<div dir="ltr"><div>Hi all,</div><div>thank you for your reply..</div><div>Probably I not have understood very well the question about Shibbolteth metadata.</div><div><br></div><div>1) I have Installed my Shibbholet idp.</div>
<div>2) I deployed the war file on Tomcat.</div><div><br></div><div>Now I have to generate/change metadata file?</div><div>when I try to test my shibboleth idp I have this error:</div><div><br></div><div><pre style="color:rgb(0,0,0);word-wrap:break-word;white-space:pre-wrap">
2013-11-27 03:38:13 WARN Shibboleth.SessionInitiator.SAML2 [1021]: unable to locate metadata for provider (<a href="https://vincenteservices.resiltech.net/idp/shibboleth">https://vincenteservices.resiltech.net/idp/shibboleth</a>)</pre>
</div><div><br></div><div>and if I try to get this url (<span style="color:rgb(0,0,0);white-space:pre-wrap"><a href="https://vincenteservices.resiltech.net/idp/shibboleth">https://vincenteservices.resiltech.net/idp/shibboleth</a></span>) I see this xml file:</div>
<div><br></div><div><br></div><div><div class="" style="border-bottom-width:2px;border-bottom-style:solid;border-bottom-color:black;padding-bottom:5px;margin:10px;color:rgb(0,0,0);font-family:'Times New Roman';font-size:medium">
This XML file does not appear to have any style information associated with it. The document tree is shown below.<br></div><div class="" style="margin-top:1em;margin-left:20px;font-family:monospace;font-size:13px;color:rgb(0,0,0)">
<div class="" id="collapsible0"><div class=""><div class=""><span class="" style="display:inline-block;width:10px;vertical-align:bottom;height:10px;background-repeat:no-repeat no-repeat"></span><span class=""><EntityDescriptor<span class=""> <span class="">xmlns</span>="<span class="">urn:oasis:names:tc:SAML:2.0:metadata</span>"</span><span class=""> <span class="">xmlns:ds</span>="<span class=""><a href="http://www.w3.org/2000/09/xmldsig#">http://www.w3.org/2000/09/xmldsig#</a></span>"</span><span class=""> <span class="">xmlns:shibmd</span>="<span class="">urn:mace:shibboleth:metadata:1.0</span>"</span><span class=""> <span class="">xmlns:xsi</span>="<span class=""><a href="http://www.w3.org/2001/XMLSchema-instance">http://www.w3.org/2001/XMLSchema-instance</a></span>"</span><span class=""> <span class="">entityID</span>="<span class=""><a href="https://vincenteservices.resiltech.net/idp/shibboleth">https://vincenteservices.resiltech.net/idp/shibboleth</a></span>"</span>></span></div>
<div class="" style="margin-left:1em"><div class="" id="collapsible1"><div class=""><div class=""><span class="" style="display:inline-block;width:10px;vertical-align:bottom;height:10px;background-repeat:no-repeat no-repeat"></span><span class=""><IDPSSODescriptor<span class=""> <span class="">protocolSupportEnumeration</span>="<span class="">urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol</span>"</span>></span></div>
<div class="" style="margin-left:1em"><div class="" id="collapsible2"><div class=""><div class=""><span class="" style="display:inline-block;width:10px;vertical-align:bottom;height:10px;background-repeat:no-repeat no-repeat"></span><span class=""><Extensions></span></div>
<div class="" style="margin-left:1em"><div class=""><span class=""><shibmd:Scope<span class=""> <span class="">regexp</span>="<span class="">false</span>"</span>></span><span class=""><a href="http://resiltech.net">resiltech.net</a></span><span class=""></shibmd:Scope></span></div>
