<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
This was finally the missing link. I moved my old /etc/shibboleth and reinstalled which gave me new default config files. I then copied the sp-cert and sp-key from old install to match anything I might have configured on idp that pointed to the old sp. I then
tracked down all occurrences of the old entityID (<a href="https://unixadmin.qatar-med.cornell.edu">https://unixadmin.qatar-med.cornell.edu</a>) and swapped with the new one (<a href="https://unixadmin.qatar-med.cornell.edu/shibboleth">https://unixadmin.qatar-med.cornell.edu/shibboleth</a>).
I used the shibboleth2.xml generated by testshib as my starting point.
<div><br>
</div>
<div>Now that I have a working setup I am going to rebuild and document. Thanks so much for all the help. Next step will be building a Discovery Service and integrating that into the setup.</div>
<div><br>
</div>
<div>Thanks!</div>
<div><br>
</div>
<div>Sam</div>
<div><br>
</div>
<div><br>
<div>
<div>On Dec 3, 2013, at 5:42 PM, Cantor, Scott wrote:</div>
<br class="Apple-interchange-newline">
<blockquote type="cite">
<div>On 12/3/13, 4:40 AM, "Sam Agnew" <<a href="mailto:saa2012@qatar-med.cornell.edu">saa2012@qatar-med.cornell.edu</a>> wrote:<br>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite">That is extremely helpful!<br>
</blockquote>
<blockquote type="cite">So, I have done the testshib tests and my IDP gets a green light.<br>
</blockquote>
<blockquote type="cite"><br>
</blockquote>
<blockquote type="cite">On SP I am getting the following:<br>
</blockquote>
<br>
So we've apparently established that in fact nothing works on your system.<br>
I still have no idea why, but that certainly points to something<br>
fundamentally wrong with your install. What is the platform here and how<br>
is the install being done?<br>
<br>
<blockquote type="cite">I am interested in:<br>
</blockquote>
<blockquote type="cite">2013-12-03 10:46:24 DEBUG XMLTooling.CredentialCriteria [2]: key<br>
</blockquote>
<blockquote type="cite">algorithm didn't match ('AES' != 'RSA')<br>
</blockquote>
<blockquote type="cite">but that message is only at DEBUG level<br>
</blockquote>
<br>
Which is why it has nothing to do with the problem.<br>
<br>
<blockquote type="cite">Do you know where I should look next?<br>
</blockquote>
<br>
I would suggest raising the logging level of the<br>
XMLTooling.Signature.Debugger category so we can determine if the<br>
signature is even being evaluated.<br>
<br>
To be clear, you haven't touched the security-policy.xml file, right? And<br>
this is a fresh install of 2.5.x, no legacy configuration, or some old<br>
generator of configuration material that uses old syntax? Some campuses do<br>
that.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a><br>
</div>
</blockquote>
</div>
<br>
<div><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; ">
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
<font face="Helvetica" size="3" style="font: normal normal normal 12px/normal Helvetica; "><br class="Apple-interchange-newline">
--</font></div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
<font face="Helvetica" size="3" style="font: normal normal normal 12px/normal Helvetica; ">Sam Agnew</font></div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
System Administrator</div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
<font face="Helvetica" size="3" style="font: normal normal normal 12px/normal Helvetica; ">IT Department</font></div>
<div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">
<font face="Helvetica" size="3" style="font: normal normal normal 12px/normal Helvetica; ">Weill Cornell Medical College in Qatar</font></div>
<div><br class="webkit-block-placeholder">
</div>
</span><br class="Apple-interchange-newline">
</div>
<br>
</div>
</body>
</html>