<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" id="owaParaStyle"></style>
</head>
<body fpstyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Hi,
<div><br>
</div>
<div>As you may know, I'm investigating an issue where my SP works with testshib.org; but it does not work with my identity management group's test IdP. The test IdP operator says that the test IdP works with other SPs, therefore the problem is on my end.</div>
<div><br>
</div>
<div>I'm going to set up my own test IdP to investigate the issue to try to reproduce the error. I was reading <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPSPLocalTestInstall" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPSPLocalTestInstall#IdPSPLocalTestInstall-Preparation</a> and
it says "<span style="background-color: rgb(255, 255, 255); color: rgb(51, 51, 51); font-family: Arial, Helvetica, FreeSans, sans-serif; line-height: 17px; text-align: left; ">Port 80 and 443 need to be open. Watch out for firewalls and permission problems."</span></div>
<div><span style="background-color: rgb(255, 255, 255); color: rgb(51, 51, 51); font-family: Arial, Helvetica, FreeSans, sans-serif; line-height: 17px; text-align: left; "><br>
</span></div>
<div>
<div>nuxeo@nuxeo-dev:~/servers/shibboleth/var/run/shibboleth> curl -k https://idt1.ucop.edu/</div>
<div>Hello world IDT1</div>
<div>nuxeo@nuxeo-dev:~/servers/shibboleth/var/run/shibboleth> curl -k http://idt1.ucop.edu/</div>
<div>curl: (7) Failed connect to idt1.ucop.edu:80; Connection timed out</div>
</div>
<div><br>
</div>
<div>Port 80 is not open between my SP and my IdP -- could this be the root of my error:</div>
<div>
<p style="margin: 5px 0px 5px 18px; font-size: 12px; font-family: 'Times New Roman'; ">
<b>Status:</b> urn:oasis:names:tc:SAML:2.0:status:Responder<br>
<b>Sub-Status:</b> urn:oasis:names:tc:SAML:2.0:status:AuthnFailed</p>
</div>
<div>?</div>
<div><br>
</div>
<div>Grasping at straws, my IdP mentioned that they were using an old version of the IdP software. Could there be a version incompatibility issue? Do I need to install and old version of the SP to match the IdP he is running?</div>
<div><br>
</div>
<div>Thanks -- Brian</div>
</div>
</body>
</html>