<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
Since we are trying to deliver a service our only interest is solving the issue. As far as I can see the metadata is correct but I base this on my own understanding of the product which is undoubtedly limited.
<div><br>
</div>
<div>Here is what makes me think it is correct:</div>
<div><br>
<div>On the SP the shibboleth2.xml file directs the SP to load the IDP metadata from the IDP via URL (<a href="https://idpt.qatar-med.cornell.edu/idp/profile/Metadata/SAML">https://idpt.qatar-med.cornell.edu/idp/profile/Metadata/SAML</a>). I can see that this
is successful in the shibd.log file:</div>
<div>
<div>2013-11-26 17:07:26 DEBUG OpenSAML.MetadataProvider.XML : loading configuration from external resource...</div>
<div>2013-11-26 17:07:26 INFO OpenSAML.MetadataProvider.XML : loaded XML resource (<a href="https://idpt.qatar-med.cornell.edu/idp/profile/Metadata/SAML">https://idpt.qatar-med.cornell.edu/idp/profile/Metadata/SAML</a>)</div>
<div>2013-11-26 17:07:26 DEBUG OpenSAML.MetadataProvider.XML : backing up remote metadata resource to (/var/cache/shibboleth/idp-metadata.xml.c5ed)</div>
<div>2013-11-26 17:07:26 DEBUG OpenSAML.MetadataProvider.XML : committing backup file to permanent location (/var/cache/shibboleth/idp-metadata.xml)</div>
<div>2013-11-26 17:07:26 INFO OpenSAML.MetadataProvider.XML : adjusted reload interval to 7200 seconds</div>
<div><br>
</div>
<div>On the IDP the metadata is loaded from file according to idp-process.log:</div>
<div>
<div>20:09:43.037 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:253] - Beginning refresh of metadata from '/opt/shibboleth-idp/metadata/idp-metadata.xml'</div>
<div>20:09:43.043 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:257] - Metadata from '/opt/shibboleth-idp/metadata/idp-metadata.xml' has not changed since last refresh</div>
<div>20:09:43.043 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:322] - Computing new expiration time for cached metadata from '/opt/shibboleth-idp/metadata/idp-metadata.xml</div>
<div>20:09:43.044 - INFO [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:271] - Next refresh cycle for metadata provider '/opt/shibboleth-idp/metadata/idp-metadata.xml' will occur on '2013-11-26T20:09:43.039Z' ('2013-11-26T23:09:43.039+03:00'
local time)</div>
</div>
<div><br>
</div>
<div>Comparing a cURL of the xml from that URL (<a href="https://idpt.qatar-med.cornell.edu/idp/profile/Metadata/SAML">https://idpt.qatar-med.cornell.edu/idp/profile/Metadata/SAML</a>) to the data in the file (/opt/shibboleth-idp/metadata/idp-metadata.xml)
reveals that they match.</div>
<div><br>
</div>
<div>What I need to do is find out how to get to the bottom of the issue. Where should I look? How can I drill down? This is still a proof of concept build and both IDP and SP are in my hands but I need to reach a working setup so that we can move forward to
deploy this for our organisation.</div>
<div><br>
</div>
<div>Thanks!</div>
<div><br>
</div>
<div>Sam</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>
<div>On Nov 26, 2013, at 5:54 PM, Cantor, Scott wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div>On 11/26/13, 12:21 AM, "Sam Agnew" <<a href="mailto:saa2012@qatar-med.cornell.edu">saa2012@qatar-med.cornell.edu</a>> wrote:<br>
<br>
<blockquote type="cite">How would I have done that and how can I undo that if I have?<br>
</blockquote>
<br>
I don't think you did, I'm simply saying I have no other explanation for<br>
you if the metadata's actually correct. So I would have to guess that it's<br>
not. When people swear they've checked, that doesn't generally hold up<br>
under scrutiny. So I would say the IdP metadata isn't what you think it is.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a><br>
</div>
</blockquote>
</div>
<br>
<div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font-family: Helvetica; font-size: 12px; ">
<font face="Helvetica" size="3" style="font: normal normal normal 12px/normal Helvetica; "><br class="Apple-interchange-newline">
--</font></div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font-family: Helvetica; font-size: 12px; ">
<font face="Helvetica" size="3" style="font: normal normal normal 12px/normal Helvetica; ">Sam Agnew</font></div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font-family: Helvetica; font-size: 12px; ">
System Administrator</div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font-family: Helvetica; font-size: 12px; ">
<font face="Helvetica" size="3" style="font: normal normal normal 12px/normal Helvetica; ">IT Department</font></div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; font-family: Helvetica; font-size: 12px; ">
<font face="Helvetica" size="3" style="font: normal normal normal 12px/normal Helvetica; ">Weill Cornell Medical College in Qatar</font></div>
<div style="font-family: Helvetica; font-size: 12px; "><br class="webkit-block-placeholder">
</div>
<br class="Apple-interchange-newline">
</div>
<br>
</div>
</div>
</body>
</html>