<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Thank you for answering so quickly!<br>
<br>
I've never seen anywhere that I had to configure
attribute-filter.xml. I just searched a little bit but couldn't find
any recommendations about what to change in this file.<br>
<br>
What do you think are some changes to do in attribute-filter.xml?
Also, according to the testshib configure page, the only changes
needed are in metadata-provider.xml and as far as I know I changed
it the right way. Here are both of those files :<br>
<h3>Attribute-filter.xml</h3>
<br>
<?xml version="1.0" encoding="UTF-8"?><br>
<!--<br>
This file is an EXAMPLE policy file. While the policy presented
in this<br>
example file is illustrative of some simple cases, it relies on
the names of<br>
non-existent example services and the example attributes
demonstrated in the<br>
default attribute-resolver.xml file.<br>
<br>
Deployers should refer to the documentation for a complete list
of components<br>
and their options.<br>
--><br>
<afp:AttributeFilterPolicyGroup id="ShibbolethFilterPolicy"<br>
xmlns:afp="urn:mace:shibboleth:2.0:afp"<br>
xmlns:basic="urn:mace:shibboleth:2.0:afp:mf:basic"<br>
xmlns:saml="urn:mace:shibboleth:2.0:afp:mf:saml"<br>
xmlns:xsi=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2001/XMLSchema-instance">"http://www.w3.org/2001/XMLSchema-instance"</a><br>
xsi:schemaLocation="urn:mace:shibboleth:2.0:afp
<a class="moz-txt-link-freetext" href="http://shibboleth.net/schema/idp/shibboleth-afp.xsd">http://shibboleth.net/schema/idp/shibboleth-afp.xsd</a><br>
urn:mace:shibboleth:2.0:afp:mf:basic
<a class="moz-txt-link-freetext" href="http://shibboleth.net/schema/idp/shibboleth-afp-mf-basic.xsd">http://shibboleth.net/schema/idp/shibboleth-afp-mf-basic.xsd</a><br>
urn:mace:shibboleth:2.0:afp:mf:saml
<a class="moz-txt-link-freetext" href="http://shibboleth.net/schema/idp/shibboleth-afp-mf-saml.xsd">http://shibboleth.net/schema/idp/shibboleth-afp-mf-saml.xsd</a>"><br>
<br>
<!-- Release some attributes to an SP. --><br>
<afp:AttributeFilterPolicy id="example1"><br>
<afp:PolicyRequirementRule
xsi:type="basic:AttributeRequesterString"
value=<a class="moz-txt-link-rfc2396E" href="https://sp.example.org">"https://sp.example.org"</a> /><br>
<br>
<afp:AttributeRule
attributeID="eduPersonPrincipalName"><br>
<afp:PermitValueRule xsi:type="basic:ANY" /><br>
</afp:AttributeRule><br>
<br>
<afp:AttributeRule attributeID="uid"><br>
<afp:PermitValueRule xsi:type="basic:ANY" /><br>
</afp:AttributeRule><br>
<br>
<afp:AttributeRule attributeID="mail"><br>
<afp:PermitValueRule xsi:type="basic:ANY" /><br>
</afp:AttributeRule><br>
</afp:AttributeFilterPolicy><br>
<br>
<!-- Release eduPersonAffiliation to two specific SPs. --><br>
<afp:AttributeFilterPolicy id="example2"><br>
<afp:PolicyRequirementRule xsi:type="basic:OR"><br>
<basic:Rule xsi:type="basic:AttributeRequesterString"
value=<a class="moz-txt-link-rfc2396E" href="https://sp.example.org">"https://sp.example.org"</a> /><br>
<basic:Rule xsi:type="basic:AttributeRequesterString"
value=<a class="moz-txt-link-rfc2396E" href="https://another.example.org/shibboleth">"https://another.example.org/shibboleth"</a> /><br>
</afp:PolicyRequirementRule><br>
<br>
<afp:AttributeRule
attributeID="eduPersonScopedAffiliation"><br>
<afp:PermitValueRule xsi:type="basic:ANY" /><br>
</afp:AttributeRule><br>
</afp:AttributeFilterPolicy><br>
<br>
</afp:AttributeFilterPolicyGroup><br>
<br>
<h3>metadata-provider.xml</h3>
