<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-text-html" lang="x-unicode"> Hi, it's my first time
trying to install Shibboleth idp 3 and I've been trying to make it
working for a while now, and the best I could get from testshib
when trying to test it was the page at this URL:
<a class="moz-txt-link-freetext"
href="https://184.107.146.250/idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZJNT4MwHMa%2FCukdyssYrBkkuB1cMpUM9ODFFOhGk9Ji%2F8WXby8bU%2BfB3Zr0eenzS5dAO9GTbDCt3LHXgYGxPjohgZwuEjRoSRQFDkTSjgExNSmyuy3xHZf0WhlVK4GsDIBpw5VcKQlDx3TB9Buv2eNum6DWmB4IxtA7ZsyHlleO0gdcjIdKCWZaB0DhY6yP84eiRNZ61HFJj4m%2Ffi%2BeOZ4bOd5s7vihi3nT4%2FEJey7Y2bxjDdesNrgoHpC1WSfopaHVLAjqBaXxfO8v4op68yaO4jCmQe021SgDGNhGgqHSJMh3vdB2I9v3S29BvIiEwTOy8vPSGy4bLg%2FXsVSTCMhtWeb2NOiJaTiNGQUoXR7hklOxvsB9PZZ%2BM0bpf0Thh6gN%2FRJftEyVPbkfYzfrXAlef1qZEOp9pRk1LEEewulk%2Bfsd0i8%3D&RelayState=cookie%3A1437592673_1eac">https://184.107.146.250/idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZJNT4MwHMa%2FCukdyssYrBkkuB1cMpUM9ODFFOhGk9Ji%2F8WXby8bU%2BfB3Zr0eenzS5dAO9GTbDCt3LHXgYGxPjohgZwuEjRoSRQFDkTSjgExNSmyuy3xHZf0WhlVK4GsDIBpw5VcKQlDx3TB9Buv2eNum6DWmB4IxtA7ZsyHlleO0gdcjIdKCWZaB0DhY6yP84eiRNZ61HFJj4m%2Ffi%2BeOZ4bOd5s7vihi3nT4%2FEJey7Y2bxjDdesNrgoHpC1WSfopaHVLAjqBaXxfO8v4op68yaO4jCmQe021SgDGNhGgqHSJMh3vdB2I9v3S2
9BvIiEwTOy8vPSGy4bLg%2FXsVSTCMhtWeb2NOiJaTiNGQUoXR7hklOxvsB9PZZ%2BM0bpf0Thh6gN%2FRJftEyVPbkfYzfrXAlef1qZEOp9pRk1LEEewulk%2Bfsd0i8%3D&RelayState=cookie%3A1437592673_1eac</a><br>
<br>
Here is what it contains :<br>
<pre id="line1"><span>
<span id="line2"></span> </span><span class="doctype"><!DOCTYPE html></span><span>
<span id="line3"></span></span><span><<span class="start-tag">html</span>></span><span>
<span id="line4"></span> </span><span><<span class="start-tag">head</span>></span><span>
<span id="line5"></span> </span><span><<span class="start-tag">meta</span> <span class="attribute-name">charset</span>="<a class="attribute-value">utf-8</a>"></span><span>
<span id="line6"></span> </span><span><<span class="start-tag">title</span>></span><span>Web Login Service - Unsupported Request</span><span></<span class="end-tag">title</span>></span><span>
<span id="line7"></span> </span><span><<span class="start-tag">link</span> <span class="attribute-name">rel</span>="<a class="attribute-value">stylesheet</a>" <span class="attribute-name">type</span>="<a class="attribute-value">text/css</a>" <span class="attribute-name">href</span>="<a href="view-source:https://184.107.146.250/idp/css/main.css" class="attribute-value">/idp/css/main.css</a>"></span><span>
<span id="line8"></span> </span><span></<span class="end-tag">head</span>></span><span>
<span id="line9"></span>
<span id="line10"></span> </span><span><<span class="start-tag">body</span>></span><span>
<span id="line11"></span> </span><span><<span class="start-tag">div</span> <span class="attribute-name">class</span>="<a class="attribute-value">wrapper</a>"></span><span>
<span id="line12"></span> </span><span><<span class="start-tag">div</span> <span class="attribute-name">class</span>="<a class="attribute-value">container</a>"></span><span>
<span id="line13"></span> </span><span><<span class="start-tag">header</span>></span><span>
<span id="line14"></span> </span><span><<span class="start-tag">img</span> <span class="attribute-name">src</span>="<a href="view-source:https://184.107.146.250/idp/images/dummylogo.png" class="attribute-value">/idp/images/dummylogo.png</a>" <span class="attribute-name">alt</span>="<a class="attribute-value">Replace or remove this logo</a>"></span><span>
<span id="line15"></span> </span><span><<span class="start-tag">h3</span>></span><span>Web Login Service - Unsupported Request</span><span></<span class="end-tag">h3</span>></span><span>
<span id="line16"></span> </span><span></<span class="end-tag">header</span>></span><span>
<span id="line17"></span>
<span id="line18"></span> </span><span><<span class="start-tag">div</span> <span class="attribute-name">class</span>="<a class="attribute-value">content</a>"></span><span>
<span id="line19"></span> The application you have accessed is not registered for use with this service. </span><span></<span class="end-tag">div</span>></span><span>
<span id="line20"></span> </span><span></<span class="end-tag">div</span>></span><span>
<span id="line21"></span>
<span id="line22"></span> </span><span><<span class="start-tag">footer</span>></span><span>
