<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
We are trying to set up a new Shibboleth implementation. Initially, we set up an IDP on a Windows 2012 server box with a Centos 6 box as the SP. We were getting the message validation errors that we have read are often a result of time differences. Although
we set up NTP on both boxes we thought it might be simpler to configure both IDP and SP on the same Centos box.
<div><br>
</div>
<div>We followed a tutorial at: <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPInstall">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPInstall</a></div>
<div><br>
</div>
<div>Since we had an SP configured on the Centos box we simply installed the IDP there as well. We can contact the IDP and even its login page (<a href="https://unixadmin.qatar-med.cornell.edu/idp/login.jsp">https://unixadmin.qatar-med.cornell.edu/idp/login.jsp</a>)
however we cannot get the SP to successfully use the IDP. We get varients on the following:</div>
<div><br>
</div>
<div><span class="Apple-style-span" style="font-family: Geneva, Arial, Helvetica, sans-serif; ">
<p style="font-size: 10pt; margin-top: 20px; margin-bottom: 20px; ">Please include the following message in any email:</p>
<p class="error" style="font-size: 10pt; margin-top: 20px; margin-bottom: 20px; font-weight: bold; ">
opensaml::saml2md::MetadataException at (<a href="https://unixadmin.qatar-med.cornell.edu/secure">https://unixadmin.qatar-med.cornell.edu/secure</a>)</p>
<p style="font-size: 10pt; margin-top: 20px; margin-bottom: 20px; ">Unable to locate metadata for identity provider (<a href="https://unixadmin.qatar-med.cornell.edu/idp/shibboleth">https://unixadmin.qatar-med.cornell.edu/idp/shibboleth</a>)</p>
</span>
<div>Simply restarting shibd yields the following in the shibd_warn.log:</div>
<div><br>
</div>
<div>
<div>2013-11-05 10:19:59 WARN Shibboleth.Application : insecure cookieProps setting, set to "https" for SSL/TLS-only usage</div>
<div>2013-11-05 10:19:59 WARN Shibboleth.Application : handlerSSL should be enabled for SSL/TLS-enabled web sites</div>
<div>2013-11-05 10:19:59 ERROR XMLTooling.libcurl.InputStream : error while fetching
<a href="https://unixadmin.qatar-med.cornell.edu:">https://unixadmin.qatar-med.cornell.edu:</a> (22) The requested URL returned error: 403 Forbidden</div>
<div>2013-11-05 10:19:59 ERROR XMLTooling.ParserPool : fatal error on line 0, column 0, message: internal error in NetAccessor</div>
<div>2013-11-05 10:19:59 ERROR OpenSAML.MetadataProvider.XML : error while loading resource (<a href="https://unixadmin.qatar-med.cornell.edu">https://unixadmin.qatar-med.cornell.edu</a>): XML error(s) during parsing, check log for specifics</div>
<div>2013-11-05 10:19:59 WARN OpenSAML.MetadataProvider.XML : adjusted reload interval to 600 seconds</div>
<div>2013-11-05 10:19:59 WARN OpenSAML.MetadataProvider.XML : trying backup file, exception loading remote resource: XML error(s) during parsing, check log for specifics</div>
<div>2013-11-05 10:19:59 ERROR XMLTooling.ParserPool : fatal error on line 0, column 0, message: unable to open primary document entity '/var/cache/shibboleth/idp-metadata.xml'</div>
<div>2013-11-05 10:19:59 ERROR OpenSAML.MetadataProvider.XML : error while loading resource (/var/cache/shibboleth/idp-metadata.xml): XML error(s) during parsing, check log for specifics</div>
<div>2013-11-05 10:19:59 CRIT Shibboleth.Application : error initializing MetadataProvider: XML error(s) during parsing, check log for specifics</div>
</div>
<div><br>
</div>