</div><div class=""><span class=""></Extensions></span></div></div></div><div class="" id="collapsible3"><div class=""><div class=""><span class="" style="display:inline-block;width:10px;vertical-align:bottom;height:10px;background-repeat:no-repeat no-repeat"></span><span class=""><KeyDescriptor></span></div>
<div class="" style="margin-left:1em"><div class="" id="collapsible4"><div class=""><div class=""><span class="" style="display:inline-block;width:10px;vertical-align:bottom;height:10px;background-repeat:no-repeat no-repeat"></span><span class=""><ds:KeyInfo></span></div>
<div class="" style="margin-left:1em"><div class="" id="collapsible5"><div class=""><div class=""><span class="" style="display:inline-block;width:10px;vertical-align:bottom;height:10px;background-repeat:no-repeat no-repeat"></span><span class=""><ds:X509Data></span></div>
<div class="" style="margin-left:1em"><div class="" id="collapsible6"><div class=""><div class=""><span class="" style="display:inline-block;width:10px;vertical-align:bottom;height:10px;background-repeat:no-repeat no-repeat"></span><span class=""><ds:X509Certificate></span></div>
<div class="" style="margin-left:1em"><span class="">MIIDZjCCAk6gAwIBAgIVAIaHSXOjlb5TdqKQbVaYGJms/7ihMA0GCSqGSIb3DQEB BQUAMCkxJzAlBgNVBAMTHnZpbmNlbnRlc2VydmljZXMucmVzaWx0ZWNoLm5ldDAe Fw0xMzExMjUxNDMyMjJaFw0xNjExMjUxNDMyMjJaMCkxJzAlBgNVBAMTHnZpbmNl bnRlc2VydmljZXMucmVzaWx0ZWNoLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAIvSctsTN0kvd0DWugpArGaevRBOOdDMnmMzIhDcOhU3jeaGfZ+W wZFyjfz0RmkBMBxzDUUTUPPyY2+5pmQTbSrky7CrLrXqjgvAx62g+gpH6xOJD1qG KmYtk/chYjBgMUUQq26OgETylpSlwbCuq61kkxPO3M73CbbNiyAbB6/ZNrQoRBfo QN/gdo/afPXMGOZCf3o4D/7u12D8bn8Tn0iz+camKde8OmTHeKnZrd/xoBah3J+5 6DK1jpRp3u4H0IozD/GaMaSfJS3gMLMo25MGRQ8BRNa/64sCCl43xbwUKbc21Q6P nLeMpqYOXrjUPINoGnAUHSj2bDnJRFuflccCAwEAAaOBhDCBgTBgBgNVHREEWTBX gh52aW5jZW50ZXNlcnZpY2VzLnJlc2lsdGVjaC5uZXSGNWh0dHBzOi8vdmluY2Vu dGVzZXJ2aWNlcy5yZXNpbHRlY2gubmV0L2lkcC9zaGliYm9sZXRoMB0GA1UdDgQW BBTz4ijGG+6mD7qG5/IAFwINgDyPuzANBgkqhkiG9w0BAQUFAAOCAQEABcz9Vhm9 znI+Qh6srqqrS9TQeixLfAQJ8oUyW0I1A8+VeHotUyQal6tafVjvXAj79jb7TOKs p2vOKKPv8o5YZCwjgbp9R7h1SfifZwn7TrxyFIUCYJ77ExFojjpu5/mYz6SL9XNe PWTOCsV1GjMohPBSb62WskBIYiz2D/3D90wRu/D6Dq3KBJYOkqK7dOC3mkepHC9p aWlIXrQhRx/MTMjhi2k9CzBTATUuvcAHAUrsbmpWSMuAdCuqRrDTjvYFfPPS49Cf 33IhFtV6ke4lw03GP391JUVr4W6Qyxcv7PBTssZW4ttqep5+RIo9pOmmgufbxW38 hYeuWfe9xqyx3A==</span></div>
<div class=""><span class=""></ds:X509Certificate></span></div></div></div></div><div class=""><span class=""></ds:X509Data></span></div></div></div></div><div class=""><span class=""></ds:KeyInfo></span></div>
</div></div></div><div class=""><span class=""></KeyDescriptor></span></div></div></div><div class=""><span class=""><ArtifactResolutionService<span class=""> <span class="">Binding</span>="<span class="">urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding</span>"</span><span class=""> <span class="">Location</span>="<span class=""><a href="https://vincenteservices.resiltech.net:8443/idp/profile/SAML1/SOAP/ArtifactResolution">https://vincenteservices.resiltech.net:8443/idp/profile/SAML1/SOAP/ArtifactResolution</a></span>"</span><span class=""> <span class="">index</span>="<span class="">1</span>"</span>/></span></div>
<div class=""><span class=""><ArtifactResolutionService<span class=""> <span class="">Binding</span>="<span class="">urn:oasis:names:tc:SAML:2.0:bindings:SOAP</span>"</span><span class=""> <span class="">Location</span>="<span class=""><a href="https://vincenteservices.resiltech.net:8443/idp/profile/SAML2/SOAP/ArtifactResolution">https://vincenteservices.resiltech.net:8443/idp/profile/SAML2/SOAP/ArtifactResolution</a></span>"</span><span class=""> <span class="">index</span>="<span class="">2</span>"</span>/></span></div>