<span id="line23"></span> </span><span><<span class="start-tag">div</span> <span class="attribute-name">class</span>="<a class="attribute-value">container container-footer</a>"></span><span>
<span id="line24"></span> </span><span><<span class="start-tag">p</span> <span class="attribute-name">class</span>="<a class="attribute-value">footer-text</a>"></span><span>Insert your footer text here.</span><span></<span class="end-tag">p</span>></span><span>
<span id="line25"></span> </span><span></<span class="end-tag">div</span>></span><span>
<span id="line26"></span> </span><span></<span class="end-tag">footer</span>></span><span>
<span id="line27"></span>
<span id="line28"></span> </span><span></<span class="end-tag">div</span>></span><span>
<span id="line29"></span> </span><span></<span class="end-tag">body</span>></span><span>
<span id="line30"></span></span><span></<span class="end-tag">html</span>></span></pre>
<br>
I installed my shibboleth-idp on a server and I am testing it from
my local browser. I can access <a class="moz-txt-link-freetext"
href="https://184.107.146.250/idp/status">https://184.107.146.250/idp/status</a>
from my local computer (where 184.107.146.250 is my server's IP)
and I get this result :<br>
<br>
<pre>### Operating Environment Information
operating_system: Linux
operating_system_version: 2.6.32-5-amd64
operating_system_architecture: amd64
jdk_version: 1.7.0_75
available_cores: 4
used_memory: 345 MB
maximum_memory: 773 MB
### Identity Provider Information
idp_version: 3.1.2
start_time: 2015-07-22T14:42:55-04:00
current_time: 2015-07-22T15:14:07-04:00
uptime: 1871692 ms
service: shibboleth.LoggingService
last successful reload attempt: 2015-07-22T18:42:45Z
last reload attempt: 2015-07-22T18:42:45Z
service: shibboleth.ReloadableAccessControlService
last successful reload attempt: 2015-07-22T18:42:48Z
last reload attempt: 2015-07-22T18:42:48Z
service: shibboleth.MetadataResolverService
last successful reload attempt: 2015-07-22T18:42:48Z
last reload attempt: 2015-07-22T18:42:48Z
metadata source: ShibbolethMetadata
service: shibboleth.RelyingPartyResolverService
last successful reload attempt: 2015-07-22T18:42:48Z
last reload attempt: 2015-07-22T18:42:48Z
service: shibboleth.NameIdentifierGenerationService
last successful reload attempt: 2015-07-22T18:42:48Z
last reload attempt: 2015-07-22T18:42:48Z
service: shibboleth.AttributeResolverService
last successful reload attempt: 2015-07-22T18:42:47Z
last reload attempt: 2015-07-22T18:42:47Z
service: shibboleth.AttributeFilterService
last successful reload attempt: 2015-07-22T18:42:47Z
last reload attempt: 2015-07-22T18:42:47Z
</pre>
Here is the content of idp-process.log when I try to test my idp:<br>
<br>
<small>2015-07-22 15:21:49,564 - DEBUG
[org.opensaml.profile.action.impl.DecodeMessage:64] - Profile
Action DecodeMessage: Decoding message using message decoder of
ty<br>
pe
org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder
for this request<br>
2015-07-22 15:21:49,565 - DEBUG
[org.opensaml.messaging.decoder.servlet.BaseHttpServletRequestXMLMessageDecoder:64]
- Beginning to decode message from HttpServl<br>
etRequest<br>
2015-07-22 15:21:49,565 - DEBUG
[org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:64]
- Decoded RelayState: cookie:1437592673_1eac<br>
2015-07-22 15:21:49,565 - DEBUG
[org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:96]
- Base64 decoding and inflating SAML message<br>
2015-07-22 15:21:49,566 - DEBUG
[org.opensaml.core.xml.util.XMLObjectSupport:161] - Parsing
InputStream into DOM document<br>
2015-07-22 15:21:49,566 - DEBUG
[org.opensaml.core.xml.util.XMLObjectSupport:171] -
Unmarshalling DOM parsed from InputStream<br>
2015-07-22 15:21:49,567 - DEBUG
[org.opensaml.core.xml.util.XMLObjectSupport:183] - InputStream
succesfully unmarshalled<br>
2015-07-22 15:21:49,567 - DEBUG
[org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:79]
- Decoded SAML message<br>
2015-07-22 15:21:49,567 - DEBUG
[org.opensaml.core.xml.util.XMLObjectSupport:236] - Marshalling
XMLObject<br>
2015-07-22 15:21:49,568 - DEBUG
[org.opensaml.core.xml.util.XMLObjectSupport:239] - XMLObject
already had cached DOM, returning that element<br>
2015-07-22 15:21:49,569 - DEBUG [PROTOCOL_MESSAGE:121] - <br>
<?xml version="1.0" encoding="UTF-8"?><br>
<samlp:AuthnRequest<br>
AssertionConsumerServiceURL=<a class="moz-txt-link-rfc2396E"
href="https://sp.testshib.org/Shibboleth.sso/SAML2/POST">"https://sp.testshib.org/Shibboleth.sso/SAML2/POST"</a><br>