<div>As far as we can see, however, the URL works. Visiting the URL (<span class="Apple-style-span" style="font-family: Geneva, Arial, Helvetica, sans-serif; font-size: 13px; "><a href="https://unixadmin.qatar-med.cornell.edu/idp/shibboleth">https://unixadmin.qatar-med.cornell.edu/idp/shibboleth</a></span>)
outputs an XML file:</div>
<div><br>
</div>
<div><span class="Apple-style-span" style="font-family: monospace; font-size: 13px; ">
<div class="line"><span class="webkit-html-tag"><EntityDescriptor<span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">xmlns</span>="<span class="webkit-html-attribute-value">urn:oasis:names:tc:SAML:2.0:metadata</span>"</span><span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">xmlns:ds</span>="<span class="webkit-html-attribute-value"><a href="http://www.w3.org/2000/09/xmldsig#">http://www.w3.org/2000/09/xmldsig#</a></span>"</span><span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">xmlns:shibmd</span>="<span class="webkit-html-attribute-value">urn:mace:shibboleth:metadata:1.0</span>"</span><span class="webkit-html-attribute"><span class="webkit-html-attribute-name">xmlns:xsi</span>="<span class="webkit-html-attribute-value"><a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a></span>"</span><span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">entityID</span>="<span class="webkit-html-attribute-value"><a href="https://unixadmin.qatar-med.cornell.edu/idp/shibboleth">https://unixadmin.qatar-med.cornell.edu/idp/shibboleth</a></span>"</span>></span></div>
<div class="collapsible-content" style="margin-left: 1em; ">
<div class="collapsible" id="collapsible1">
<div class="expanded">
<div class="line"><span class="button collapse-button" style="-webkit-user-select: none; cursor: pointer; display: inline-block; margin-left: -10px; width: 10px; vertical-align: bottom; background-image: -webkit-canvas(arrowDown); height: 10px; background-position: 0% 0%; background-repeat: no-repeat no-repeat; "></span><span class="webkit-html-tag"><IDPSSODescriptor<span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">protocolSupportEnumeration</span>="<span class="webkit-html-attribute-value">urn:mace:shibboleth:1.0
urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol</span>"</span>></span></div>
<div class="collapsible-content" style="margin-left: 1em; ">
<div class="collapsible" id="collapsible2">
<div class="expanded">
<div class="line"><span class="button collapse-button" style="-webkit-user-select: none; cursor: pointer; display: inline-block; margin-left: -10px; width: 10px; vertical-align: bottom; background-image: -webkit-canvas(arrowDown); height: 10px; background-position: 0% 0%; background-repeat: no-repeat no-repeat; "></span><span class="webkit-html-tag"><Extensions></span></div>
<div class="collapsible-content" style="margin-left: 1em; ">
<div class="line"><span class="webkit-html-tag"><shibmd:Scope<span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">regexp</span>="<span class="webkit-html-attribute-value">false</span>"</span>></span><span class="text"><a href="http://cornell.edu">cornell.edu</a></span><span class="webkit-html-tag"></shibmd:Scope></span></div>
</div>
<div class="line"><span class="webkit-html-tag"></Extensions></span></div>
</div>
</div>
<div class="collapsible" id="collapsible3">
<div class="expanded">
<div class="line"><span class="button collapse-button" style="-webkit-user-select: none; cursor: pointer; display: inline-block; margin-left: -10px; width: 10px; vertical-align: bottom; background-image: -webkit-canvas(arrowDown); height: 10px; background-position: 0% 0%; background-repeat: no-repeat no-repeat; "></span><span class="webkit-html-tag"><KeyDescriptor></span></div>
<div class="collapsible-content" style="margin-left: 1em; ">
<div class="collapsible" id="collapsible4">
