<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" id="owaParaStyle" style="display: none;">P {margin-top:0;margin-bottom:0;}</style>
</head>
<body dir="ltr" fpstyle="1" aria-label="Message body" tabindex="0" style="">
<div name="divtagdefaultwrapper" id="divtagdefaultwrapper" style="font-family: Calibri,Arial,Helvetica,sans-serif; font-size: 12pt; color: #000000; margin: 0">
After a succeeded authentication (according to idp-process.log and ldap logs) through Ldap, I am getting "Error: <span style="font-size: medium;">No peer endpoint available to which to send SAML response" when using google chrome browser, and "</span><span style="font-size: 12pt;">opensaml::FatalProfileException
at (http://ans.247lib.com/Shibboleth.sso/SAML2/POST): </span><span style="font-size: 12pt;">Unable to establish security of incoming assertion" when I use Internet explorer.</span>
<div><br>
</div>
<div>An extract of corresponding idp-process.log is as below:</div>
<div><br>
</div>
<div>
<div><font size="2" face="Tahoma, Geneva, sans-serif">10:04:59.030 - INFO [edu.vt.middleware.ldap.jaas.JaasAuthenticator:176] - Authentication succeeded for dn: uid=jean,ou=People,dc=amlib,dc=com</font></div>
<div><font size="2" face="Tahoma, Geneva, sans-serif">10:04:59.046 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:108] - Looking up DN using userField</font></div>
<div><font size="2" face="Tahoma, Geneva, sans-serif">10:04:59.046 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:193] - Search with the following parameters:</font></div>
<div><font size="2" face="Tahoma, Geneva, sans-serif">10:04:59.046 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:194] - dn = dc=amlib,dc=com</font></div>
<div><font size="2" face="Tahoma, Geneva, sans-serif">10:04:59.046 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:195] - filter = (uid={0})</font></div>
<div><font size="2" face="Tahoma, Geneva, sans-serif">10:04:59.046 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:196] - filterArgs = [jean]</font></div>
<div><font size="2" face="Tahoma, Geneva, sans-serif">10:04:59.046 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:197] - searchControls = javax.naming.directory.SearchControls@12f2edf</font></div>
<div><font size="2" face="Tahoma, Geneva, sans-serif">10:04:59.046 - DEBUG [edu.vt.middleware.ldap.auth.SearchDnResolver:198] - handler = [edu.vt.middleware.ldap.handler.FqdnSearchResultHandler@1c2a573]</font></div>
<div><font size="2" face="Tahoma, Geneva, sans-serif">10:04:59.046 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:223] - Committed the following principals: [jean[]]</font></div>
<div><font size="2" face="Tahoma, Geneva, sans-serif">10:04:59.046 - DEBUG [edu.vt.middleware.ldap.jaas.LdapLoginModule:229] - Committed the following roles: []</font></div>
<div><font size="2" face="Tahoma, Geneva, sans-serif">10:04:59.061 - INFO [Shibboleth-Access:73] - 20130709T090459Z|192.168.0.2|amlib.co.uk|/profile/SAML2/Redirect/SSO|</font></div>
<div><font size="2" face="Tahoma, Geneva, sans-serif">10:04:59.061 - WARN [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:206] - Relying party 'https://ans.247lib.com/shibboleth' requested the response to be returned to endpoint with ACS URL 'https://ans.247lib.com/Shibboleth.sso/SAML2/POST'
and binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' however no endpoint, with that URL and using a supported binding, can be found in the relying party's metadata </font></div>
<div><font size="2" face="Tahoma, Geneva, sans-serif">10:04:59.061 - ERROR [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:447] - No return endpoint available for relying party https://ans.247lib.com/shibboleth</font></div>
<div><font size="2" face="Tahoma, Geneva, sans-serif">10:21:18.041 - INFO [Shibboleth-Access:73] - 20130709T092118Z|192.168.0.2|amlib.co.uk|/profile/SAML2/Redirect/SSO|</font></div>
<div><b><font face="Courier New, monospace"><br>
</font></b>
<div>
<div>
<p style="font-size: 13px;"><b><font face="Courier New, monospace"> </font></b></p>
<p style="font-size: 13px; font-family: Tahoma;"> </p>
<p><font size="3">The related error message on shibd.log is:</font></p>
<p style="font-size: 13px; font-family: Tahoma;"><br>
</p>
<p><font face="Tahoma" size="2">2013-07-09 09:57:57 ERROR XMLTooling.ParserPool : fatal error on line 0, column 0, message: unable to connect socket for URL 'https://amlib.co.uk/idp/profile/Metadata/SAML'</font></p>
<p><font face="Tahoma" size="2">2013-07-09 09:57:57 ERROR OpenSAML.MetadataProvider.XML : error while loading resource (https://amlib.co.uk/idp/profile/Metadata/SAML): XML error(s) during parsing, check log for specifics</font></p>
<p><font face="Tahoma" size="2">2013-07-09 09:57:57 WARN OpenSAML.MetadataProvider.XML : adjusted reload interval to 1800 seconds</font></p>
<p><font face="Tahoma" size="2">2013-07-09 09:57:57 CRIT OpenSAML.MetadataProvider.XML : maintaining existing configuration, error reloading resource (https://amlib.co.uk/idp/profile/Metadata/SAML): XML error(s) during parsing, check log for specifics</font></p>
<p><font face="Tahoma" size="2">2013-07-09 10:22:11 WARN OpenSAML.MessageDecoder.SAML2 [1]: no metadata found, can't establish identity of issuer (https://amlib.co.uk/idp/shibboleth)</font></p>
<p><font face="Tahoma" size="2">2013-07-09 10:22:11 WARN Shibboleth.SSO.SAML2 [1]: no metadata found, can't establish identity of issuer (https://amlib.co.uk/idp/shibboleth)</font></p>
<p><font face="Tahoma" size="2">2013-07-09 10:22:11 WARN Shibboleth.SSO.SAML2 [1]: detected a problem with assertion: Unable to establish security of incoming assertion.</font></p>
<p><font face="Tahoma" size="2">2013-07-09 10:27:34 INFO XMLTooling.StorageService : purged 4 expired record(s) from storage</font></p>
<p><font face="Tahoma" size="2">2013-07-09 10:27:57 INFO OpenSAML.MetadataProvider.XML : reloading remote resource...</font></p>
<p><font face="Tahoma" size="2">2013-07-09 10:27:57 INFO OpenSAML.MetadataProvider.XML : loaded XML resource (https://amlib.co.uk/idp/profile/Metadata/SAML)</font></p>
<p><font face="Tahoma" size="2">2013-07-09 10:27:57 INFO OpenSAML.MetadataProvider.XML : adjusted reload interval to 7200 seconds</font></p>
<p style="font-size: 13px; font-family: Tahoma;"><br>
</p>
<p style="font-size: 13px; font-family: Tahoma;"><br>
</p>
<p style="font-size: 13px; font-family: Tahoma;"><br>
</p>
<p style="font-size: 13px; font-family: Tahoma;">Kind regards</p>
<p style="font-size: 13px; font-family: Tahoma;"> </p>
<p style="font-size: 13px; font-family: Tahoma;"> </p>
<p style="font-size: 13px; font-family: Tahoma;"><font color="#333333" face="Arial">Gilles Rubens Badouet</font></p>
<p style="font-size: 13px; font-family: Tahoma;"><br>
</p>
</div>
</div>
</div>
</div>
</div>
</body>
</html>