Destination=<a class="moz-txt-link-rfc2396E"
href="https://184.107.146.250/idp/profile/SAML2/Redirect/SSO">"https://184.107.146.250/idp/profile/SAML2/Redirect/SSO"</a><br>
ID="_dab433c9aa86f298ba16d87858a3c0db"<br>
IssueInstant="2015-07-22T19:17:53Z"<br>
ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"<br>
Version="2.0"
xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"><br>
<saml:Issuer
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"><a
class="moz-txt-link-freetext"
href="https://sp.testshib.org/shibboleth-sp">https://sp.testshib.org/shibboleth-sp</a></saml:Issuer><br>
<samlp:NameIDPolicy AllowCreate="1"/><br>
</samlp:AuthnRequest><br>
2015-07-22 15:21:49,570 - DEBUG
[org.opensaml.messaging.decoder.servlet.BaseHttpServletRequestXMLMessageDecoder:70]
- Successfully decoded message from HttpServletRequest.<br>
2015-07-22 15:21:49,570 - DEBUG
[org.opensaml.profile.action.impl.DecodeMessage:68] - Profile
Action DecodeMessage: Incoming request decoded into a message of
type org.opensaml.saml.saml2.core.impl.AuthnRequestImpl<br>
2015-07-22 15:21:49,571 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198]
- Profile Action PopulateAuditContext: Skipping field 'fauth'
not included in audit format<br>
2015-07-22 15:21:49,571 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198]
- Profile Action PopulateAuditContext: Skipping field 'D' not
included in audit format<br>
2015-07-22 15:21:49,572 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198]
- Profile Action PopulateAuditContext: Skipping field 'pasv' not
included in audit format<br>
2015-07-22 15:21:49,572 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220]
- Profile Action PopulateAuditContext: Adding 1 value for field
'b'<br>
2015-07-22 15:21:49,572 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220]
- Profile Action PopulateAuditContext: Adding 1 value for field
'I'<br>
2015-07-22 15:21:49,572 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:198]
- Profile Action PopulateAuditContext: Skipping field 'p' not
included in audit format<br>
2015-07-22 15:21:49,573 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking message
handler of type
'org.opensaml.saml.common.binding.impl.CheckMessageVersionHandler'
on INBOUND message context<br>
2015-07-22 15:21:49,574 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking message
handler on message context containing a message of type
'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'<br>
2015-07-22 15:21:49,575 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking message
handler of type
'org.opensaml.saml.saml1.binding.impl.SAML1ArtifactRequestIssuerHandler'
on INBOUND message context<br>
2015-07-22 15:21:49,575 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking message
handler on message context containing a message of type
'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'<br>
2015-07-22 15:21:49,576 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking message
handler of type
'org.opensaml.saml.common.binding.impl.SAMLProtocolAndRoleHandler'
on INBOUND message context<br>
2015-07-22 15:21:49,576 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking message
handler on message context containing a message of type
'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'<br>
2015-07-22 15:21:49,577 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking message
handler of type
'org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler'
on INBOUND message context<br>
2015-07-22 15:21:49,578 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking message
handler on message context containing a message of type
'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'<br>
2015-07-22 15:21:49,578 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:198]
- Metadata document did not contain a descriptor for entity <a
class="moz-txt-link-freetext"
href="https://sp.testshib.org/shibboleth-sp">https://sp.testshib.org/shibboleth-sp</a><br>
2015-07-22 15:21:49,578 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:281]
- Metadata document did not contain any role descript<br>
ors of type
{urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor for entity
<a class="moz-txt-link-freetext"
href="https://sp.testshib.org/shibboleth-sp">https://sp.testshib.org/shibboleth-sp</a><br>
2015-07-22 15:21:49,578 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.BasicRoleDescriptorResolver:252]