<div class="expanded">
<div class="line"><span class="button collapse-button" style="-webkit-user-select: none; cursor: pointer; display: inline-block; margin-left: -10px; width: 10px; vertical-align: bottom; background-image: -webkit-canvas(arrowDown); height: 10px; background-position: 0% 0%; background-repeat: no-repeat no-repeat; "></span><span class="webkit-html-tag"><ds:KeyInfo></span></div>
<div class="collapsible-content" style="margin-left: 1em; ">
<div class="collapsible" id="collapsible5">
<div class="expanded">
<div class="line"><span class="button collapse-button" style="-webkit-user-select: none; cursor: pointer; display: inline-block; margin-left: -10px; width: 10px; vertical-align: bottom; background-image: -webkit-canvas(arrowDown); height: 10px; background-position: 0% 0%; background-repeat: no-repeat no-repeat; "></span><span class="webkit-html-tag"><ds:X509Data></span></div>
<div class="collapsible-content" style="margin-left: 1em; ">
<div class="collapsible" id="collapsible6">
<div class="expanded">
<div class="line"><span class="button collapse-button" style="-webkit-user-select: none; cursor: pointer; display: inline-block; margin-left: -10px; width: 10px; vertical-align: bottom; background-image: -webkit-canvas(arrowDown); height: 10px; background-position: 0% 0%; background-repeat: no-repeat no-repeat; "></span><span class="webkit-html-tag"><ds:X509Certificate></span></div>
<div class="collapsible-content" style="margin-left: 1em; "><span class="text">MIIDaTCCAlGgAwIBAgIURudjUX7LNnISb69BeK0csUrr3OwwDQYJKoZIhvcNAQEF BQAwKjEoMCYGA1UEAxMfdW5peGFkbWluLnFhdGFyLW1lZC5jb3JuZWxsLmVkdTAe Fw0xMzEwMjkxMzExNDlaFw0zMzEwMjkxMzExNDlaMCoxKDAmBgNVBAMTH3VuaXhh
ZG1pbi5xYXRhci1tZWQuY29ybmVsbC5lZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCf87C2Uk5ZUgltNmI9XAMVZ8DW4pfRgMMQwQStTxgPUbtvyaJt WOq1EPXlTJw+AvN6YQo0qOCLpf0gVF5jDaBQZ0gIZwWu7cOlKxvAXfAhnpqvrkmz jN4YplSTgg3LuNxGovVHBGqYB76IOI/BwsZtOsH/rwFI4mpDj7zuS2Gv6cOVPiMm
8UJCUoBjsSF6FfaDGTFVSnNNRd3Eke3vzzD7FhPDfXIw33eXtE88t6oEnaz/27xH lRTL3JQpmnBYcoaK1wFH/yOO6HPEbak5Wnq9oVu+f9uUja7cFRsgS+MeO3KEOBku sGxFF+dKmojBbtJhyRaDebknPA/pmRIZ7gotAgMBAAGjgYYwgYMwYgYDVR0RBFsw WYIfdW5peGFkbWluLnFhdGFyLW1lZC5jb3JuZWxsLmVkdYY2aHR0cHM6Ly91bml4
YWRtaW4ucWF0YXItbWVkLmNvcm5lbGwuZWR1L2lkcC9zaGliYm9sZXRoMB0GA1Ud DgQWBBRvtevYFbtFrBIMnwNMqaQak+8a2zANBgkqhkiG9w0BAQUFAAOCAQEAOySG 9jQo2CfX6eC9dSh+TeWWeagfv5+Z5jfJg7iiC2zFg5rQe4ZLpHQjKJgNtvkcQJYy p84Si/m0/aAD6UN+ddYB8J86NCytULJz/SR3Il8KfJuMzOPvfifjyZOZzbEBRwBy
Le99al26WANv3wU62DnU/1umsJaqqnDv8Gt63wW6dlRMAhAsueXVgBr2x4NdrnJ0 RomKmPkg21Z2WzUhp4CEBcrez7TH+qLKZ1vcWXPqdS/Lj1Z1C0l/oYv4dZaNPfdJ 5HFI8L58cxpfwbCh8EskMJEz6EvyfcSV9w9CxoHIqbU0/JV7MtShu7fi3jx2ORQy 3ixe+e2BKhXlq29fyQ==</span></div>
<div class="line"><span class="webkit-html-tag"></ds:X509Certificate></span></div>
</div>
</div>
</div>
<div class="line"><span class="webkit-html-tag"></ds:X509Data></span></div>
</div>
</div>
</div>
<div class="line"><span class="webkit-html-tag"></ds:KeyInfo></span></div>
</div>
</div>
</div>
<div class="line"><span class="webkit-html-tag"></KeyDescriptor></span></div>
</div>
</div>
<div class="line"><span class="webkit-html-tag"><ArtifactResolutionService<span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Binding</span>="<span class="webkit-html-attribute-value">urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding</span>"</span><span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Location</span>="<span class="webkit-html-attribute-value"><a href="https://unixadmin.qatar-med.cornell.edu:8443/idp/profile/SAML1/SOAP/ArtifactResolution">https://unixadmin.qatar-med.cornell.edu:8443/idp/profile/SAML1/SOAP/ArtifactResolution</a></span>"</span><span class="webkit-html-attribute"><span class="webkit-html-attribute-name">index</span>="<span class="webkit-html-attribute-value">1</span>"</span>/></span></div>
