<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style>
<!--
@font-face
{font-family:Calibri}
@font-face
{font-family:Tahoma}
@font-face
{font-family:Verdana}
@font-face
{font-family:Consolas}
@font-face
{font-family:Times}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif"}
h1
{margin-right:0in;
margin-left:0in;
font-size:24.0pt;
font-family:"Times New Roman","serif";
font-weight:bold}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
p
{margin-right:0in;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif"}
pre
{margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New"}
span.Heading1Char
{font-family:"Cambria","serif";
color:#365F91;
font-weight:bold}
p.error, li.error, div.error
{margin-right:0in;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif"}
span.HTMLPreformattedChar
{font-family:Consolas}
span.EmailStyle23
{font-family:"Calibri","sans-serif";
color:#1F497D}
.MsoChpDefault
{font-size:10.0pt}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
-->
</style><style type="text/css" id="owaParaStyle">
<!--
-->
</style>
</head>
<body lang="EN-US" link="blue" vlink="purple" fpstyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">
<div style="direction:ltr; font-family:Tahoma; color:#000000; font-size:10pt"><br>
<div>
<hr tabindex="-1" style="color:rgb(0,0,0); font-family:'Times New Roman'; font-size:16px">
<div id="divRpF375196" style="color:rgb(0,0,0); font-family:'Times New Roman'; font-size:16px; direction:ltr">
<font face="Tahoma" size="2" color="#000000"><b>From:</b> users-bounces@shibboleth.net [users-bounces@shibboleth.net] on behalf of Eric Goodman [Eric.Goodman@ucop.edu]<br>
<b>Sent:</b> Friday, June 07, 2013 4:11 PM<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> RE: AuthnFailed and SP IdP test configuration<br>
</font><span style="color:rgb(31,73,125); font-family:Calibri,sans-serif; font-size:11pt"> </span></div>
<div>
<div class="WordSection1">
<p class="MsoNormal" style="color:rgb(0,0,0); font-family:'Times New Roman'; font-size:16px">
<span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">> Then I am prompted for login as expected, and (since I have an account on said IdP) I get back to</span></p>
<p class="MsoNormal" style="color:rgb(0,0,0); font-family:'Times New Roman'; font-size:16px">
<span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">> <a href="https://nuxeo-dev/cdlib.org" target="_blank">https://nuxeo-dev/cdlib.org</a> with the generic “It works!” message. (I did this at 4:05PM, if you want to </span></p>
<p class="MsoNormal" style="color:rgb(0,0,0); font-family:'Times New Roman'; font-size:16px">
<span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">> see if the logs reflect my connection and/or indicate any other parsing errors).</span></p>
<p class="MsoNormal" style="color:rgb(0,0,0); font-family:'Times New Roman'; font-size:16px">
<span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"><br>
</span></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri, sans-serif"><span style="font-size:11pt">Well, I hope this does not </span><span style="font-size:15px">foreshadow the next challenge in my quest -- on test shib two it correctly redirected me back to </span></font><a href="https://nuxeo-dev.cdlib.org/nuxeo/" target="_blank">https://nuxeo-dev.cdlib.org/nuxeo/</a> and
showed me the lizard I can see on tomcat at <a href="http://nuxeo-dev.cdlib.org:8080/nuxeo/" target="_blank">http://nuxeo-dev.cdlib.org:8080/nuxeo/</a> via ajp proxy.</p>
<p class="MsoNormal" style="color:rgb(0,0,0); font-family:'Times New Roman'; font-size:16px">
<span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"><br>
</span></p>
<p class="MsoNormal" style="color:rgb(0,0,0); font-family:'Times New Roman'; font-size:16px">
<span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">> I’ll have to defer to people on this list as to whether the original request is malformed, or whether the </span></p>
<p class="MsoNormal" style="color:rgb(0,0,0); font-family:'Times New Roman'; font-size:16px">
<span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">> IdP </span></p>
<p class="MsoNormal" style="color:rgb(0,0,0); font-family:'Times New Roman'; font-size:16px">
<span style="color:rgb(31,73,125); font-family:Calibri,sans-serif; font-size:11pt">> is failing to handle a valid configuration, but if you can change the format of your request, it looks like </span></p>
<p class="MsoNormal" style="color:rgb(0,0,0); font-family:'Times New Roman'; font-size:16px">
<span style="color:rgb(31,73,125); font-family:Calibri,sans-serif; font-size:11pt">> you will at least get the login prompt and a return back to your application.</span></p>
<p class="MsoNormal" style="color:rgb(0,0,0); font-family:'Times New Roman'; font-size:16px">
<span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"><br>
</span></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri, sans-serif"><span style="font-size:11pt">I'm a very novice shibboleth-sp user. Is the format of the request something I can configure in shibboleth2.xml? I think the only things I changed shibboleth2.xml
from the config that worked with testshib.org were the SSO element and the MetadataProvider element.</span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri, sans-serif"><span style="font-size:11pt"><br>
</span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri, sans-serif"><span style="font-size:11pt">My IdP is telling me "</span></font><span style="color: rgb(42, 94, 142); font-family: Helvetica; font-size: 11px; ">I have tested my test IDP against multiple
service providers and I don’t see any problem with my configuration. Please let me know if you have any questions."</span></p>
<p class="MsoNormal"><span style="color: rgb(42, 94, 142); font-family: Helvetica; font-size: 11px; "><br>
</span></p>
<p class="MsoNormal"><span style="color: rgb(42, 94, 142); font-family: Helvetica; font-size: 11px; ">The only thing I can think to do is that I must set up my own test IdP to figure out what the problem is?</span></p>
<p class="MsoNormal" style="color:rgb(0,0,0); font-family:'Times New Roman'; font-size:16px">
<br>
</p>
<div style="color:rgb(0,0,0); font-family:'Times New Roman'; font-size:16px">
<div>
<div>
<div>
<div></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>