- Metadata document does not contain a role of type
{urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor supporting
protocol urn:oasis:names:tc:SAML:2.0:protocol for entity <a
class="moz-txt-link-freetext"
href="https://sp.testshib.org/shibboleth-sp">https://sp.testshib.org/shibboleth-sp</a><br>
2015-07-22 15:21:49,579 - INFO
[org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:108]
- Message Handler: No metadata returned for <a
class="moz-txt-link-freetext"
href="https://sp.testshib.org/shibboleth-sp">https://sp.testshib.org/shibboleth-sp</a>
in role {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor
with protocol urn:oasis:names:tc:SAML:2.0:protocol<br>
2015-07-22 15:21:49,579 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:154]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking message
handler of type
'org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler'
on INBOUND message context<br>
2015-07-22 15:21:49,580 - DEBUG
[net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:175]
- Profile Action WebFlowMessageHandlerAdaptor: Invoking message
handler on message context containing a message of type
'org.opensaml.saml.saml2.core.impl.AuthnRequestImpl'<br>
2015-07-22 15:21:49,580 - DEBUG
[org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:109]
- Message Handler: No metadata context found, nothing to do<br>
2015-07-22 15:21:49,580 - DEBUG
[net.shibboleth.idp.saml.profile.impl.InitializeRelyingPartyContextFromSAMLPeer:132]
- Profile Action InitializeRelyingPartyContextFromSAMLPeer:
Attaching RelyingPartyContext based on SAML peer <a
class="moz-txt-link-freetext"
href="https://sp.testshib.org/shibboleth-sp">https://sp.testshib.org/shibboleth-sp</a><br>
2015-07-22 15:21:49,581 - DEBUG
[net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:284]
- Resolving relying party configuration<br>
2015-07-22 15:21:49,581 - DEBUG
[net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:290]
- Profile request is unverified, returning configuration
shibboleth.UnverifiedRelyingParty<br>
2015-07-22 15:21:49,581 - DEBUG
[net.shibboleth.idp.profile.impl.SelectRelyingPartyConfiguration:136]
- Profile Action SelectRelyingPartyConfiguration: Found relying
party configuration shibboleth.UnverifiedRelyingParty for
request<br>
2015-07-22 15:21:49,582 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220]
- Profile Action PopulateAuditContext: Adding 1 value for field
'SP'<br>
2015-07-22 15:21:49,582 - DEBUG
[net.shibboleth.idp.profile.audit.impl.PopulateAuditContext:220]
- Profile Action PopulateAuditContext: Adding 1 value for field
'IDP'<br>
2015-07-22 15:21:49,583 - WARN
[net.shibboleth.idp.profile.impl.SelectProfileConfiguration:111]
- Profile Action SelectProfileConfiguration: Profile <a
class="moz-txt-link-freetext"
href="http://shibboleth.net/ns/profiles/saml2/sso/browser">http://shibboleth.net/ns/profiles/saml2/sso/browser</a>
is not available for relying party configuration
shibboleth.UnverifiedRelyingParty<br>
2015-07-22 15:21:49,584 - DEBUG
[org.opensaml.saml.common.profile.logic.DefaultLocalErrorPredicate:154]
- No SAMLBindingContext or binding URI available, error must be
handled locally<br>
2015-07-22 15:21:49,586 - DEBUG [org.apache.velocity:100] - No
class specified for #evaluate() context, so #set calls will now
alter the global context and no longer be local. This is a
change from earlier versions due to VELOCITY-704. If you need
references within #evaluate to stay local, please use the
automatically provided $evaluate namespace instead (e.g.
#set($evaluate.foo = 'bar') and $evaluate.foo).<br>
2015-07-22 15:22:48,357 - DEBUG
[org.opensaml.storage.impl.MemoryStorageService:94] - Running
cleanup task<br>
2015-07-22 15:22:48,357 - DEBUG
[org.opensaml.storage.impl.MemoryStorageService:122] - No
expired records found in storage<br>
2015-07-22 15:27:47,470 - INFO
[net.shibboleth.utilities.java.support.security.BasicKeystoreKeyStrategy:327]
- Default key version has not changed, still secret1<br>
2015-07-22 15:32:48,357 - DEBUG
[org.opensaml.storage.impl.MemoryStorageService:94] - Running
cleanup task<br>
2015-07-22 15:32:48,357 - DEBUG
[org.opensaml.storage.impl.MemoryStorageService:122] - No
expired records found in storage<br>
</small><br>
Is there anything obvious that I am missing? Tell me if you need
anything else to be able to better answer me.<br>
Thank you!<br>
</div>
</body>
</html>