<div class="line"><span class="webkit-html-tag"><ArtifactResolutionService<span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Binding</span>="<span class="webkit-html-attribute-value">urn:oasis:names:tc:SAML:2.0:bindings:SOAP</span>"</span><span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Location</span>="<span class="webkit-html-attribute-value"><a href="https://unixadmin.qatar-med.cornell.edu:8443/idp/profile/SAML2/SOAP/ArtifactResolution">https://unixadmin.qatar-med.cornell.edu:8443/idp/profile/SAML2/SOAP/ArtifactResolution</a></span>"</span><span class="webkit-html-attribute"><span class="webkit-html-attribute-name">index</span>="<span class="webkit-html-attribute-value">2</span>"</span>/></span></div>
<div class="line"><span class="webkit-html-tag"><SingleLogoutService<span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Binding</span>="<span class="webkit-html-attribute-value">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect</span>"</span><span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Location</span>="<span class="webkit-html-attribute-value"><a href="https://unixadmin.qatar-med.cornell.edu/idp/profile/SAML2/Redirect/SLO">https://unixadmin.qatar-med.cornell.edu/idp/profile/SAML2/Redirect/SLO</a></span>"</span>/></span></div>
<div class="line"><span class="webkit-html-tag"><SingleLogoutService<span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Binding</span>="<span class="webkit-html-attribute-value">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST</span>"</span><span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Location</span>="<span class="webkit-html-attribute-value"><a href="https://unixadmin.qatar-med.cornell.edu/idp/profile/SAML2/POST/SLO">https://unixadmin.qatar-med.cornell.edu/idp/profile/SAML2/POST/SLO</a></span>"</span>/></span></div>
<div class="line"><span class="webkit-html-tag"><SingleLogoutService<span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Binding</span>="<span class="webkit-html-attribute-value">urn:oasis:names:tc:SAML:2.0:bindings:SOAP</span>"</span><span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Location</span>="<span class="webkit-html-attribute-value"><a href="https://unixadmin.qatar-med.cornell.edu:8443/idp/profile/SAML2/SOAP/SLO">https://unixadmin.qatar-med.cornell.edu:8443/idp/profile/SAML2/SOAP/SLO</a></span>"</span>/></span></div>
<div class="line"><span class="webkit-html-tag"><NameIDFormat></span><span class="text">urn:mace:shibboleth:1.0:nameIdentifier</span><span class="webkit-html-tag"></NameIDFormat></span></div>
<div class="collapsible" id="collapsible7">
<div class="expanded">
<div class="line"><span class="button collapse-button" style="-webkit-user-select: none; cursor: pointer; display: inline-block; margin-left: -10px; width: 10px; vertical-align: bottom; background-image: -webkit-canvas(arrowDown); height: 10px; background-position: 0% 0%; background-repeat: no-repeat no-repeat; "></span><span class="webkit-html-tag"><NameIDFormat></span></div>
<div class="collapsible-content" style="margin-left: 1em; "><span class="text">urn:oasis:names:tc:SAML:2.0:nameid-format:transient</span></div>
<div class="line"><span class="webkit-html-tag"></NameIDFormat></span></div>
</div>
</div>
