<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:PMingLiU;
panose-1:2 2 5 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Garamond;
panose-1:2 2 4 4 3 3 1 1 8 3;}
@font-face
{font-family:"Anonymous Pro";
panose-1:2 6 6 9 3 2 2 0 5 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:"\@PMingLiU";
panose-1:2 2 5 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Anonymous Pro";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Garamond","serif";
color:windowtext;
font-weight:normal;
font-style:normal;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Anonymous Pro";}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-family:"Garamond","serif"'>Hello,<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'>The interesting thing is: after encountering the error, on the same tab, access the URL:<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'><o:p> </o:p></span></p><p class=MsoPlainText><a href="https://lbnx02.cpce-polyu.edu.hk/Shibboleth.sso/Session">https://lbnx02.cpce-polyu.edu.hk/Shibboleth.sso/Session</a><o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>Produces no error and lists all the attributes. And then on the same tab, when I go back to the first URL: <a href="https://lbnx02.cpce-polyu.edu.hk/secure/">https://lbnx02.cpce-polyu.edu.hk/secure/</a> generates no error and the correct user attribute can be obtain.s<o:p></o:p></p><p class=MsoNormal><span style='font-family:"Garamond","serif"'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif";color:black'>Regards,<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Garamond","serif";color:black'><o:p> </o:p></span></p><p class=MsoNormal style='margin-bottom:12.0pt'><span style='font-family:"Garamond","serif";color:black'>Griffin CHENG.<br><br><o:p></o:p></span></p><p class=MsoPlainText>------------------------------<o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>Message: 3<o:p></o:p></p><p class=MsoPlainText>Date: Tue, 12 Nov 2013 09:36:41 -0000<o:p></o:p></p><p class=MsoPlainText>From: "Rod Widdowson" <<a href="mailto:rdw@steadingsoftware.com">rdw@steadingsoftware.com</a>><o:p></o:p></p><p class=MsoPlainText>Subject: RE: FatalProfileException when using Firefox and Chrome<o:p></o:p></p><p class=MsoPlainText>To: "'Shib Users'" <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>><o:p></o:p></p><p class=MsoPlainText>Message-ID: <<a href="mailto:005a01cedf8a$b2d138e0$1873aaa0$@steadingsoftware.com">005a01cedf8a$b2d138e0$1873aaa0$@steadingsoftware.com</a>><o:p></o:p></p><p class=MsoPlainText>Content-Type: text/plain; charset="Windows-1252"<o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>I'm not sure I fully understand what you are trying to achieve, but that error has come from the IdP and the SP is just reporting it. You need to go to the IdP's logs to see why it is complaining.<o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>The following (from the spec) doesn't really help much:<o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>> urn:oasis:names:tc:SAML:2.0:status:Responder<o:p></o:p></p><p class=MsoPlainText>><o:p> </o:p></p><p class=MsoPlainText>> The request could not be performed due to an error on the part of the <o:p></o:p></p><p class=MsoPlainText>> SAML<o:p></o:p></p><p class=MsoPlainText>responder or SAML<o:p></o:p></p><p class=MsoPlainText>> authority.<o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoPlainText>> -----Original Message-----<o:p></o:p></p><p class=MsoPlainText>> From: <a href="mailto:users-bounces@shibboleth.net">users-bounces@shibboleth.net</a> [mailto:users- <o:p></o:p></p><p class=MsoPlainText>> <a href="mailto:bounces@shibboleth.net">bounces@shibboleth.net</a>] On Behalf Of Griffin Cheng [CLIB]<o:p></o:p></p><p class=MsoPlainText>> Sent: 12 November 2013 08:39<o:p></o:p></p><p class=MsoPlainText>> To: <a href="mailto:users@shibboleth.net">users@shibboleth.net</a><o:p></o:p></p><p class=MsoPlainText>> Subject: FatalProfileException when using Firefox and Chrome<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> Dear all,<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> I have a very small PHP web program extracting the street entry from <o:p></o:p></p><p class=MsoPlainText>> the ADFS server of the patron. ?The program returns the value I expect <o:p></o:p></p><p class=MsoPlainText>> when I run the webpage on IE. But on Firefox and Chrome, I get:<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> opensaml::FatalProfileException at (<a href="https://lbnx02.cpce-">https://lbnx02.cpce-</a><o:p></o:p></p><p class=MsoPlainText>> polyu.edu.hk/Shibboleth.sso/SAML2/POST)<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> SAML response contained an error.<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> Error from identity provider:<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> ??? Status: urn:oasis:names:tc:SAML:2.0:status:Responder<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> I have checked the shibd.log, transaction.log and shibd_warn.log and <o:p></o:p></p><p class=MsoPlainText>> find<o:p></o:p></p><p class=MsoPlainText>no<o:p></o:p></p><p class=MsoPlainText>> ERROR at all.<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> Is this something to do with ADFS?<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> Regards,<o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> <o:p></o:p></p><p class=MsoPlainText>> Griffin CHENG.<o:p></o:p></p><p class=MsoPlainText><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>