<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" id="owaParaStyle"></style><style type="text/css"></style><style type="text/css"><!----></style>
</head>
<body fpstyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Hello all,
<div><br>
</div>
<div>I set up an IdP and SP in an ad-hoc network using the latest Shibboleth providers versions. My IdP is running within Tomcat 6 and my SP within IIS7. I faked everything properly and also configured well local hostnames resolution so that each server can
be accessible from each other through http and https. </div>
<div>SP hostname: ans.247lib.com</div>
<div>IdP hostname: amlib.co.uk<br>
<div><br>
</div>
<div>When it came to get IDP and SP talk each other after configuring the relying-party.xml and shibboleth2.xml files as indicated in the Shibboleth wiki pages, I first encountered the following problem: "Error decoding authentication request message" when
trying to browse <a href="https://ans.247.com/secure." target="_blank">https://ans.247.com/secure.</a> It looks like the authentication request is sent to the Idp, but no authentication response since the url I get back for the above error message is <a href="https://amlib.co.uk:8443/idp/profile/SAML2/Redirect/SSO" target="_blank">https://amlib.co.uk:8443/idp/profile/SAML2/Redirect/SSO</a> .
When I also looked at the shibd log, I could read "no metadata found, can't establish identity of issuer (https://amlib.co.uk/idp:8443/shibboleth)". I thought that it was an issue at the level of metadata configuration in Shibboleth2.xml file.</div>
<div><br>
</div>
<div>I therefore modified a bit the metadata element in Shibboleth2.xml, the error message is now <span style="font-family: 'Times New Roman'; font-size: medium;">opensaml::FatalProfileException at (http://ans.247lib.com/Shibboleth.sso/SAML2/POST)</span>
<p style="font-family: 'Times New Roman'; font-size: medium;">SAML response contained an error.</p>
<p style="font-family: 'Times New Roman'; font-size: medium;">Error from identity provider:</p>
<blockquote style="font-family: 'Times New Roman'; font-size: medium;"><strong>Status:</strong> urn:oasis:names:tc:SAML:2.0:status:Responder<br>
<strong>Sub-Status:</strong> urn:oasis:names:tc:SAML:2.0:status:AuthnFailed</blockquote>
<h1 style="font-family: 'Times New Roman';"><span style="font-weight: normal;"><font size="3">Note: My metadata elements configuration are as below:</font></span></h1>
<div><font size="3" face="Times New Roman"><b>For Shibboleth2.xml:</b></font></div>
<div><font size="3" face="Times New Roman"><br>
</font></div>
<div>
<div><font size="3" face="Times New Roman"><MetadataProvider type="XML" uri="http://amlib.co.uk:8080/idp/profile/Metadata/SAML"</font></div>
<div><font size="3" face="Times New Roman"> backingFilePath="idp-metadata.xml" reloadInterval="7200"></font></div>
<div><font size="3" face="Times New Roman"> </MetadataProvider></font></div>
<div><font size="3" face="Times New Roman"><br>
</font></div>
</div>
<div><font size="3" face="Times New Roman"><b>For Relying-party:</b></font></div>
<div>
<div><font size="3" face="Times New Roman"><MetadataProvider xsi:type="ChainingMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata"</font></div>
<div><font size="3" face="Times New Roman"><span class="Apple-tab-span" style="white-space:pre"></span> id="ShibbolethMetadata"></font></div>
<div><font size="3" face="Times New Roman"> <MetadataProvider xsi:type="FileBackedHTTPMetadataProvider" </font></div>
<div><font size="3" face="Times New Roman"><span class="Apple-tab-span" style="white-space:pre"></span> id="AnsMetadata"</font></div>
<div><font size="3" face="Times New Roman"> metadataURL="http://ans.247lib.com/Shibboleth.sso/Metadata"</font></div>
<div><font size="3" face="Times New Roman"> backingFile="C:\IDP\metadata\some-metadata.xml" /> </font></div>
<div><font size="3" face="Times New Roman"></MetadataProvider></font></div>
</div>
<div style="font-family:Tahoma; font-size:13px">
<div style="font-family:Tahoma; font-size:13px">
<p><br>
</p>
<p>Kindly help please </p>
<p><br>
</p>
<p> </p>
<p>Kind regards</p>
<p> </p>
<p> </p>
<p><font color="#333333" face="Arial">Gilles Rubens Badouet</font></p>
<p><font color="#333333" face="Arial">Student ID: 3940347</font></p>
<p><font color="#333333" face="Arial">Faculty of Engineering and Computing</font></p>
<p><font color="#333333" face="Arial">MSc Network Computing Course</font></p>
<p><font color="#333333" face="Arial">Mobile: 07424486426</font></p>
</div>
</div>
</div>
</div>
</div>
</body>
</html>