<div class="line"><span class="webkit-html-tag"><SingleSignOnService<span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Binding</span>="<span class="webkit-html-attribute-value">urn:mace:shibboleth:1.0:profiles:AuthnRequest</span>"</span><span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Location</span>="<span class="webkit-html-attribute-value"><a href="https://unixadmin.qatar-med.cornell.edu/idp/profile/Shibboleth/SSO">https://unixadmin.qatar-med.cornell.edu/idp/profile/Shibboleth/SSO</a></span>"</span>/></span></div>
<div class="line"><span class="webkit-html-tag"><SingleSignOnService<span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Binding</span>="<span class="webkit-html-attribute-value">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST</span>"</span><span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Location</span>="<span class="webkit-html-attribute-value"><a href="https://unixadmin.qatar-med.cornell.edu/idp/profile/SAML2/POST/SSO">https://unixadmin.qatar-med.cornell.edu/idp/profile/SAML2/POST/SSO</a></span>"</span>/></span></div>
<div class="line"><span class="webkit-html-tag"><SingleSignOnService<span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Binding</span>="<span class="webkit-html-attribute-value">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign</span>"</span><span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Location</span>="<span class="webkit-html-attribute-value"><a href="https://unixadmin.qatar-med.cornell.edu/idp/profile/SAML2/POST-SimpleSign/SSO">https://unixadmin.qatar-med.cornell.edu/idp/profile/SAML2/POST-SimpleSign/SSO</a></span>"</span>/></span></div>
<div class="line"><span class="webkit-html-tag"><SingleSignOnService<span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Binding</span>="<span class="webkit-html-attribute-value">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect</span>"</span><span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Location</span>="<span class="webkit-html-attribute-value"><a href="https://unixadmin.qatar-med.cornell.edu/idp/profile/SAML2/Redirect/SSO">https://unixadmin.qatar-med.cornell.edu/idp/profile/SAML2/Redirect/SSO</a></span>"</span>/></span></div>
</div>
<div class="line"><span class="webkit-html-tag"></IDPSSODescriptor></span></div>
</div>
</div>
<div class="collapsible" id="collapsible8">
<div class="expanded">
<div class="line"><span class="button collapse-button" style="-webkit-user-select: none; cursor: pointer; display: inline-block; margin-left: -10px; width: 10px; vertical-align: bottom; background-image: -webkit-canvas(arrowDown); height: 10px; background-position: 0% 0%; background-repeat: no-repeat no-repeat; "></span><span class="webkit-html-tag"><AttributeAuthorityDescriptor<span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">protocolSupportEnumeration</span>="<span class="webkit-html-attribute-value">urn:oasis:names:tc:SAML:1.1:protocol
urn:oasis:names:tc:SAML:2.0:protocol</span>"</span>></span></div>
<div class="collapsible-content" style="margin-left: 1em; ">
<div class="collapsible" id="collapsible9">
<div class="expanded">
<div class="line"><span class="button collapse-button" style="-webkit-user-select: none; cursor: pointer; display: inline-block; margin-left: -10px; width: 10px; vertical-align: bottom; background-image: -webkit-canvas(arrowDown); height: 10px; background-position: 0% 0%; background-repeat: no-repeat no-repeat; "></span><span class="webkit-html-tag"><Extensions></span></div>
<div class="collapsible-content" style="margin-left: 1em; ">
<div class="line"><span class="webkit-html-tag"><shibmd:Scope<span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">regexp</span>="<span class="webkit-html-attribute-value">false</span>"</span>></span><span class="text"><a href="http://cornell.edu">cornell.edu</a></span><span class="webkit-html-tag"></shibmd:Scope></span></div>
</div>
<div class="line"><span class="webkit-html-tag"></Extensions></span></div>
