<div dir="ltr"><span style="font-family:arial,sans-serif;font-size:13px">Hi all,</span><br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">I have a question about the configuration of Shibboleth + CAS.</span><br style="font-family:arial,sans-serif;font-size:13px">
<span style="font-family:arial,sans-serif;font-size:13px">I have my Jasig CAS Server v. 3.5.2 on CentOS 5.</span><br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">I followed this tutorial to configure Shibboleth to use my CAS server.</span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><a href="https://wiki.jasig.org/display/CASUM/Shibboleth-CAS+Integration" target="_blank" style="font-family:arial,sans-serif;font-size:13px">https://wiki.jasig.org/display/CASUM/Shibboleth-CAS+Integration</a><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">First solution: 'Designate CAS the Authentication Provider for Shib IDP'</span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">I followed this steps:</span><br style="font-family:arial,sans-serif;font-size:13px"><br style="font-family:arial,sans-serif;font-size:13px">
<span style="font-family:arial,sans-serif;font-size:13px">1. I installed Shibboleth v. on my machine.</span><br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">2. As described in the first point of the tutorial I Included CAS Client Libraries in IDP Deployable;</span><br style="font-family:arial,sans-serif;font-size:13px">
<span style="font-family:arial,sans-serif;font-size:13px">3. I added this xml block into my $SHIB_HOME/conf/handler.xml</span><br style="font-family:arial,sans-serif;font-size:13px"><br style="font-family:arial,sans-serif;font-size:13px">
<span style="font-family:arial,sans-serif;font-size:13px"><!-- Remote User handler for CAS support --></span><br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px"><ph:LoginHandler xsi:type="ph:RemoteUser"></span><br style="font-family:arial,sans-serif;font-size:13px">
<span style="font-family:arial,sans-serif;font-size:13px"> <ph:AuthenticationMethod></span><br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px"> urn:oasis:names:tc:SAML:2.0:</span><span style="font-family:arial,sans-serif;font-size:13px">ac:classes:unspecified</span><br style="font-family:arial,sans-serif;font-size:13px">
<span style="font-family:arial,sans-serif;font-size:13px"> </ph:AuthenticationMethod></span><br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px"> <ph:AuthenticationMethod></span><br style="font-family:arial,sans-serif;font-size:13px">
<span style="font-family:arial,sans-serif;font-size:13px"> urn:oasis:names:tc:SAML:2.0:</span><span style="font-family:arial,sans-serif;font-size:13px">ac:classes:</span><span style="font-family:arial,sans-serif;font-size:13px">PasswordProtectedTransport</span><br style="font-family:arial,sans-serif;font-size:13px">
<span style="font-family:arial,sans-serif;font-size:13px"> </ph:AuthenticationMethod></span><br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px"></ph:LoginHandler></span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">(I added the 'ph' suffix unlike as described in the tutorial)</span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">4. After the deploy I modified the IDP Deployable web.xml as described in the tutorial.</span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">5. To test I restarted the Tomcat servlet container and I verified that CAS authentication is used. I used the TestShib Service Provider but I have this error:</span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">opensaml::saml2md::</span><span style="font-family:arial,sans-serif;font-size:13px">MetadataException</span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">TestShib encountered some sort of error while processing your request issued at Mon Nov 25 06:08:04 2013.</span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">You may find more descriptive, helpful error messages in the TestShib SP logs.</span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">If you'd like to see the error, you can look at the last lines of .</span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">If the error is "Unable to locate metadata for identity provider", please make sure you've uploaded metadata for your IdP to TestShib. If you have, ensure that your metadata is correct and that your entityID as entered on the form is right.</span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">If you encountered a different kind of error, please go to the common errors section of the Wiki first.</span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">If you still can't figure out why this error is occurring, please search the archives of the Shibboleth Users list, and failing all else, then please send a detailed question to the Shibboleth Users list.</span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">I'm sorry this didn't work out just yet.</span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">opensaml::saml2md::</span><span style="font-family:arial,sans-serif;font-size:13px">MetadataException at (</span><a href="https://sp.testshib.org/Shibboleth.sso/TestShib" target="_blank" style="font-family:arial,sans-serif;font-size:13px">https://sp.testshib.org/Shibboleth.sso/TestShib</a><span style="font-family:arial,sans-serif;font-size:13px">)</span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">Unable to locate metadata for identity provider (</span><a href="https://myhosturl/idp/shibboleth" target="_blank" style="font-family:arial,sans-serif;font-size:13px">https://myhosturl/idp/shibboleth</a><span style="font-family:arial,sans-serif;font-size:13px">)</span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">Into my Log File I read:</span><br style="font-family:arial,sans-serif;font-size:13px"><br style="font-family:arial,sans-serif;font-size:13px">
<span style="font-family:arial,sans-serif;font-size:13px">2013-11-25 06:08:04 DEBUG Shibboleth.Listener [1005]: dispatching message (default/TestShib::run::</span><span style="font-family:arial,sans-serif;font-size:13px">SAML2SI)</span><br style="font-family:arial,sans-serif;font-size:13px">
<span style="font-family:arial,sans-serif;font-size:13px">2013-11-25 06:08:04 WARN Shibboleth.SessionInitiator.</span><span style="font-family:arial,sans-serif;font-size:13px">SAML2 [1005]: unable to locate metadata for provider (</span><a href="https://myhosturl/idp/shibboleth" target="_blank" style="font-family:arial,sans-serif;font-size:13px">https://myhosturl/idp/shibboleth</a><span style="font-family:arial,sans-serif;font-size:13px">)</span><br style="font-family:arial,sans-serif;font-size:13px">
<br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">(last lines)</span><br style="font-family:arial,sans-serif;font-size:13px"><br style="font-family:arial,sans-serif;font-size:13px">
<span style="font-family:arial,sans-serif;font-size:13px">any suggestins?</span><br style="font-family:arial,sans-serif;font-size:13px"><span style="font-family:arial,sans-serif;font-size:13px">thank</span><br></div>