<?xml version="2.0" encoding="UTF-8"?><br>
<!-- This file is an EXAMPLE metadata configuration file. --><br>
<MetadataProvider id="ShibbolethMetadata"
xsi:type="ChainingMetadataProvider"<br>
xmlns="urn:mace:shibboleth:2.0:metadata"<br>
xmlns:resource="urn:mace:shibboleth:2.0:resource"<br>
xmlns:security="urn:mace:shibboleth:2.0:security"<br>
xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"<br>
xmlns:xsi=<a class="moz-txt-link-rfc2396E" href="http://www.w3.org/2001/XMLSchema-instance">"http://www.w3.org/2001/XMLSchema-instance"</a><br>
xsi:schemaLocation="urn:mace:shibboleth:2.0:metadata
<a class="moz-txt-link-freetext" href="http://shibboleth.net/schema/idp/shibboleth-metadata.xsd">http://shibboleth.net/schema/idp/shibboleth-metadata.xsd</a><br>
urn:mace:shibboleth:2.0:resource
<a class="moz-txt-link-freetext" href="http://shibboleth.net/schema/idp/shibboleth-resource.xsd">http://shibboleth.net/schema/idp/shibboleth-resource.xsd</a><br>
urn:mace:shibboleth:2.0:security
<a class="moz-txt-link-freetext" href="http://shibboleth.net/schema/idp/shibboleth-security.xsd">http://shibboleth.net/schema/idp/shibboleth-security.xsd</a><br>
urn:oasis:names:tc:SAML:2.0:metadata
<a class="moz-txt-link-freetext" href="http://docs.oasis-open.org/security/saml/v2.0/saml-schema-metadata-2.0.xsd">http://docs.oasis-open.org/security/saml/v2.0/saml-schema-metadata-2.0.xsd</a>"><br>
<br>
<!--
==========================================================================================
--><br>
<!-- Metadata
Configuration --><br>
<!--
--><br>
<!-- Below you place the mechanisms which define how to load
the metadata for the SP you will --><br>
<!-- provide a service
to.
--><br>
<!--
--><br>
<!-- Two examples are provided. The Shibboleth
Documentation at --><br>
<!--
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/IDP30/MetadataConfiguration">https://wiki.shibboleth.net/confluence/display/IDP30/MetadataConfiguration</a>
--><br>
<!-- provides more
details.
--><br>
<!--
--><br>
<!-- NOTE. This file SHOULD NOT contain the metadata for
this IdP. --><br>
<!--
--><br>
<!--
==========================================================================================
--><br>
<br>
<!-- Example HTTP metadata provider. Use this if you want to
download<br>
the metadata from a remote service.<br>
<br>
You *MUST* provider the SignatureValidationFilter in order
to function securely.<br>
Get the PubLic key, and validate it via some out of band
mechanism, from the<br>
party publishing the metadata<br>
<br>
The EntityRoleWhiteList saves memory by only loading
metadata from entity types<br>
that you will interoperate with.<br>
<br>
<MetadataProvider id="HTTPMetadata"<br>
xsi:type="FileBackedHTTPMetadataProvider"<br>
backingFile="/opt/shibboleth-idp/metadata/testshib-providers.xml"<br>
metadataURL=<a class="moz-txt-link-rfc2396E" href="http://www.testshib.org/metadata/testshib-providers.xml">"http://www.testshib.org/metadata/testshib-providers.xml"</a>/><br>
<br>
<MetadataFilter xsi:type="SignatureValidation"<br>
requireSignedMetadata="false"><br>
<PublicKey><br>
THIS IS AN EXAMPLE<br>
<br>
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg0TyQAP/tIvOH89EtaX<br>
uRRn8SYzTj7W1TbNY4VvBmobjkRmSkki4hH9x4sQpi635wn6WtXTN/FNNmkTK3N/<br>
LspmBWxfZS+n+cc7I82E5yvCAPX67QsZgqgglp2W5dvK/FsMMCS6X6SVqzBLMP88<br>
NenXKxY+HMxMs0sT0UKYh1cAEqadrHRBO65aDBcm5a0sBVYt9K6pgaOHrp/zSIbh<br>
nR5tFFLjBbtFktDpHL3AdGBH3OYidNGKBO3tJ3Ms7LeKXsM0+0Y4P+9fHZINL2X3<br>
