<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Menlo;
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Hi Nate,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Many thanks for such a quick resolution.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">No time to re-register.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Thanks<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Glyn<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> users-bounces@shibboleth.net [mailto:users-bounces@shibboleth.net]
<b>On Behalf Of </b>Nate Klingenstein<br>
<b>Sent:</b> 01 March 2015 19:28<br>
<b>To:</b> Shib Users<br>
<b>Subject:</b> Re: Att Kevin, Please delete multiple existing idp registrations :)<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Glyn, <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I hope this was all of them: <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:8.5pt;font-family:"Menlo","serif"">[ndk@testshib2 testshib-user-metadata]$ find -type f -exec grep -q '<a href="https://shibboleth.carshalton.ac.uk/idp/shibboleth'">https://shibboleth.carshalton.ac.uk/idp/shibboleth'</a>
'{}' \; -exec echo '{}' \;<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:8.5pt;font-family:"Menlo","serif"">./ccidpSAML.xml<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:8.5pt;font-family:"Menlo","serif"">./ccidp.xml<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:8.5pt;font-family:"Menlo","serif"">./ccidp-metadata.xml<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:8.5pt;font-family:"Menlo","serif"">./SAML<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:8.5pt;font-family:"Menlo","serif"">./carcolidp<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">If so, you should be good to go. Fun number: 590 registrants to TestShib in the last 60 days(after booting your five entries out ;D )<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Take care and have a good weekend,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Nate.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">On Mar 1, 2015, at 12:08 PM, Leviton, Glyn <<a href="mailto:glyn.leviton@ksep.ac.uk">glyn.leviton@ksep.ac.uk</a>> wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<div>
<div id="divRpF80768">
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
</div>
<div>
<div>
<div>
<div id="divRpF877125">
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal">Good morning.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I need some help :) i have registered my shibboleth idp multiple times. Which i believe in turn is causing some problems when testing my shibboleth idp. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">As i am getting weird error messages saying :- Message was signed but signature could not be verified. below is a sample of the error log.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<pre style="word-wrap: break-word;white-space:pre-wrap">15-02-28 18:32:58 DEBUG Shibboleth.SSO.SAML2 [867]: extracting issuer from SAML 2.0 assertion<o:p></o:p></pre>
<pre>2015-02-28 18:32:58 DEBUG OpenSAML.SecurityPolicyRule.MessageFlow [867]: evaluating message flow policy (replay checking on, expiration 60)<o:p></o:p></pre>
<pre>2015-02-28 18:32:58 DEBUG XMLTooling.StorageService [867]: inserted record (_421aa06d6e91f2a1473da7a8e07f7445) in context (MessageFlow) with expiration (1425166614)<o:p></o:p></pre>
<pre>2015-02-28 18:32:58 DEBUG OpenSAML.SecurityPolicyRule.XMLSigning [867]: validating signature profile<o:p></o:p></pre>
<pre>2015-02-28 18:32:58 DEBUG XMLTooling.CredentialCriteria [867]: keys didn't match<o:p></o:p></pre>
<pre>2015-02-28 18:32:58 DEBUG XMLTooling.TrustEngine.ExplicitKey [867]: unable to validate signature, no credentials available from peer<o:p></o:p></pre>
<pre>2015-02-28 18:32:58 DEBUG XMLTooling.TrustEngine.PKIX [867]: validating signature using certificate from within the signature<o:p></o:p></pre>
<pre>2015-02-28 18:32:58 DEBUG XMLTooling.TrustEngine.PKIX [867]: signature verified with key inside signature, attempting certificate validation...<o:p></o:p></pre>
<pre>2015-02-28 18:32:58 DEBUG XMLTooling.TrustEngine.PKIX [867]: checking that the certificate name is acceptable<o:p></o:p></pre>
<pre>2015-02-28 18:32:58 DEBUG XMLTooling.TrustEngine.PKIX [867]: adding to list of trusted names (<a href="https://shibboleth.carshalton.ac.uk/idp/shibboleth">https://shibboleth.carshalton.ac.uk/idp/shibboleth</a>)<o:p></o:p></pre>
<pre>2015-02-28 18:32:58 DEBUG XMLTooling.TrustEngine.PKIX [867]: unable to match DN, trying TLS subjectAltName match<o:p></o:p></pre>
<pre>2015-02-28 18:32:58 DEBUG XMLTooling.TrustEngine.PKIX [867]: unable to match subjectAltName, trying TLS CN match<o:p></o:p></pre>
<pre>2015-02-28 18:32:58 ERROR XMLTooling.TrustEngine.PKIX [867]: certificate name was not acceptable<o:p></o:p></pre>
<pre>2015-02-28 18:32:58 ERROR OpenSAML.SecurityPolicyRule.XMLSigning [867]: unable to verify message signature with supplied trust engine<o:p></o:p></pre>
<pre>2015-02-28 18:32:58 WARN Shibboleth.SSO.SAML2 [867]: detected a problem with assertion: Message was signed, but signature could not be verified.<o:p></o:p></pre>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I think this was due to the fact i upload different idp configurations with diffrent ssl certificates.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Could some kind sole delete all my registrations please :) i believe i registered it 5 times. The url is<span class="apple-converted-space"> </span><a href="https://shibboleth.carshalton.ac.uk/">https://shibboleth.carshalton.ac.uk</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Many thanks<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Glyn<o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif""><br>
Confidentiality: This e-mail and its attachments are intended for the above-named only and may be confidential. If they have come to you in error you must take no action based on them, nor must you copy or show them to anyone; please reply to this e-mail and
highlight the error.<br>
<br>
Security Warning: Please note that this e-mail has been created in<span class="apple-converted-space"> </span><br>
the knowledge that e-mail is not a 100% secure communications medium. We advise that you understand and observe this lack of security when e-mailing us.<br>
<br>
Viruses: Although we have taken steps to ensure that this e-mail and attachments are free from any virus, we advise that in keeping with good computing practice the recipient should ensure that they are actually virus free.<br>
<br>
Views Expressed: The views expressed in the e-mail are the responsibility of the individual who has sent the e-mail and do not necessarily represent the views or policies of the College. The person who has sent this e-mail is personally liable for the content
of the e-mail.<br>
--<span class="apple-converted-space"> </span><br>
To unsubscribe from this list send an email to<span class="apple-converted-space"> </span></span><a href="mailto:users-unsubscribe@shibboleth.net"><span style="font-size:9.0pt;font-family:"Helvetica","sans-serif"">users-unsubscribe@shibboleth.net</span></a><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</div>
<br clear="both">
Confidentiality: This e-mail and its attachments are intended for the above-named only and may be confidential. If they have come to you in error you must take no action based on them, nor must you copy or show them to anyone; please reply to this e-mail and highlight the error.<BR>
<BR>
Security Warning: Please note that this e-mail has been created in <BR>
the knowledge that e-mail is not a 100% secure communications medium. We advise that you understand and observe this lack of security when e-mailing us.<BR>
<BR>
Viruses: Although we have taken steps to ensure that this e-mail and attachments are free from any virus, we advise that in keeping with good computing practice the recipient should ensure that they are actually virus free.<BR>
<BR>
Views Expressed: The views expressed in the e-mail are the responsibility of the individual who has sent the e-mail and do not necessarily represent the views or policies of the College. The person who has sent this e-mail is personally liable for the content of the e-mail.<BR>
</body>
</html>