<div class=""><span class=""><SingleLogoutService<span class=""> <span class="">Binding</span>="<span class="">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect</span>"</span><span class=""> <span class="">Location</span>="<span class=""><a href="https://vincenteservices.resiltech.net/idp/profile/SAML2/Redirect/SLO">https://vincenteservices.resiltech.net/idp/profile/SAML2/Redirect/SLO</a></span>"</span>/></span></div>
<div class=""><span class=""><SingleLogoutService<span class=""> <span class="">Binding</span>="<span class="">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST</span>"</span><span class=""> <span class="">Location</span>="<span class=""><a href="https://vincenteservices.resiltech.net/idp/profile/SAML2/POST/SLO">https://vincenteservices.resiltech.net/idp/profile/SAML2/POST/SLO</a></span>"</span>/></span></div>
<div class=""><span class=""><SingleLogoutService<span class=""> <span class="">Binding</span>="<span class="">urn:oasis:names:tc:SAML:2.0:bindings:SOAP</span>"</span><span class=""> <span class="">Location</span>="<span class=""><a href="https://vincenteservices.resiltech.net:8443/idp/profile/SAML2/SOAP/SLO">https://vincenteservices.resiltech.net:8443/idp/profile/SAML2/SOAP/SLO</a></span>"</span>/></span></div>
<div class=""><span class=""><NameIDFormat></span><span class="">urn:mace:shibboleth:1.0:nameIdentifier</span><span class=""></NameIDFormat></span></div><div class="" id="collapsible7"><div class=""><div class="">
<span class="" style="display:inline-block;width:10px;vertical-align:bottom;height:10px;background-repeat:no-repeat no-repeat"></span><span class=""><NameIDFormat></span></div><div class="" style="margin-left:1em"><span class="">urn:oasis:names:tc:SAML:2.0:nameid-format:transient</span></div>
<div class=""><span class=""></NameIDFormat></span></div></div></div><div class=""><span class=""><SingleSignOnService<span class=""> <span class="">Binding</span>="<span class="">urn:mace:shibboleth:1.0:profiles:AuthnRequest</span>"</span><span class=""> <span class="">Location</span>="<span class=""><a href="https://vincenteservices.resiltech.net/idp/profile/Shibboleth/SSO">https://vincenteservices.resiltech.net/idp/profile/Shibboleth/SSO</a></span>"</span>/></span></div>
<div class=""><span class=""><SingleSignOnService<span class=""> <span class="">Binding</span>="<span class="">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST</span>"</span><span class=""> <span class="">Location</span>="<span class=""><a href="https://vincenteservices.resiltech.net/idp/profile/SAML2/POST/SSO">https://vincenteservices.resiltech.net/idp/profile/SAML2/POST/SSO</a></span>"</span>/></span></div>
<div class=""><span class=""><SingleSignOnService<span class=""> <span class="">Binding</span>="<span class="">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign</span>"</span><span class=""> <span class="">Location</span>="<span class=""><a href="https://vincenteservices.resiltech.net/idp/profile/SAML2/POST-SimpleSign/SSO">https://vincenteservices.resiltech.net/idp/profile/SAML2/POST-SimpleSign/SSO</a></span>"</span>/></span></div>
