<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"><base href="x-msg://265/"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Mauro,<div><br></div><div>The Scope element in your metadata was null, which is not permitted. The TestShib SP's logs will say this; just search for your metadata's file name in the logs.</div><div><br></div><div><div>2013-01-05 19:14:42 INFO OpenSAML.MetadataProvider.XML : loaded XML resource (/opt/testshib-user-metadata/shibbo1233.xml)</div><div>2013-01-05 19:14:42 ERROR OpenSAML.MetadataProvider.XML : metadata intance failed manual validation checking: Scope must have TextContent.</div></div><div><br></div><div>I've changed it to "<a href="http://eduteamit.net">eduteamit.net</a>" and it works now.</div><div><br></div><div>Resolving this was challenging because you had uploaded a large number of files containing invalid metadata with the same entityID. Please reuse the same filename if you are uploading new metadata for a known entity.</div><div><br></div><div>Thanks,</div><div>Nate.</div><div><br><div><div>On 5 Jan 2013, at 23:51, Mauro Minella <<a href="mailto:Mauro.Minella@microsoft.com">Mauro.Minella@microsoft.com</a>></div><div> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div lang="IT" link="#0563C1" vlink="#954F72" style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div class="WordSection1" style="page: WordSection1; "><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">I’m getting crazy trying to understand where is the problem for this task that I did several times in the past.<o:p></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><o:p> </o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">I installed Shibboleth 2.3.8 and configured it to access my Active Directory.<o:p></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">Now, if I open<span class="Apple-converted-space"> </span><a href="https://shibbidp.eduteamit.net/idp/shibboleth" style="color: rgb(149, 79, 114); text-decoration: underline; ">https://shibbidp.eduteamit.net/idp/shibboleth</a>, it correctly shows my metadata on a valid SSL channel (certificate is provided by GoDaddy).<o:p></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">The same files shows entityID="<a href="https://shibbidp.eduteamit.net/idp/shibboleth" style="color: rgb(149, 79, 114); text-decoration: underline; ">https://shibbidp.eduteamit.net/idp/shibboleth</a>" in the EntityDescriptor node.<o:p></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><o:p> </o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">So I saved the XML file, uploaded it on<span class="Apple-converted-space"> </span><a href="https://www.testshib.org/metadata.html" style="color: rgb(149, 79, 114); text-decoration: underline; ">https://www.testshib.org/metadata.html</a><span class="Apple-converted-space"> </span>and finally tested it on<span class="Apple-converted-space"> </span><a href="https://sp.testshib.org/" style="color: rgb(149, 79, 114); text-decoration: underline; ">https://sp.testshib.org/</a>, where I entered<a href="https://shibbidp.eduteamit.net/idp/shibboleth" style="color: rgb(149, 79, 114); text-decoration: underline; ">https://shibbidp.eduteamit.net/idp/shibboleth</a>.<o:p></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><o:p> </o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">However, when I hit GO! I get the error<o:p></o:p></div><p class="error" style="margin: 15pt 0cm 15pt 35.4pt; font-size: 10pt; font-family: 'Times New Roman', serif; font-weight: bold; "><span lang="EN" style="font-family: Arial, sans-serif; ">opensaml::saml2md::MetadataException at (<a href="https://sp.testshib.org/Shibboleth.sso/TestShib" style="color: rgb(149, 79, 114); text-decoration: underline; ">https://sp.testshib.org/Shibboleth.sso/TestShib</a>)<o:p></o:p></span></p><p style="margin: 15pt 0cm 15pt 35.4pt; font-size: 10pt; font-family: 'Times New Roman', serif; "><span lang="EN" style="font-family: Arial, sans-serif; ">Unable to locate metadata for identity provider (<a href="https://shibbidp.eduteamit.net/idp/shibboleth" style="color: rgb(149, 79, 114); text-decoration: underline; ">https://shibbidp.eduteamit.net/idp/shibboleth</a>)<o:p></o:p></span></p><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">And the last lines of the log say<o:p></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><span style="font-size: 10pt; font-family: 'Courier New'; ">2013-01-05 18:41:21 INFO OpenSAML.MetadataProvider.XML : reload thread finished<o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><span style="font-size: 10pt; font-family: 'Courier New'; ">2013-01-05 18:41:21 INFO OpenSAML.MetadataProvider.XML : reload thread finished<o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><span style="font-size: 10pt; font-family: 'Courier New'; ">2013-01-05 18:41:37 DEBUG Shibboleth.Listener [226]: dispatching message (default/TestShib::run::SAML2SI)<o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><span style="font-size: 10pt; font-family: 'Courier New'; ">2013-01-05 18:41:37 WARN Shibboleth.SessionInitiator.SAML2 [226]: unable to locate metadata for provider (<a href="https://shibbidp.eduteamit.net/idp/shibboleth" style="color: rgb(149, 79, 114); text-decoration: underline; ">https://shibbidp.eduteamit.net/idp/shibboleth</a>)<o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><span style="font-size: 10pt; font-family: 'Courier New'; ">2013-01-05 18:41:51 DEBUG Shibboleth.Listener [227]: dispatching message (default/TestShib::run::SAML2SI)<o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><span style="font-size: 10pt; font-family: 'Courier New'; ">2013-01-05 18:41:51 WARN Shibboleth.SessionInitiator.SAML2 [227]: unable to locate metadata for provider (<a href="https://shibbidp.eduteamit.net/idp/shibboleth" style="color: rgb(149, 79, 114); text-decoration: underline; ">https://shibbidp.eduteamit.net/idp/shibboleth</a>)<o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><span style="font-size: 10pt; font-family: 'Courier New'; ">2013-01-05 18:42:01 INFO OpenSAML.MetadataProvider.XML : reload thread finished<o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><span style="font-size: 10pt; font-family: 'Courier New'; ">2013-01-05 18:42:01 INFO Shibboleth.SecurityPolicyProvider.XML : reload thread finished<o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><span style="font-size: 10pt; font-family: 'Courier New'; ">2013-01-05 18:46:43 DEBUG Shibboleth.Listener [227]: dispatching message (default/TestShib::run::SAML2SI)<o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><span style="font-size: 10pt; font-family: 'Courier New'; ">2013-01-05 18:46:43 WARN Shibboleth.SessionInitiator.SAML2 [227]: unable to locate metadata for provider (<a href="https://shibbidp.eduteamit.net/idp/shibboleth" style="color: rgb(149, 79, 114); text-decoration: underline; ">https://shibbidp.eduteamit.net/idp/shibboleth</a>)<o:p></o:p></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><o:p> </o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">Any help is really appreciated<o:p></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><o:p> </o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; ">Mauro<o:p></o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><o:p> </o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><o:p> </o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><o:p> </o:p></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif; "><o:p> </o:p></div></div>--<br>To unsubscribe from this list send an email to<span class="Apple-converted-space"> </span><a href="mailto:users-unsubscribe@shibboleth.net" style="color: rgb(149, 79, 114); text-decoration: underline; ">users-unsubscribe@shibboleth.net</a></div></blockquote></div><br></div></body></html>