<p>I don't want to derail the original thread so I won't go too much into it. I'll perform a debugging on the issue as soon as find some more time. Ideally I'd like a Shib SP in place for testing rather than the limited old picketlink implementation I got working but finding time to learn the SP hasnt been easy (and the fact that it's a standalone app rather than a webapp which to my understanding requires an apache in front of it doesn't make it any easier).</p>
<p>Thanks for the input.</p>
<div class="gmail_quote">On Oct 31, 2013 10:38 PM, "Cantor, Scott" <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
On 10/31/13, 5:27 PM, "Byte Flinger" <<a href="mailto:byteflinger@gmail.com">byteflinger@gmail.com</a>> wrote:<br>
<br>
>Server time (OS time) is the same on both. This was mot happening last<br>
>time I tried so I suspect it has to do with the time change on Sunday.<br>
<br>
If they're on track with each other, you're talking about comparing<br>
something issues seconds ago. I don't see how a time change can affect<br>
that comparison.<br>
<br>
> I do wonder why the other setup which apart from Shibboleth attribute<br>
>and relying-party configuration (and the fact that it's installed on the<br>
>cloud while the non-working one is installed on a redhat vm) is working<br>
>fine though.<br>
<br>
That isn't possible, so you're overlooking some difference in the messages<br>
by definition here. That assumes it's not the simple case of an SP that<br>
doesn't implement skew and the servers are just a few seconds off. Which<br>
is, as I said, a bug in the SP.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div>