<div class=""><span class=""><SingleSignOnService<span class=""> <span class="">Binding</span>="<span class="">urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect</span>"</span><span class=""> <span class="">Location</span>="<span class=""><a href="https://vincenteservices.resiltech.net/idp/profile/SAML2/Redirect/SSO">https://vincenteservices.resiltech.net/idp/profile/SAML2/Redirect/SSO</a></span>"</span>/></span></div>
</div><div class=""><span class=""></IDPSSODescriptor></span></div></div></div><div class="" id="collapsible8"><div class=""><div class=""><span class="" style="display:inline-block;width:10px;vertical-align:bottom;height:10px;background-repeat:no-repeat no-repeat"></span><span class=""><AttributeAuthorityDescriptor<span class=""> <span class="">protocolSupportEnumeration</span>="<span class="">urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol</span>"</span>></span></div>
<div class="" style="margin-left:1em"><div class="" id="collapsible9"><div class=""><div class=""><span class="" style="display:inline-block;width:10px;vertical-align:bottom;height:10px;background-repeat:no-repeat no-repeat"></span><span class=""><Extensions></span></div>
<div class="" style="margin-left:1em"><div class=""><span class=""><shibmd:Scope<span class=""> <span class="">regexp</span>="<span class="">false</span>"</span>></span><span class=""><a href="http://resiltech.net">resiltech.net</a></span><span class=""></shibmd:Scope></span></div>
</div><div class=""><span class=""></Extensions></span></div></div></div><div class="" id="collapsible10"><div class=""><div class=""><span class="" style="display:inline-block;width:10px;vertical-align:bottom;height:10px;background-repeat:no-repeat no-repeat"></span><span class=""><KeyDescriptor></span></div>
<div class="" style="margin-left:1em"><div class="" id="collapsible11"><div class=""><div class=""><span class="" style="display:inline-block;width:10px;vertical-align:bottom;height:10px;background-repeat:no-repeat no-repeat"></span><span class=""><ds:KeyInfo></span></div>
<div class="" style="margin-left:1em"><div class="" id="collapsible12"><div class=""><div class=""><span class="" style="display:inline-block;width:10px;vertical-align:bottom;height:10px;background-repeat:no-repeat no-repeat"></span><span class=""><ds:X509Data></span></div>
<div class="" style="margin-left:1em"><div class="" id="collapsible13"><div class=""><div class=""><span class="" style="display:inline-block;width:10px;vertical-align:bottom;height:10px;background-repeat:no-repeat no-repeat"></span><span class=""><ds:X509Certificate></span></div>
<div class="" style="margin-left:1em"><span class="">MIIDZjCCAk6gAwIBAgIVAIaHSXOjlb5TdqKQbVaYGJms/7ihMA0GCSqGSIb3DQEB BQUAMCkxJzAlBgNVBAMTHnZpbmNlbnRlc2VydmljZXMucmVzaWx0ZWNoLm5ldDAe Fw0xMzExMjUxNDMyMjJaFw0xNjExMjUxNDMyMjJaMCkxJzAlBgNVBAMTHnZpbmNl bnRlc2VydmljZXMucmVzaWx0ZWNoLm5ldDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAIvSctsTN0kvd0DWugpArGaevRBOOdDMnmMzIhDcOhU3jeaGfZ+W wZFyjfz0RmkBMBxzDUUTUPPyY2+5pmQTbSrky7CrLrXqjgvAx62g+gpH6xOJD1qG KmYtk/chYjBgMUUQq26OgETylpSlwbCuq61kkxPO3M73CbbNiyAbB6/ZNrQoRBfo QN/gdo/afPXMGOZCf3o4D/7u12D8bn8Tn0iz+camKde8OmTHeKnZrd/xoBah3J+5 6DK1jpRp3u4H0IozD/GaMaSfJS3gMLMo25MGRQ8BRNa/64sCCl43xbwUKbc21Q6P nLeMpqYOXrjUPINoGnAUHSj2bDnJRFuflccCAwEAAaOBhDCBgTBgBgNVHREEWTBX gh52aW5jZW50ZXNlcnZpY2VzLnJlc2lsdGVjaC5uZXSGNWh0dHBzOi8vdmluY2Vu dGVzZXJ2aWNlcy5yZXNpbHRlY2gubmV0L2lkcC9zaGliYm9sZXRoMB0GA1UdDgQW BBTz4ijGG+6mD7qG5/IAFwINgDyPuzANBgkqhkiG9w0BAQUFAAOCAQEABcz9Vhm9 znI+Qh6srqqrS9TQeixLfAQJ8oUyW0I1A8+VeHotUyQal6tafVjvXAj79jb7TOKs p2vOKKPv8o5YZCwjgbp9R7h1SfifZwn7TrxyFIUCYJ77ExFojjpu5/mYz6SL9XNe PWTOCsV1GjMohPBSb62WskBIYiz2D/3D90wRu/D6Dq3KBJYOkqK7dOC3mkepHC9p aWlIXrQhRx/MTMjhi2k9CzBTATUuvcAHAUrsbmpWSMuAdCuqRrDTjvYFfPPS49Cf 33IhFtV6ke4lw03GP391JUVr4W6Qyxcv7PBTssZW4ttqep5+RIo9pOmmgufbxW38 hYeuWfe9xqyx3A==</span></div>
