serif"}
@page WordSection1
{margin:72.0pt 72.0pt 72.0pt 72.0pt}
div.WordSection1
{}
-->
</style>
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:16.0pt">I've beenn trying for about a week to get this working.
</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">I'm trying to authenticate with our Microsoft Active Directory service, so the following configs are relevant:</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">login-config</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">edu.vt.middleware.ldap.jaas.LdapLoginModule required</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> ldapUrl="ldap://bydc1.jmu.ac.uk"</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> baseDn="ou=people, dc=jmu, dc=ac, dc=uk"</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> ssl="false"</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">// 16/11/2012 D.Wynne Have to BIND with correct user credentials</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> bindDn`"<a href="mailto:cn=XXXXXXXX@jmu.ac.uk">cn=XXXXXXXX@jmu.ac.uk</a>"</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> bindCredential="XXXXXXXX"</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">With our AD you have to have a valid account in this file as it doesn't allow anonymous binding. If I leave this out I get a java exception error in idp-process.log. Took me a while to figure that out.</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">Now I'e uploaded the XML file to testshib & I can access our login page ( login.jsp ). No matter what I type in the Username / Password field I always get
</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">Credentials not recognised.</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">I've had a self signed certificate for our Apache server for years but it's different from the IDP build. How do I make the idp one the same ? Could this be the cause ?</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">Thanks in advance. Any help appreciated.</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">There aren't any errors the idp-process.log & I have DEBUG logging for the LDAP connection:</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:20.989 - INFO [edu.internet2.middleware.shibboleth.common.config.BaseService:158] - Loading new configuration for service shibboleth.AttributeResolver</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.027 - INFO [edu.internet2.middleware.shibboleth.common.config.attribute.resolver.AbstractResolutionPlugInBeanDefinitionParser:55] - Parsing configuration for PrincipalConnector plugin with ID: shibTransient</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.027 - INFO [edu.internet2.middleware.shibboleth.common.config.attribute.resolver.AbstractResolutionPlugInBeanDefinitionParser:55] - Parsing configuration for PrincipalConnector plugin with ID: saml1Unspec</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.027 - INFO [edu.internet2.middleware.shibboleth.common.config.attribute.resolver.AbstractResolutionPlugInBeanDefinitionParser:55] - Parsing configuration for PrincipalConnector plugin with ID: saml2Transient</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.034 - INFO [edu.internet2.middleware.shibboleth.common.config.attribute.resolver.AbstractResolutionPlugInBeanDefinitionParser:55] - Parsing configuration for DataConnector plugin with ID: myLDAP</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.043 - INFO [edu.internet2.middleware.shibboleth.common.config.attribute.resolver.AbstractResolutionPlugInBeanDefinitionParser:55] - Parsing configuration for AttributeDefinition plugin with ID: email</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.050 - INFO [edu.internet2.middleware.shibboleth.common.config.attribute.resolver.AbstractResolutionPlugInBeanDefinitionParser:55] - Parsing configuration for AttributeDefinition plugin with ID: transientId</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.092 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:74] - Bind with the following parameters:</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.092 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:75] - authtype = simple</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.093 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:76] - dn =
<a href="mailto:XXXXXXXX@jmu.ac.uk">XXXXXXXX@jmu.ac.uk</a></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.093 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:83] - credential = <suppressed></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.385 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:74] - Bind with the following parameters:</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.386 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:75] - authtype = simple</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.386 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:76] - dn =
