<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div><span>OK, I restored my old cfg onto the new servers. I still got 1 customer reporting an error since yesterday:</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal;"><span><br></span></div><div style="color: rgb(34, 34, 34); font-family: Times; font-size: medium;">opensaml::<wbr>FatalProfileException at (<a href="https://shib.lynda.com/Shibboleth.sso/SAML2/POST" target="_blank" style="color: rgb(17, 85, 204);">https://shib.lynda.com/<wbr>Shibboleth.sso/SAML2/POST</a>)</div><div style="color: rgb(34, 34, 34); font-family: Times; font-size: medium;">SAML response contained an error.</div><div style="color: rgb(34, 34, 34); font-family: Times; font-size: medium;">Error from identity provider:</div><div style="background-color:
transparent;"><span></span></div><blockquote style="color: rgb(34, 34, 34); font-family: Times; font-size: 16px;"><strong>Status:</strong> urn:oasis:names:tc:<wbr>SAML:2.0:status:Requester<br><strong>Message:</strong> Invalid signature</blockquote><blockquote style="color: rgb(34, 34, 34); font-family: Times; font-size: 16px;"><br></blockquote><blockquote style="color: rgb(34, 34, 34); font-family: Times; font-size: 16px;">Running shibd -check just has the deprecated settings warnings for my old config but no other errors.</blockquote><div><br></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <hr size="1"> <font size="2" face="Arial"> <b><span style="font-weight:bold;">From:</span></b> "Cantor, Scott" <cantor.2@osu.edu><br> <b><span style="font-weight: bold;">To:</span></b> Shib Users
<users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Sunday, August 11, 2013 4:43 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: Yet another Idp error after SP upgrade<br> </font> </div> <div class="y_msg_container"><br>On 8/11/13 7:40 PM, "Mike Flynn" <<a ymailto="mailto:shibbolethlynda@yahoo.com" href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>> wrote:<br><br>>OK. I copyied the config and it's associated files from the old server<br>>to the new. I made changes to my old config file that were recommended<br>>by the Wiki (where appropriate) for the current version. I got rid of<br>>some unused session initiators.<br><br>None of that would cause anything you've described.<br><br>> Is my old config for the previous version still backwards compatible<br>>with the current version?<br><br>Yes.<br><br>>Would you recommend that I use
that config as is until I can isolate what<br>>is causing these issues?<br><br>Probably so, yes. But what you did was change keys, changed an entityID,<br>that kind of thing. That's what causes such errors. If you don't undo<br>that, it's not going to fix anything.<br><br>-- Scott<br><br><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br></div> </div> </div> </div></body></html>