<div class=""><span class=""></ds:X509Certificate></span></div></div></div></div><div class=""><span class=""></ds:X509Data></span></div></div></div></div><div class=""><span class=""></ds:KeyInfo></span></div>
</div></div></div><div class=""><span class=""></KeyDescriptor></span></div></div></div><div class=""><span class=""><AttributeService<span class=""> <span class="">Binding</span>="<span class="">urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding</span>"</span><span class=""> <span class="">Location</span>="<span class=""><a href="https://vincenteservices.resiltech.net:8443/idp/profile/SAML1/SOAP/AttributeQuery">https://vincenteservices.resiltech.net:8443/idp/profile/SAML1/SOAP/AttributeQuery</a></span>"</span>/></span></div>
<div class=""><span class=""><AttributeService<span class=""> <span class="">Binding</span>="<span class="">urn:oasis:names:tc:SAML:2.0:bindings:SOAP</span>"</span><span class=""> <span class="">Location</span>="<span class=""><a href="https://vincenteservices.resiltech.net:8443/idp/profile/SAML2/SOAP/AttributeQuery">https://vincenteservices.resiltech.net:8443/idp/profile/SAML2/SOAP/AttributeQuery</a></span>"</span>/></span></div>
<div class=""><span class=""><NameIDFormat></span><span class="">urn:mace:shibboleth:1.0:nameIdentifier</span><span class=""></NameIDFormat></span></div><div class="" id="collapsible14"><div class=""><div class="">
<span class="" style="display:inline-block;width:10px;vertical-align:bottom;height:10px;background-repeat:no-repeat no-repeat"></span><span class=""><NameIDFormat></span></div><div class="" style="margin-left:1em"><span class="">urn:oasis:names:tc:SAML:2.0:nameid-format:transient</span></div>
<div class=""><span class=""></NameIDFormat></span></div></div></div></div><div class=""><span class=""></AttributeAuthorityDescriptor></span></div></div></div></div><div class=""><span class=""></EntityDescriptor></span></div>
</div></div></div></div><div><br></div><div><br></div><div><br></div><div>Are correct these steps? Why I obtain an error about the metadata?</div><div>An other question: I use a tomcat with my certificate (SSL)...is correct regenerate an other certificate as requested during the shibbolteh instalaltion? Is possibile that this is a problem?</div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">2013/11/25 Kevin P. Foote <span dir="ltr"><<a href="mailto:kpfoote@iup.edu" target="_blank">kpfoote@iup.edu</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im"><br>
On Mon, 25 Nov 2013, Gianluigi Ruggeri wrote:<br>
<br>
> 5. To test I restarted the Tomcat servlet container and I verified that CAS<br>
> authentication is used. I used the TestShib Service Provider but I have<br>
> this error:<br>
><br>
> opensaml::saml2md::MetadataException<br>
><br>
> TestShib encountered some sort of error while processing your request<br>
> issued at Mon Nov 25 06:08:04 2013.<br>
<br>
</div>Have you registered your metadata with the testshib service?<br>
<br>
<br>
<<a href="https://testshib.org/register.html" target="_blank">https://testshib.org/register.html</a>><br>
<br>
------<br>
thanks<br>
kevin.foote<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br></div>