E2N6GVnKs5PZTg9sP0FtIpAbYm/+zCx7Yj1ET/Er8mDd6tNVGSQsn9s5xUBwGqn1<br>
4wIDAQAB<br>
</PublicKey><br>
</MetadataFilter><br>
<MetadataFilter xsi:type="EntityRoleWhiteList"><br>
<RetainedRole>md:SPSSODescriptor</RetainedRole><br>
</MetadataFilter><br>
<br>
</MetadataProvider><br>
<br>
--><br>
<br>
<!-- Example file metadata provider. Use this if you want to
load metadata<br>
from a local file. You might use this if you have some
local SPs<br>
which are not "federated" but you wish to offer a service
to.<br>
<br>
If you do not provide a SignatureValidation filter then you
*have*<br>
to know that the file is valid.<br>
<br>
<br>
<MetadataProvider id="LocalMetadata"
xsi:type="FilesystemMetadataProvider"
metadataFile="PATH_TO_YOUR_METADATA"/><br>
<br>
--><br>
<br>
<br>
</MetadataProvider><br>
<br>
<br>
<div class="moz-cite-prefix">On 15-07-22 04:16 PM, McKean, Brandon
Scott - mckeanbs wrote:<br>
</div>
<blockquote cite="mid:1437596195.959.105.camel@jmu.edu" type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<div>Hi Remi,</div>
<div><br>
</div>
<div>When I first was setting up Shibboleth I'd get this error
when my attribute-filter.xml needed adjusting to allow testshib.
This is assuming you already have metadata for them configured
in metadata-providers.xml and their file there. I believe
testshib has some examples to this end, but if now I can share
mine.</div>
<div><br>
</div>
<div>Brandon</div>
<div><br>
</div>
<div>On Wed, 2015-07-22 at 15:59 -0400, Remi Mayrand-Provencher
wrote:</div>
<blockquote type="cite">
<div class="moz-text-html" lang="x-unicode">Hi, it's my first
time trying to install Shibboleth idp 3 and I've been trying
to make it working for a while now, and the best I could get
from testshib when trying to test it was the page at this URL:
<a moz-do-not-send="true"
href="https://urldefense.proofpoint.com/v2/url?u=https-3A__184.107.146.250_idp_profile_SAML2_Redirect_SSO-3FSAMLRequest-3DfZJNT4MwHMa-252FCukdyssYrBkkuB1cMpUM9ODFFOhGk9Ji-252F8WXby8bU-252BfB3Zr0eenzS5dAO9GTbDCt3LHXgYGxPjohgZwuEjRoSRQFDkTSjgExNSmyuy3xHZf0WhlVK4GsDIBpw5VcKQlDx3TB9Buv2eNum6DWmB4IxtA7ZsyHlleO0gdcjIdKCWZaB0DhY6yP84eiRNZ61HFJj4m-252Ffi-252BeOZ4bOd5s7vihi3nT4-252FEJey7Y2bxjDdesNrgoHpC1WSfopaHVLAjqBaXxfO8v4op68yaO4jCmQe021SgDGNhGgqHSJMh3vdB2I9v3S29BvIiEwTOy8vPSGy4bLg-252FXsVSTCMhtWeb2NOiJaTiNGQUoXR7hklOxvsB9PZZ-252BM0bpf0Thh6gN-252FRJftEyVPbkfYzfrXAlef1qZEOp9pRk1LEEewulk-252Bfsd0i8-253D-26RelayState-3Dcookie-253A1437592673-5F1eac&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=9DTUyvzo75ZjbG8QsnPgqZWYBmIMT4gmn4eS-COwVS4&e=">https://184.107.146.250/idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZJNT4MwHMa%2FCukdyssYrBkkuB1cMpUM9ODFFOhGk9Ji%2F8WXby8bU%2BfB3Zr0eenzS5dAO9GTbDCt3L
H
XgYGxPjohgZwuEjRoSRQFDkTSjgExNSmyuy3xHZf0WhlVK4GsDIBpw5VcKQlDx3TB9Buv2eNum6DWmB4IxtA7ZsyHlleO0gdcjIdKCWZaB0DhY6yP84eiRNZ61HFJj4m%2Ffi%2BeOZ4bOd5s7vihi3nT4%2FEJey7Y2bxjDdesNrgoHpC1WSfopaHVLAjqBaXxfO8v4op68yaO4jCmQe021SgDGNhGgqHSJMh3vdB2I9v3S2
9BvIiEwTOy8vPSGy4bLg%2FXsVSTCMhtWeb2NOiJaTiNGQUoXR7hklOxvsB9PZZ%2BM0bpf0Thh6gN%2FRJftEyVPbkfYzfrXAlef1qZEOp9pRk1LEEewulk%2Bfsd0i8%3D&RelayState=cookie%3A1437592673_1eac</a><br>
<br>
Here is what it contains :<br>
<pre id="line1"><span>
<span id="line2"></span> </span><span class="doctype"><!DOCTYPE html></span><span>
<span id="line3"></span></span><span><<span class="start-tag">html</span>></span><span>
<span id="line4"></span> </span><span><<span class="start-tag">head</span>></span><span>
