<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:12pt"><div><span>When the error was reported to me by a user at the school I assumed that the school's cert had changed and apprised Ryan about it. Ryan said no change had occurred so I sent him a copy of the metadata I had for their IdP. Ryan said the copy I had matched his production version. Ryan sent me his current production metadata and I checked it as well and it matched. I loaded the copy that Ryan sent to me to my production servers but still the issue persists...</span></div><div class="yahoo_quoted" style="display: block;"> <br> <br> <div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 12pt;"> <div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif;
font-size: 12pt;"> <div dir="ltr"> <font size="2" face="Arial"> On Saturday, January 4, 2014 3:25 PM, "Cantor, Scott" <cantor.2@osu.edu> wrote:<br> </font> </div> <div class="y_msg_container">On 1/4/14, 6:19 PM, "Patrick Rynhart" <<a shape="rect" ymailto="mailto:P.Rynhart@massey.ac.nz" href="mailto:P.Rynhart@massey.ac.nz">P.Rynhart@massey.ac.nz</a>> wrote:<br clear="none">><br clear="none">>Could you please advise what I need to do at my end to "fix" this<br clear="none">>problem, preferably without breaking the other SPs that we're federated<br clear="none">>with (along with Tuakiri which is our NZ access federation).<br clear="none"><br clear="none">I don't have anything else useful to tell you. You asked what the error<br clear="none">means, that's what it means (which is exactly what it said, so it isn't<br clear="none">trying to be mysterious). The signature stopped working. The only reason<br clear="none">for that to
happen between two unchanged Shibboleth peers is the key or<br clear="none">the metadata.<br clear="none"><br clear="none">That assumes there's nothing in the log at the SP pointing to a different<br clear="none">explanation, but I have no idea what else it could be.<br clear="none"><br clear="none">What it is *not* is a certificate expiring, or anything else that is going<br clear="none">to be time-based.<div class="yqt3470123891" id="yqtfd94757"><br clear="none"><br clear="none">-- Scott<br clear="none"><br clear="none"><br clear="none">--<br clear="none">To unsubscribe from this list send an email to <a shape="rect" ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br clear="none"></div><br><br></div> </div> </div> </div> </div></body></html>