<div dir="ltr">Hello again,<div style>I did some changes in my configuration.</div><div style><ul style><li style>Remove the ApplicationOverride in Shibboleth2.xml</li><li style>I have only one entityID="<a href="https://dev-02.sinapti.co/shibboleth">https://dev-02.sinapti.co/shibboleth</a>". I want to use it for all the Vhost that I've configured in apache2</li>
<li style>I modified my SP metadata adding AssertionConsumerService per all the vhost. For example, </li></ul><div><div><font face="courier new, monospace" size="1"><md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="<a href="https://vhost1.dev-02.sinapti.co/Shibboleth.sso/SAML2/POST">https://vhost1.dev-02.sinapti.co/Shibboleth.sso/SAML2/POST</a>" index="7"/></font></div>
<div><font face="courier new, monospace" size="1"> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="<a href="https://vhost1.dev-02.sinapti.co/Shibboleth.sso/SAML2/POST-SimpleSign">https://vhost1.dev-02.sinapti.co/Shibboleth.sso/SAML2/POST-SimpleSign</a>" index="8"/></font></div>
<div><font face="courier new, monospace" size="1"> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" </font><font face="courier new, monospace" size="1">Location="<a href="https://vhost1.dev-02.sinapti.co/Shibboleth.sso/SAML2/Artifact">https://vhost1.dev-02.sinapti.co/Shibboleth.sso/SAML2/Artifact</a>" index="9"/></font></div>
<div><font face="courier new, monospace" size="1"> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:PAOS" Location="<a href="https://vhost1.dev-02.sinapti.co/Shibboleth.sso/SAML2/ECP">https://vhost1.dev-02.sinapti.co/Shibboleth.sso/SAML2/ECP</a>" </font><font face="courier new, monospace" size="1">index="10"/></font></div>
<div><font face="courier new, monospace" size="1"> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="<a href="https://vhost1.dev-02.sinapti.co/Shibboleth.sso/SAML/POST">https://vhost1.dev-02.sinapti.co/Shibboleth.sso/SAML/POST</a>" index="11"/></font></div>
<div><font face="courier new, monospace" size="1"> <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="<a href="https://uws.dev-02.sinapti.co/Shibboleth.sso/SAML/Artifact">https://uws.dev-02.sinapti.co/Shibboleth.sso/SAML/Artifact</a>" index="12"/></font></div>
</div></div><div style>And the same for vhost2.</div><div style>I've uploaded my new metadata in TestShib and the result was OK, but when I test <a href="https://vhost1.dev-02.sinapti.co/myApplication/myApplication.jsp">https://vhost1.dev-02.sinapti.co/myApplication/myApplication.jsp</a> the following error appears:</div>
<div style>"<strong>No peer endpoint available to which to send SAML response"</strong></div><div style><br></div><div style>I read about it <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPTroubleshootingCommonErrors">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPTroubleshootingCommonErrors</a> but I don't understand how to fix it.</div>
<div style><br></div><div style>The idp log is:</div><div style><br></div><div style><pre>12:17:00.018 - WARN [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:206] - Relying party '<a href="https://dev-02.sinapti.co/shibboleth">https://dev-02.sinapti.co/shibboleth</a>' requested the response to be returned to endpoint with ACS URL '<a href="https://vhost1.dev-02.sinapti.co/Shibboleth.sso/SAML2/POST">https://vhost1.dev-02.sinapti.co/Shibboleth.sso/SAML2/POST</a>' and binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' however no endpoint, with that URL and using a supported binding, can be found in the relying party's metadata
12:17:00.018 - ERROR [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:429] - No return endpoint available for relying party <a href="https://dev-02.sinapti.co/shibboleth">https://dev-02.sinapti.co/shibboleth</a>
</pre></div><div class="gmail_extra">could you tell me how should I add the endpoint and show me an example?</div><div class="gmail_extra"><br></div><div class="gmail_extra">Thanks in advance</div><div class="gmail_extra">
<br></div><div class="gmail_extra">Mariela<br><br><div class="gmail_quote">On Tue, Apr 30, 2013 at 2:21 PM, Mariela Da Graca <span dir="ltr"><<a href="mailto:mariela@sinapti.co" target="_blank">mariela@sinapti.co</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Thank you Scott. I will try it.</div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><br>
<div class="gmail_quote">On Tue, Apr 30, 2013 at 2:07 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>On 4/30/13 1:04 PM, "Mariela Da Graca" <<a href="mailto:mariela@sinapti.co" target="_blank">mariela@sinapti.co</a>> wrote:<br>
<br>
>Nate and Scott,<br>
>Thanks for your help.<br>
><br>
>I have 3 different entityIDs configured as application override in<br>
>shibboleth2.xml:<br>
<br>
</div>As I said, none of that is needed for the use case you asked about. You<br>
can get rid of all those overrides.<br>
<div><br>
> <Location / ><br>
> AuthType shibboleth<br>
> ShibRequestSetting requireSession 1<br>
> ShibRequestSetting applicationId usyd<br>
<br>
</div>Replace that with ShibRequestSetting entityID <name of IdP to use><br>
<div><div><br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div></div>