<span id="line5"></span> </span><span><<span class="start-tag">meta</span> <span class="attribute-name">charset</span>="<a moz-do-not-send="true">utf-8</a>"></span><span>
<span id="line6"></span> </span><span><<span class="start-tag">title</span>></span><span>Web Login Service - Unsupported Request</span><span></<span class="end-tag">title</span>></span><span>
<span id="line7"></span> </span><span><<span class="start-tag">link</span> <span class="attribute-name">rel</span>="<a moz-do-not-send="true">stylesheet</a>" <span class="attribute-name">type</span>="<a moz-do-not-send="true">text/css</a>" <span class="attribute-name">href</span>="<a moz-do-not-send="true" href="view-source:https://184.107.146.250/idp/css/main.css">/idp/css/main.css</a>"></span><span>
<span id="line8"></span> </span><span></<span class="end-tag">head</span>></span><span>
<span id="line9"></span>
<span id="line10"></span> </span><span><<span class="start-tag">body</span>></span><span>
<span id="line11"></span> </span><span><<span class="start-tag">div</span> <span class="attribute-name">class</span>="<a moz-do-not-send="true">wrapper</a>"></span><span>
<span id="line12"></span> </span><span><<span class="start-tag">div</span> <span class="attribute-name">class</span>="<a moz-do-not-send="true">container</a>"></span><span>
<span id="line13"></span> </span><span><<span class="start-tag">header</span>></span><span>
<span id="line14"></span> </span><span><<span class="start-tag">img</span> <span class="attribute-name">src</span>="<a moz-do-not-send="true" href="view-source:https://184.107.146.250/idp/images/dummylogo.png">/idp/images/dummylogo.png</a>" <span class="attribute-name">alt</span>="<a moz-do-not-send="true">Replace or remove this logo</a>"></span><span>
<span id="line15"></span> </span><span><<span class="start-tag">h3</span>></span><span>Web Login Service - Unsupported Request</span><span></<span class="end-tag">h3</span>></span><span>
<span id="line16"></span> </span><span></<span class="end-tag">header</span>></span><span>
<span id="line17"></span>
<span id="line18"></span> </span><span><<span class="start-tag">div</span> <span class="attribute-name">class</span>="<a moz-do-not-send="true">content</a>"></span><span>
<span id="line19"></span> The application you have accessed is not registered for use with this service. </span><span></<span class="end-tag">div</span>></span><span>
<span id="line20"></span> </span><span></<span class="end-tag">div</span>></span><span>
<span id="line21"></span>
<span id="line22"></span> </span><span><<span class="start-tag">footer</span>></span><span>
<span id="line23"></span> </span><span><<span class="start-tag">div</span> <span class="attribute-name">class</span>="<a moz-do-not-send="true">container container-footer</a>"></span><span>
<span id="line24"></span> </span><span><<span class="start-tag">p</span> <span class="attribute-name">class</span>="<a moz-do-not-send="true">footer-text</a>"></span><span>Insert your footer text here.</span><span></<span class="end-tag">p</span>></span><span>
<span id="line25"></span> </span><span></<span class="end-tag">div</span>></span><span>
<span id="line26"></span> </span><span></<span class="end-tag">footer</span>></span><span>
<span id="line27"></span>
<span id="line28"></span> </span><span></<span class="end-tag">div</span>></span><span>
<span id="line29"></span> </span><span></<span class="end-tag">body</span>></span><span>
<span id="line30"></span></span><span></<span class="end-tag">html</span>></span></pre>