</div>
</div>
<div class="collapsible" id="collapsible10">
<div class="expanded">
<div class="line"><span class="button collapse-button" style="-webkit-user-select: none; cursor: pointer; display: inline-block; margin-left: -10px; width: 10px; vertical-align: bottom; background-image: -webkit-canvas(arrowDown); height: 10px; background-position: 0% 0%; background-repeat: no-repeat no-repeat; "></span><span class="webkit-html-tag"><KeyDescriptor></span></div>
<div class="collapsible-content" style="margin-left: 1em; ">
<div class="collapsible" id="collapsible11">
<div class="expanded">
<div class="line"><span class="button collapse-button" style="-webkit-user-select: none; cursor: pointer; display: inline-block; margin-left: -10px; width: 10px; vertical-align: bottom; background-image: -webkit-canvas(arrowDown); height: 10px; background-position: 0% 0%; background-repeat: no-repeat no-repeat; "></span><span class="webkit-html-tag"><ds:KeyInfo></span></div>
<div class="collapsible-content" style="margin-left: 1em; ">
<div class="collapsible" id="collapsible12">
<div class="expanded">
<div class="line"><span class="button collapse-button" style="-webkit-user-select: none; cursor: pointer; display: inline-block; margin-left: -10px; width: 10px; vertical-align: bottom; background-image: -webkit-canvas(arrowDown); height: 10px; background-position: 0% 0%; background-repeat: no-repeat no-repeat; "></span><span class="webkit-html-tag"><ds:X509Data></span></div>
<div class="collapsible-content" style="margin-left: 1em; ">
<div class="collapsible" id="collapsible13">
<div class="expanded">
<div class="line"><span class="button collapse-button" style="-webkit-user-select: none; cursor: pointer; display: inline-block; margin-left: -10px; width: 10px; vertical-align: bottom; background-image: -webkit-canvas(arrowDown); height: 10px; background-position: 0% 0%; background-repeat: no-repeat no-repeat; "></span><span class="webkit-html-tag"><ds:X509Certificate></span></div>
<div class="collapsible-content" style="margin-left: 1em; "><span class="text">MIIDaTCCAlGgAwIBAgIURudjUX7LNnISb69BeK0csUrr3OwwDQYJKoZIhvcNAQEF BQAwKjEoMCYGA1UEAxMfdW5peGFkbWluLnFhdGFyLW1lZC5jb3JuZWxsLmVkdTAe Fw0xMzEwMjkxMzExNDlaFw0zMzEwMjkxMzExNDlaMCoxKDAmBgNVBAMTH3VuaXhh
ZG1pbi5xYXRhci1tZWQuY29ybmVsbC5lZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCf87C2Uk5ZUgltNmI9XAMVZ8DW4pfRgMMQwQStTxgPUbtvyaJt WOq1EPXlTJw+AvN6YQo0qOCLpf0gVF5jDaBQZ0gIZwWu7cOlKxvAXfAhnpqvrkmz jN4YplSTgg3LuNxGovVHBGqYB76IOI/BwsZtOsH/rwFI4mpDj7zuS2Gv6cOVPiMm
8UJCUoBjsSF6FfaDGTFVSnNNRd3Eke3vzzD7FhPDfXIw33eXtE88t6oEnaz/27xH lRTL3JQpmnBYcoaK1wFH/yOO6HPEbak5Wnq9oVu+f9uUja7cFRsgS+MeO3KEOBku sGxFF+dKmojBbtJhyRaDebknPA/pmRIZ7gotAgMBAAGjgYYwgYMwYgYDVR0RBFsw WYIfdW5peGFkbWluLnFhdGFyLW1lZC5jb3JuZWxsLmVkdYY2aHR0cHM6Ly91bml4
YWRtaW4ucWF0YXItbWVkLmNvcm5lbGwuZWR1L2lkcC9zaGliYm9sZXRoMB0GA1Ud DgQWBBRvtevYFbtFrBIMnwNMqaQak+8a2zANBgkqhkiG9w0BAQUFAAOCAQEAOySG 9jQo2CfX6eC9dSh+TeWWeagfv5+Z5jfJg7iiC2zFg5rQe4ZLpHQjKJgNtvkcQJYy p84Si/m0/aAD6UN+ddYB8J86NCytULJz/SR3Il8KfJuMzOPvfifjyZOZzbEBRwBy
Le99al26WANv3wU62DnU/1umsJaqqnDv8Gt63wW6dlRMAhAsueXVgBr2x4NdrnJ0 RomKmPkg21Z2WzUhp4CEBcrez7TH+qLKZ1vcWXPqdS/Lj1Z1C0l/oYv4dZaNPfdJ 5HFI8L58cxpfwbCh8EskMJEz6EvyfcSV9w9CxoHIqbU0/JV7MtShu7fi3jx2ORQy 3ixe+e2BKhXlq29fyQ==</span></div>
<div class="line"><span class="webkit-html-tag"></ds:X509Certificate></span></div>
</div>
</div>
</div>
<div class="line"><span class="webkit-html-tag"></ds:X509Data></span></div>
</div>
</div>
</div>
<div class="line"><span class="webkit-html-tag"></ds:KeyInfo></span></div>
</div>
</div>
</div>
<div class="line"><span class="webkit-html-tag"></KeyDescriptor></span></div>
