<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
There is something screwy with my log file now that I'm looking it
over again. <br>
<br>
20160229T174255Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|ETAvfkI-wEW8YuADoFou._WfUBc|box.net|<a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://shibboleth.net/ns/profiles/saml2/sso/browser"><a class="moz-txt-link-freetext" href="http://shibboleth.net/ns/profiles/saml2/sso/browser">http://shibboleth.net/ns/profiles/saml2/sso/browser</a></a>|<a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="https://logintest.noctrl.edu/idp/shibboleth"><a class="moz-txt-link-freetext" href="https://logintest.noctrl.edu/idp/shibboleth">https://logintest.noctrl.edu/idp/shibboleth</a></a>|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_817d94c987361e29bb9f9d5750d3f6bd|casutton|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport||AAdzZWNyZXQxIl7AAkBipqOzRaFi2ruv/mKaluWx49H0QdvSe+D97Cm/Y2+ZCtX6fQrq+KeKL96l8NifbRbp/ZxQjHW3krEwePUcISHFcx9frC3wD6OQ|_aa4fb83994af539580ee74cc88c064e3|<br>
<br>
Should it have "box.net|<a moz-do-not-send="true"
class="moz-txt-link-freetext"
href="http://shibboleth.net/ns/profiles/saml2/sso/browser">http://shibboleth.net/ns/profiles/saml2/sso/browser</a>"
that shibboleth.net URL there? Maybe I should setup InCommon's
metadata file on this server?
<pre class="moz-signature" cols="72">Regards,
Chad Sutton - North Central College ITS
<a class="moz-txt-link-abbreviated" href="mailto:casutton@noctrl.edu">casutton@noctrl.edu</a>
630-637-5448</pre>
<div class="moz-cite-prefix">On 02/29/2016 11:52 AM, Chad Sutton
wrote:<br>
</div>
<blockquote cite="mid:56D48560.6080007@noctrl.edu" type="cite">
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
Wow thanks for all the feedback everyone!<br>
<br>
This is a good point. I'm downloading their metadatafile and it is
not using that as entityID and is different for some reason than
their InCommon version. I'm not using InCommon metadata on my test
server at this point. This is one of the things we noticed early
on that was weird, but changing it to use <a
moz-do-not-send="true" href="https://services.box.com/sp"
rel="noreferrer" target="_blank"><a class="moz-txt-link-freetext" href="https://services.box.com/sp">https://services.box.com/sp</a></a>
didn't seem to make a difference. I'll check into this again right
away though.<br>
<br>
Here is there boxmetadata-encrypted.xml file that i am using link
<a moz-do-not-send="true" class="moz-txt-link-freetext"
href="https://cloud.app.box.com/shared/static/7spo68nzg9">https://cloud.app.box.com/shared/static/7spo68nzg9</a>.
It has "box.net" set as the entityID.<br>
<br>
I did find a problem earlier in the log file with LDAP that I
fixed, but now that it is fixed, I'm still getting the same
problem. Here is my idp-proccess.log from boot through a test
login.<br>
<br>
2016-02-29 11:41:45,260 - INFO
[net.shibboleth.idp.log.LogbackLoggingService:240] - Shibboleth
IdP Version 3.2.1<br>
2016-02-29 11:41:45,267 - INFO
[net.shibboleth.idp.log.LogbackLoggingService:241] - Java
version='1.7.0_95' vendor='Oracle Corporation'<br>
2016-02-29 11:41:45,269 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:199]
- Service 'shibboleth.LoggingService': Reload time set to: 300000,
starting refresh thread<br>
2016-02-29 11:41:45,352 - INFO
[org.opensaml.core.config.InitializationService:48] - Initializing
OpenSAML using the Java Services API<br>
2016-02-29 11:41:47,532 - INFO
[org.opensaml.xmlsec.algorithm.AlgorithmRegistry:206] - Algorithm
failed runtime support check, will not be usable: <a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://www.w3.org/2009/xmlenc11#aes128-gcm"><a class="moz-txt-link-freetext" href="http://www.w3.org/2009/xmlenc11#aes128-gcm">http://www.w3.org/2009/xmlenc11#aes128-gcm</a></a><br>
2016-02-29 11:41:47,535 - INFO
[org.opensaml.xmlsec.algorithm.AlgorithmRegistry:206] - Algorithm
failed runtime support check, will not be usable: <a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://www.w3.org/2009/xmlenc11#aes192-gcm"><a class="moz-txt-link-freetext" href="http://www.w3.org/2009/xmlenc11#aes192-gcm">http://www.w3.org/2009/xmlenc11#aes192-gcm</a></a><br>
2016-02-29 11:41:47,538 - INFO
[org.opensaml.xmlsec.algorithm.AlgorithmRegistry:206] - Algorithm
failed runtime support check, will not be usable: <a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://www.w3.org/2009/xmlenc11#aes256-gcm"><a class="moz-txt-link-freetext" href="http://www.w3.org/2009/xmlenc11#aes256-gcm">http://www.w3.org/2009/xmlenc11#aes256-gcm</a></a><br>
2016-02-29 11:41:47,541 - INFO
[org.opensaml.xmlsec.algorithm.AlgorithmRegistry:206] - Algorithm