<br>
I installed my shibboleth-idp on a server and I am testing it
from my local browser. I can access
<a moz-do-not-send="true"
href="https://urldefense.proofpoint.com/v2/url?u=https-3A__184.107.146.250_idp_status&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=tawisOrEZkPFIhRQtxDq5RJY1wH3rhd12mdYjW6LZzU&e=">https://184.107.146.250/idp/status</a>
from my local computer (where 184.107.146.250 is my server's
IP) and I get this result :<br>
<br>
<pre>### Operating Environment Information
operating_system: Linux
operating_system_version: 2.6.32-5-amd64
operating_system_architecture: amd64
jdk_version: 1.7.0_75
available_cores: 4
used_memory: 345 MB
maximum_memory: 773 MB
### Identity Provider Information
idp_version: 3.1.2
start_time: 2015-07-22T14:42:55-04:00
current_time: 2015-07-22T15:14:07-04:00
uptime: 1871692 ms
service: shibboleth.LoggingService
last successful reload attempt: 2015-07-22T18:42:45Z
last reload attempt: 2015-07-22T18:42:45Z
service: shibboleth.ReloadableAccessControlService
last successful reload attempt: 2015-07-22T18:42:48Z
last reload attempt: 2015-07-22T18:42:48Z
service: shibboleth.MetadataResolverService
last successful reload attempt: 2015-07-22T18:42:48Z
last reload attempt: 2015-07-22T18:42:48Z
metadata source: ShibbolethMetadata
service: shibboleth.RelyingPartyResolverService
last successful reload attempt: 2015-07-22T18:42:48Z
last reload attempt: 2015-07-22T18:42:48Z
service: shibboleth.NameIdentifierGenerationService
last successful reload attempt: 2015-07-22T18:42:48Z
last reload attempt: 2015-07-22T18:42:48Z
service: shibboleth.AttributeResolverService
last successful reload attempt: 2015-07-22T18:42:47Z
last reload attempt: 2015-07-22T18:42:47Z
service: shibboleth.AttributeFilterService
last successful reload attempt: 2015-07-22T18:42:47Z
last reload attempt: 2015-07-22T18:42:47Z
</pre>
Here is the content of idp-process.log when I try to test my
idp:<br>
<br>
<small>2015-07-22 15:21:49,564 - DEBUG
[org.opensaml.profile.action.impl.DecodeMessage:64] -
Profile Action DecodeMessage: Decoding message using message
decoder of ty<br>
pe
org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder
for this request<br>
2015-07-22 15:21:49,565 - DEBUG
[org.opensaml.messaging.decoder.servlet.BaseHttpServletRequestXMLMessageDecoder:64]
- Beginning to decode message from HttpServl<br>
etRequest<br>
2015-07-22 15:21:49,565 - DEBUG
[org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:64]
- Decoded RelayState: cookie:1437592673_1eac<br>
2015-07-22 15:21:49,565 - DEBUG
[org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:96]
- Base64 decoding and inflating SAML message<br>
2015-07-22 15:21:49,566 - DEBUG
[org.opensaml.core.xml.util.XMLObjectSupport:161] - Parsing
InputStream into DOM document<br>
2015-07-22 15:21:49,566 - DEBUG
[org.opensaml.core.xml.util.XMLObjectSupport:171] -
Unmarshalling DOM parsed from InputStream<br>
2015-07-22 15:21:49,567 - DEBUG
[org.opensaml.core.xml.util.XMLObjectSupport:183] -
InputStream succesfully unmarshalled<br>
2015-07-22 15:21:49,567 - DEBUG
[org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:79]
- Decoded SAML message<br>
2015-07-22 15:21:49,567 - DEBUG
[org.opensaml.core.xml.util.XMLObjectSupport:236] -
Marshalling XMLObject<br>
2015-07-22 15:21:49,568 - DEBUG
[org.opensaml.core.xml.util.XMLObjectSupport:239] -
XMLObject already had cached DOM, returning that element<br>
