<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
I finally got both my service provider and my Identity Provider
working with testshib so now it is time to make them work together.
According to the documentation, I think the only changes I need to
make are in shibboleth2.xml to be able to make a basic test. I've
tried to link my idp to my sp by modifying those next few things in
my shibboleth2.xml file, where
<a class="moz-txt-link-rfc2396E" href="https://test-idp-remi/idp/shibboleth">"https://test-idp-remi/idp/shibboleth"</a> is my idp's entityID.<br>
<br>
<SSO entityID="<b><a class="moz-txt-link-freetext" href="https://test-idp-remi/idp/shibboleth">https://test-idp-remi/idp/shibboleth</a></b>"><br>
SAML2 SAML1<br>
</SSO><br>
<br>
<MetadataProvider type="XML" uri="<b><a class="moz-txt-link-freetext" href="https://test-idp-remi/idp/shibboleth">https://test-idp-remi/idp/shibboleth</a></b>"<br>
backingFilePath="testRemi-tshib-two-idp-metadata.xml"
reloadInterval="180000" /><br>
<br>
Still, when I try to reach
kohaprod.inlibro.net/Shibboleth.sso/Login, all I get is this :<br>
<p class="error"><br>
opensaml::saml2md::MetadataException at
(<a class="moz-txt-link-freetext" href="http://kohaprod.inlibro.net/Shibboleth.sso/Login">http://kohaprod.inlibro.net/Shibboleth.sso/Login</a>)</p>
<p>Unable to locate metadata for identity provider
(<a class="moz-txt-link-freetext" href="https://test-idp-remi/idp/shibboleth">https://test-idp-remi/idp/shibboleth</a>)<br>
</p>
<p><br>
</p>
<p>Here is my complete shibboleth2.xml file, if it helps. I took the
one from testshib since I just want to try to be redirected to my
idp.<br>
</p>
<p><br>
</p>
<SPConfig xmlns="urn:mace:shibboleth:2.0:native:sp:config"
xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"<br>
clockSkew="1800"><br>
<br>
<!-- The entityID is the name TestShib made for your SP.
--><br>
<ApplicationDefaults
entityID=<a class="moz-txt-link-rfc2396E" href="https://kohaprod.inlibro.net/shibboleth">"https://kohaprod.inlibro.net/shibboleth"</a><br>
REMOTE_USER="eppn"><br>
<br>
<!-- You should use secure cookies if at all possible.
See cookieProps in this Wiki article. --><br>
<!--
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessions">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessions</a>
--><br>
<Sessions lifetime="28800" timeout="3600"
checkAddress="false" relayState="ss:mem" handlerSSL="false"><br>
<br>
<!-- Triggers a login request directly to the
TestShib IdP. --><br>
<!--
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPServiceSSO">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPServiceSSO</a>
--><br>
<SSO
entityID=<a class="moz-txt-link-rfc2396E" href="https://test-idp-remi/idp/shibboleth">"https://test-idp-remi/idp/shibboleth"</a>><br>
SAML2 SAML1<br>
</SSO><br>
<br>
<!-- SAML and local-only logout. --><br>
<!--
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPServiceLogout">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPServiceLogout</a>
--><br>
<Logout>SAML2 Local</Logout><br>
<br>
<!--<br>
Handlers allow you to interact with the SP and
gather more information. Try them out!<br>
Attribute values received by the SP through SAML
will be visible at:<br>
<a class="moz-txt-link-freetext" href="http://kohaprod.inlibro.net/Shibboleth.sso/Session">http://kohaprod.inlibro.net/Shibboleth.sso/Session</a><br>
--><br>
<br>
<!-- Extension service that generates "approximate"
metadata based on SP configuration. --><br>
<Handler type="MetadataGenerator"
Location="/Metadata" signing="false"/><br>
<br>
<!-- Status reporting service. --><br>
<Handler type="Status" Location="/Status"
acl="127.0.0.1"/><br>
<br>
<!-- Session diagnostic service. --><br>
<Handler type="Session" Location="/Session"
showAttributeValues="true"/><br>
<br>
<!-- JSON feed of discovery information. --><br>
<Handler type="DiscoveryFeed"
Location="/DiscoFeed"/><br>
<br>
</Sessions><br>
<br>
<!-- Error pages to display to yourself if something goes
horribly wrong. --><br>
<Errors
supportContact=<a class="moz-txt-link-rfc2396E" href="mailto:remi.mayrand-provencher@inlibro.com">"remi.mayrand-provencher@inlibro.com"</a>
logoLocation="/shibboleth-sp/logo.jpg"<br>
styleSheet="/shibboleth-sp/main.css"/><br>
<br>
<!-- Loads and trusts a metadata file that describes only
the Testshib IdP and how to communicate with it. --><br>
<MetadataProvider type="XML"
uri=<a class="moz-txt-link-rfc2396E" href="https://test-idp-remi/idp/shibboleth">"https://test-idp-remi/idp/shibboleth"</a><br>
backingFilePath="testRemi-tshib-two-idp-metadata.xml"
reloadInterval="180000" /><br>
<br>
<!-- Attribute and trust options you shouldn't need to
change. --><br>
<AttributeExtractor type="XML" validate="true"
path="attribute-map.xml"/><br>
<AttributeResolver type="Query" subjectMatch="true"/><br>
<AttributeFilter type="XML" validate="true"
path="attribute-policy.xml"/><br>
<br>
<!-- Your SP generated these credentials. They're used
to talk to IdP's. --><br>
<CredentialResolver type="File" key="sp-key.pem"
certificate="sp-cert.pem"/><br>
<br>
</ApplicationDefaults><br>
<br>
<!-- Security policies you shouldn't change unless you know
what you're doing. --><br>
<SecurityPolicyProvider type="XML" validate="true"
path="security-policy.xml"/><br>
<br>
<!-- Low-level configuration about protocols and bindings
available for use. --><br>
<ProtocolProvider type="XML" validate="true"
reloadChanges="false" path="protocols.xml"/><br>
<br>
</SPConfig><br>
<br>
Are there any changes that I am missing if I want to test being
redirected to my idp by accessing
kohaprod.inlibro.net/Shibboleth.sso/Login?<br>
</body>
</html>