<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span>Well, you folks are saying that I changed an entityID etc to cause this error - but like I said - I copied etc verbatim. No change.... Only certain IDps are failing (and still failing now). In the logs I am getting things like this:</span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span><br></span></div><div style="background-color: transparent;">2013-08-12 08:46:44 ERROR OpenSAML.SOAPClient [7]: SOAP client detected a SAML error: (saml1p:Responder) (Message did not meet security requirements)</div><div style="background-color: transparent;">2013-08-12 08:46:44 ERROR Shibboleth.AttributeResolver.Query [7]: attribute authority returned a
SAML error</div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font size="2" face="Arial"> <b><span style="font-weight:bold;">From:</span></b> "Cantor, Scott" <cantor.2@osu.edu><br> <b><span style="font-weight: bold;">To:</span></b> Shib Users <users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Monday, August 12, 2013 10:49 AM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: Yet another Idp error after SP upgrade<br> </font> </div> <div class="y_msg_container"><br>On 8/12/13 1:44 PM, "Mike Flynn" <<a ymailto="mailto:shibbolethlynda@yahoo.com" href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>> wrote:<br>><br>>Without changing any of the
files I copied the etc folder from my old<br>>working system to production so I have not changed anything in this<br>>config as it sits. If the upgrade cannot change the metadata, when where<br>>did this stanza come from on the new server?<br><br>I didn't say it couldn't change the metadata generated, I said that can't<br>matter to anybody unless they are directly consuming it.<br><br>And regardless, the metadata is *about* your system, it does not affect<br>how it runs in and of itself.<br><br>-- Scott<br><br><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br></div> </div> </div> </div></body></html>