<a href="mailto:XXXXXXXX@jmu.ac.uk">XXXXXXXX@jmu.ac.uk</a></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.386 - DEBUG [edu.vt.middleware.ldap.handler.DefaultConnectionHandler:83] - credential = <suppressed></span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.390 - INFO [edu.internet2.middleware.shibboleth.common.config.BaseService:180] - shibboleth.AttributeResolver service loaded new configuration</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.401 - INFO [edu.internet2.middleware.shibboleth.common.config.BaseService:158] - Loading new configuration for service shibboleth.AttributeFilterEngine</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.422 - INFO [edu.internet2.middleware.shibboleth.common.config.attribute.filtering.AttributeFilterPolicyBeanDefinitionParser:72] - Parsing configuration for attribute filter policy releaseTransientIdToAnyone</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.446 - INFO [edu.internet2.middleware.shibboleth.common.config.BaseService:180] - shibboleth.AttributeFilterEngine service loaded new configuration</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.452 - INFO [edu.internet2.middleware.shibboleth.common.config.BaseService:158] - Loading new configuration for service shibboleth.SAML1AttributeAuthority</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.458 - INFO [edu.internet2.middleware.shibboleth.common.config.BaseService:158] - Loading new configuration for service shibboleth.SAML2AttributeAuthority</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.465 - INFO [edu.internet2.middleware.shibboleth.common.config.BaseService:158] - Loading new configuration for service shibboleth.RelyingPartyConfigurationManager</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.541 - INFO [edu.internet2.middleware.shibboleth.common.config.relyingparty.RelyingPartyConfigurationBeanDefinitionParser:73] - Parsing configuration for relying party with id: anonymous</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.541 - INFO [edu.internet2.middleware.shibboleth.common.config.relyingparty.RelyingPartyConfigurationBeanDefinitionParser:73] - Parsing configuration for relying party with id: default</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.564 - INFO [edu.internet2.middleware.shibboleth.common.config.security.AbstractX509CredentialBeanDefinitionParser:63] - Parsing configuration for X509Filesystem credential with id: IdPCredential</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.784 - INFO [edu.internet2.middleware.shibboleth.common.config.security.ChainingSignatureTrustEngineBeanDefinitionParser:59] - Parsing configuration for SignatureChaining trust engine with id: shibboleth.SignatureTrustEngine</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.785 - INFO [edu.internet2.middleware.shibboleth.common.config.security.MetadataExplicitKeySignatureTrustEngineBeanDefinitionParser:50] - Parsing configuration for MetadataExplicitKeySignature trust
engine with id: shibboleth.SignatureMetadataExplicitKeyTrustEngine</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.786 - INFO [edu.internet2.middleware.shibboleth.common.config.security.MetadataPKIXSignatureTrustEngineBeanDefinitionParser:52] - Parsing configuration for MetadataPKIXSignature trust engine with
id: shibboleth.SignatureMetadataPKIXTrustEngine</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.787 - INFO [edu.internet2.middleware.shibboleth.common.config.security.ChainingTrustEngineBeanDefinitionParser:59] - Parsing configuration for Chaining trust engine with id: shibboleth.CredentialTrustEngine</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.787 - INFO [edu.internet2.middleware.shibboleth.common.config.security.MetadataExplicitKeyTrustEngineBeanDefinitionParser:48] - Parsing configuration for MetadataExplicitKey trust engine with id:
shibboleth.CredentialMetadataExplictKeyTrustEngine</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.788 - INFO [edu.internet2.middleware.shibboleth.common.config.security.MetadataPKIXX509CredentialTrustEngineBeanDefinitionParser:52] - Parsing configuration for MetadataPKIXX509Credential trust engine
with id: shibboleth.CredentialMetadataPKIXTrustEngine</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.789 - INFO [edu.internet2.middleware.shibboleth.common.config.security.ShibbolethSecurityPolicyBeanDefinitionParser:59] - Parsing configuration for SecurityPolicyType security policy with id: shibboleth.ShibbolethSSOSecurityPolicy</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.794 - INFO [edu.internet2.middleware.shibboleth.common.config.security.ShibbolethSecurityPolicyBeanDefinitionParser:59] - Parsing configuration for SecurityPolicyType security policy with id: shibboleth.SAML1AttributeQuerySecurityPolicy</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.798 - INFO [edu.internet2.middleware.shibboleth.common.config.security.ShibbolethSecurityPolicyBeanDefinitionParser:59] - Parsing configuration for SecurityPolicyType security policy with id: shibboleth.SAML1ArtifactResolutionSecurityPolicy</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.800 - INFO [edu.internet2.middleware.shibboleth.common.config.security.ShibbolethSecurityPolicyBeanDefinitionParser:59] - Parsing configuration for SecurityPolicyType security policy with id: shibboleth.SAML2SSOSecurityPolicy</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.803 - INFO [edu.internet2.middleware.shibboleth.common.config.security.ShibbolethSecurityPolicyBeanDefinitionParser:59] - Parsing configuration for SecurityPolicyType security policy with id: shibboleth.SAML2AttributeQuerySecurityPolicy</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.804 - INFO [edu.internet2.middleware.shibboleth.common.config.security.ShibbolethSecurityPolicyBeanDefinitionParser:59] - Parsing configuration for SecurityPolicyType security policy with id: shibboleth.SAML2ArtifactResolutionSecurityPolicy</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:21.806 - INFO [edu.internet2.middleware.shibboleth.common.config.security.ShibbolethSecurityPolicyBeanDefinitionParser:59] - Parsing configuration for SecurityPolicyType security policy with id: shibboleth.SAML2SLOSecurityPolicy</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:22.429 - INFO [edu.internet2.middleware.shibboleth.common.config.BaseService:180] - shibboleth.RelyingPartyConfigurationManager service loaded new configuration</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:22.435 - INFO [edu.internet2.middleware.shibboleth.common.config.BaseService:158] - Loading new configuration for service shibboleth.HandlerManager</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:22.448 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.JSPErrorHandlerBeanDefinitionParser:46] - Parsing configuration for JSP error handler.</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:22.449 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: Status</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:22.450 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAMLMetadata</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:22.453 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: ShibbolethSSO</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:22.454 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML1AttributeQuery</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:22.455 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML1ArtifactResolution</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:22.457 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2SSO</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:22.458 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2SSO</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:22.458 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2SSO</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:22.458 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2SSO</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:22.459 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2ECP</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:22.460 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2AttributeQuery</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:22.461 - INFO [edu.internet2.middleware.shibboleth.common.config.profile.AbstractRequestURIMappedProfileHandlerBeanDefinitionParser:43] - Parsing configuration for profile handler: SAML2ArtifactResolution</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:22.602 - INFO [edu.internet2.middleware.shibboleth.common.config.BaseService:180] - shibboleth.HandlerManager service loaded new configuration</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt">14:38:40.654 - INFO [Shibboleth-Access:74] - 20121116T143840Z|150.204.48.5|java.cms.livjm.ac.uk:443|/profile/SAML2/Redirect/SSO|</span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="font-size:16.0pt"> </span></p>
<p class="MsoNormal"><span style="">Dave Wynne</span></p>
<p class="MsoNormal"><span style="">Senior Technical Officer</span></p>
<p class="MsoNormal"><span style="">School Of Computing & Maths</span></p>
<p class="MsoNormal"><span style="">James Parsons Building</span></p>
<p class="MsoNormal"><span style="">Liverpool John Moores University</span></p>
<p class="MsoNormal"><span style="">Byrom Street</span></p>
<p class="MsoNormal"><span style="">Liverpool L3 3AF</span></p>
<p class="MsoNormal"> </p>
</div>
<br>
<hr>
<font face="Tahoma" size="2"><b><i>Important Notice:<i></b><i> the information in this email and any attachments is for the sole use of the intended recipient(s). If you are not an intended recipient, or a person responsible for delivering it to an intended
recipient, you should delete it from your system immediately without disclosing its contents elsewhere and advise the sender by returning the email or by telephoning a number contained in the body of the email. No responsibility is accepted for loss or damage
arising from viruses or changes made to this message after it was sent. The views contained in this email are those of the author and not necessarily those of Liverpool John Moores University.<i></font>
</i></i></i></i>
</body>
</html>