2015-07-22 15:21:49,569 - DEBUG [PROTOCOL_MESSAGE:121] - <br>
<?xml version="1.0" encoding="UTF-8"?><br>
<samlp:AuthnRequest<br>
AssertionConsumerServiceURL=<a moz-do-not-send="true"
href="https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_Shibboleth.sso_SAML2_POST&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=JVoxNB4p0Lqn1Uy4BICUmhtJ28KhrttWpRnSlopoYpM&e=">"https://sp.testshib.org/Shibboleth.sso/SAML2/POST"</a><br>
Destination=<a moz-do-not-send="true"
href="https://urldefense.proofpoint.com/v2/url?u=https-3A__184.107.146.250_idp_profile_SAML2_Redirect_SSO&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=nPpeFfPLNwohHYupQKjXsIBTHOQdN_Iya1SqELwLwvA&e=">"https://184.107.146.250/idp/profile/SAML2/Redirect/SSO"</a><br>
ID="_dab433c9aa86f298ba16d87858a3c0db"<br>
IssueInstant="2015-07-22T19:17:53Z"<br>
ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"<br>
Version="2.0"
xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><br>
<saml:Issuer
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><a
moz-do-not-send="true"
href="https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_shibboleth-2Dsp&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=B8iniOxp9z2q9YajBjgw_00GQcyqRkgMaoTIHyplOUc&e=">https://sp.testshib.org/shibboleth-sp</a></saml:Issuer><br>
<samlp:NameIDPolicy AllowCreate="1"/><br>
</samlp:AuthnRequest><br>
2015-07-22 15:21:49,570 - DEBUG
[org.opensaml.messaging.decoder.servlet.BaseHttpServletRequestXMLMessageDecoder:70]
- Successfully decoded message from HttpServletRequest.<br>
2015-07-22 15:21:49,570 - DEBUG
[org.opensaml.profile.action.impl.DecodeMessage:68] -
Profile Action DecodeMessage: Incoming request decoded into
a message of type
org.opensaml.saml.saml2.core.impl.AuthnRequestImpl<br>
2015-07-22 15:21:49,571 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198]
- Profile Action PopulateAuditContext: Skipping field
'fauth' not included in audit format<br>
2015-07-22 15:21:49,571 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198]
- Profile Action PopulateAuditContext: Skipping field 'D'
not included in audit format<br>
2015-07-22 15:21:49,572 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198]
- Profile Action PopulateAuditContext: Skipping field 'pasv'
not included in audit format<br>
2015-07-22 15:21:49,572 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220]
- Profile Action PopulateAuditContext: Adding 1 value for
field 'b'<br>
2015-07-22 15:21:49,572 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220]
- Profile Action PopulateAuditContext: Adding 1 value for
field 'I'<br>
2015-07-22 15:21:49,572 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198]
- Profile Action PopulateAuditContext: Skipping field 'p'
not included in audit format<br>
2015-07-22 15:21:49,573 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking
message handler of type
'org.opensaml.saml.common.binding.impl.CheckMessageVersionHandler'
on INBOUND message context<br>
2015-07-22 15:21:49,574 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking
message handler on message context containing a message of
type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'<br>
2015-07-22 15:21:49,575 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking
message handler of type
'org.opensaml.saml.saml1.binding.impl.SAML1ArtifactRequestIssuerHandler'
on INBOUND message context<br>
2015-07-22 15:21:49,575 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking
message handler on message context containing a message of
type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'<br>
2015-07-22 15:21:49,576 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking
message handler of type
'org.opensaml.saml.common.binding.impl.SAMLProtocolAndRoleHandler'
on INBOUND message context<br>
2015-07-22 15:21:49,576 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking
message handler on message context containing a message of
type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'<br>
2015-07-22 15:21:49,577 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking
message handler of type
'org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler'
on INBOUND message context<br>
2015-07-22 15:21:49,578 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking
message handler on message context containing a message of
type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'<br>
2015-07-22 15:21:49,578 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:198]
- Metadata document did not contain a descriptor for entity
<a moz-do-not-send="true"
href="https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_shibboleth-2Dsp&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=B8iniOxp9z2q9YajBjgw_00GQcyqRkgMaoTIHyplOUc&e=">https://sp.testshib.org/shibboleth-sp</a><br>
2015-07-22 15:21:49,578 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:281]
- Metadata document did not contain any role descript<br>
ors of type
{urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor for
entity <a moz-do-not-send="true"
href="https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_shibboleth-2Dsp&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=B8iniOxp9z2q9YajBjgw_00GQcyqRkgMaoTIHyplOUc&e=">https://sp.testshib.org/shibboleth-sp</a><br>
2015-07-22 15:21:49,578 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:252]
- Metadata document does not contain a role of type
{urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor
supporting protocol urn:oasis:names:tc:SAML:2.0:protocol for
entity <a moz-do-not-send="true"
href="https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_shibboleth-2Dsp&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=B8iniOxp9z2q9YajBjgw_00GQcyqRkgMaoTIHyplOUc&e=">https://sp.testshib.org/shibboleth-sp</a><br>
2015-07-22 15:21:49,579 - INFO
[org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:108]
- Message Handler: No metadata returned for
<a moz-do-not-send="true"
href="https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_shibboleth-2Dsp&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=B8iniOxp9z2q9YajBjgw_00GQcyqRkgMaoTIHyplOUc&e=">https://sp.testshib.org/shibboleth-sp</a>
in role
{urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor with
protocol urn:oasis:names:tc:SAML:2.0:protocol<br>
2015-07-22 15:21:49,579 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking
message handler of type
'org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler'
on INBOUND message context<br>
2015-07-22 15:21:49,580 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking
message handler on message context containing a message of
type 'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'<br>
2015-07-22 15:21:49,580 - DEBUG
[org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:109]
- Message Handler: No metadata context found, nothing to do<br>
2015-07-22 15:21:49,580 - DEBUG
[net.shibboleth.idp.saml.profile.impl.InitializeRelyingPartyContextFromSAMLPeer:132]