</div>
</div>
<div class="line"><span class="webkit-html-tag"><AttributeService<span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Binding</span>="<span class="webkit-html-attribute-value">urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding</span>"</span><span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Location</span>="<span class="webkit-html-attribute-value"><a href="https://unixadmin.qatar-med.cornell.edu:8443/idp/profile/SAML1/SOAP/AttributeQuery">https://unixadmin.qatar-med.cornell.edu:8443/idp/profile/SAML1/SOAP/AttributeQuery</a></span>"</span>/></span></div>
<div class="line"><span class="webkit-html-tag"><AttributeService<span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Binding</span>="<span class="webkit-html-attribute-value">urn:oasis:names:tc:SAML:2.0:bindings:SOAP</span>"</span><span class="webkit-html-attribute"> <span class="webkit-html-attribute-name">Location</span>="<span class="webkit-html-attribute-value"><a href="https://unixadmin.qatar-med.cornell.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery">https://unixadmin.qatar-med.cornell.edu:8443/idp/profile/SAML2/SOAP/AttributeQuery</a></span>"</span>/></span></div>
<div class="line"><span class="webkit-html-tag"><NameIDFormat></span><span class="text">urn:mace:shibboleth:1.0:nameIdentifier</span><span class="webkit-html-tag"></NameIDFormat></span></div>
<div class="collapsible" id="collapsible14">
<div class="expanded">
<div class="line"><span class="button collapse-button" style="-webkit-user-select: none; cursor: pointer; display: inline-block; margin-left: -10px; width: 10px; vertical-align: bottom; background-image: -webkit-canvas(arrowDown); height: 10px; background-position: 0% 0%; background-repeat: no-repeat no-repeat; "></span><span class="webkit-html-tag"><NameIDFormat></span></div>
<div class="collapsible-content" style="margin-left: 1em; "><span class="text">urn:oasis:names:tc:SAML:2.0:nameid-format:transient</span></div>
<div class="line"><span class="webkit-html-tag"></NameIDFormat></span></div>
</div>
</div>
</div>
<div class="line"><span class="webkit-html-tag"></AttributeAuthorityDescriptor></span></div>
</div>
</div>
</div>
<div class="line"><span class="webkit-html-tag"></EntityDescriptor></span></div>
</span></div>
<div><br class="webkit-block-placeholder">
</div>
<div>Sorry this is such a basic question but we are stumped at this point.</div>
<div><br>
</div>
<div>Thanks!</div>
<div><br>
</div>
<div>Sam</div>
<div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font-family: Helvetica; font-size: 12px; ">
<font face="Helvetica" size="3" style="font: normal normal normal 12px/normal Helvetica; "><br class="Apple-interchange-newline">
--</font></div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font-family: Helvetica; font-size: 12px; ">
<font face="Helvetica" size="3" style="font: normal normal normal 12px/normal Helvetica; ">Sam Agnew</font></div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font-family: Helvetica; font-size: 12px; ">
System Administrator</div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font-family: Helvetica; font-size: 12px; ">
<font face="Helvetica" size="3" style="font: normal normal normal 12px/normal Helvetica; ">IT Department</font></div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font-family: Helvetica; font-size: 12px; ">
<font face="Helvetica" size="3" style="font: normal normal normal 12px/normal Helvetica; ">Weill Cornell Medical College in Qatar</font></div>
<div style="font-family: Helvetica; font-size: 12px; "><br class="webkit-block-placeholder">
</div>
<br class="Apple-interchange-newline">
</div>
<br>
</div>
</body>
</html>