- Profile Action InitializeRelyingPartyContextFromSAMLPeer:
Attaching RelyingPartyContext based on SAML peer
<a moz-do-not-send="true"
href="https://urldefense.proofpoint.com/v2/url?u=https-3A__sp.testshib.org_shibboleth-2Dsp&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=B8iniOxp9z2q9YajBjgw_00GQcyqRkgMaoTIHyplOUc&e=">https://sp.testshib.org/shibboleth-sp</a><br>
2015-07-22 15:21:49,581 - DEBUG
[net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:284]
- Resolving relying party configuration<br>
2015-07-22 15:21:49,581 - DEBUG
[net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:290]
- Profile request is unverified, returning configuration
shibboleth.UnverifiedRelyingParty<br>
2015-07-22 15:21:49,581 - DEBUG
[net.shibboleth.idp.profile.impl.SelectRelyingPartyConfiguration:136]
- Profile Action SelectRelyingPartyConfiguration: Found
relying party configuration
shibboleth.UnverifiedRelyingParty for request<br>
2015-07-22 15:21:49,582 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220]
- Profile Action PopulateAuditContext: Adding 1 value for
field 'SP'<br>
2015-07-22 15:21:49,582 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220]
- Profile Action PopulateAuditContext: Adding 1 value for
field 'IDP'<br>
2015-07-22 15:21:49,583 - WARN
[net.shibboleth.idp.profile.impl.SelectProfileConfiguration:111]
- Profile Action SelectProfileConfiguration: Profile
<a moz-do-not-send="true"
href="https://urldefense.proofpoint.com/v2/url?u=http-3A__shibboleth.net_ns_profiles_saml2_sso_browser&d=BQMDaQ&c=eLbWYnpnzycBCgmb7vCI4uqNEB9RSjOdn_5nBEmmeq0&r=iZ_ekq9_90q96juMacb0Sg&m=M-ZXJMXOr5pomvTh8ZDFxxRdXFNna830NrjGo4TZtxY&s=ypkb6uCEkF0NTlFBeu591LWR4mbomtGGbYpWaufdpRg&e=">http://shibboleth.net/ns/profiles/saml2/sso/browser</a>
is not available for relying party configuration
shibboleth.UnverifiedRelyingParty<br>
2015-07-22 15:21:49,584 - DEBUG
[org.opensaml.saml.common.profile.logic.DefaultLocalErrorPredicate:154]
- No SAMLBindingContext or binding URI available, error must
be handled locally<br>
2015-07-22 15:21:49,586 - DEBUG [org.apache.velocity:100] -
No class specified for #evaluate() context, so #set calls
will now alter the global context and no longer be local.
This is a change from earlier versions due to VELOCITY-704.
If you need references within #evaluate to stay local,
please use the automatically provided $evaluate namespace
instead (e.g. #set($evaluate.foo = 'bar') and
$evaluate.foo).<br>
2015-07-22 15:22:48,357 - DEBUG
[org.opensaml.storage.impl.MemoryStorageService:94] -
Running cleanup task<br>
2015-07-22 15:22:48,357 - DEBUG
[org.opensaml.storage.impl.MemoryStorageService:122] - No
expired records found in storage<br>
2015-07-22 15:27:47,470 - INFO
[net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategy:327]
- Default key version has not changed, still secret1<br>
2015-07-22 15:32:48,357 - DEBUG
[org.opensaml.storage.impl.MemoryStorageService:94] -
Running cleanup task<br>
2015-07-22 15:32:48,357 - DEBUG
[org.opensaml.storage.impl.MemoryStorageService:122] - No
expired records found in storage<br>
</small><br>
Is there anything obvious that I am missing? Tell me if you
need anything else to be able to better answer me.<br>
Thank you!<br>
</div>
<pre>--
To unsubscribe from this list send an email to <a moz-do-not-send="true" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a></pre>
</blockquote>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
</body>
</html>