failed runtime support check, will not be usable: <a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://www.w3.org/2001/04/xmlenc#ripemd160"><a class="moz-txt-link-freetext" href="http://www.w3.org/2001/04/xmlenc#ripemd160">http://www.w3.org/2001/04/xmlenc#ripemd160</a></a><br>
2016-02-29 11:41:47,548 - INFO
[org.opensaml.xmlsec.algorithm.AlgorithmRegistry:206] - Algorithm
failed runtime support check, will not be usable: <a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://www.w3.org/2001/04/xmldsig-more#hmac-ripemd160"><a class="moz-txt-link-freetext" href="http://www.w3.org/2001/04/xmldsig-more#hmac-ripemd160">http://www.w3.org/2001/04/xmldsig-more#hmac-ripemd160</a></a><br>
2016-02-29 11:41:47,556 - INFO
[org.opensaml.xmlsec.algorithm.AlgorithmRegistry:206] - Algorithm
failed runtime support check, will not be usable: <a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://www.w3.org/2009/xmlenc11#rsa-oaep"><a class="moz-txt-link-freetext" href="http://www.w3.org/2009/xmlenc11#rsa-oaep">http://www.w3.org/2009/xmlenc11#rsa-oaep</a></a><br>
2016-02-29 11:41:47,576 - INFO
[org.opensaml.xmlsec.algorithm.AlgorithmRegistry:206] - Algorithm
failed runtime support check, will not be usable: <a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160"><a class="moz-txt-link-freetext" href="http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160">http://www.w3.org/2001/04/xmldsig-more#rsa-ripemd160</a></a><br>
2016-02-29 11:41:48,420 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:172]
- Service 'shibboleth.AttributeFilterService': Performing initial
load<br>
2016-02-29 11:41:48,424 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:258]
- Service 'shibboleth.AttributeFilterService': Reloading service
configuration<br>
2016-02-29 11:41:48,449 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/attribute-filter.xml]<br>
2016-02-29 11:41:48,675 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:577]
- Refreshing ApplicationContext:shibboleth.AttributeFilterService:
startup date [Mon Feb 29 11:41:48 CST 2016]; parent: Root
WebApplicationContext<br>
2016-02-29 11:41:48,859 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:378] -
Service 'shibboleth.AttributeFilterService': Completed reload and
swapped in latest configuration for service
'shibboleth.AttributeFilterService'<br>
2016-02-29 11:41:48,864 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:385] -
Service 'shibboleth.AttributeFilterService': Reload complete<br>
2016-02-29 11:41:48,866 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:199]
- Service 'shibboleth.AttributeFilterService': Reload time set to:
900000, starting refresh thread<br>
2016-02-29 11:41:48,907 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:172]
- Service 'shibboleth.AttributeResolverService': Performing
initial load<br>
2016-02-29 11:41:48,908 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:258]
- Service 'shibboleth.AttributeResolverService': Reloading service
configuration<br>
2016-02-29 11:41:48,921 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/attribute-resolver.xml]<br>
2016-02-29 11:41:49,242 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id:
eduPersonPrincipalName<br>
2016-02-29 11:41:49,249 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP<br>
2016-02-29 11:41:49,290 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id:
uid<br>
2016-02-29 11:41:49,297 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP<br>
2016-02-29 11:41:49,299 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id:
mail<br>
2016-02-29 11:41:49,305 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP<br>
2016-02-29 11:41:49,306 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id: sn<br>
2016-02-29 11:41:49,317 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP<br>
2016-02-29 11:41:49,318 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for AttributeDefinition plugin with id:
givenName<br>
2016-02-29 11:41:49,319 - INFO
[net.shibboleth.idp.attribute.resolver.spring.ResolverPluginDependencyParser:54]
- Parsing configuration for Dependency with pluginId: myLDAP<br>
2016-02-29 11:41:49,344 - INFO
[net.shibboleth.idp.attribute.resolver.spring.BaseResolverPluginParser:59]
- Parsing configuration for DataConnector plugin with id: myLDAP<br>
2016-02-29 11:41:49,440 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:577]
- Refreshing
ApplicationContext:shibboleth.AttributeResolverService: startup
date [Mon Feb 29 11:41:49 CST 2016]; parent: Root
WebApplicationContext<br>
2016-02-29 11:41:50,682 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:378] -
Service 'shibboleth.AttributeResolverService': Completed reload
and swapped in latest configuration for service
'shibboleth.AttributeResolverService'<br>
2016-02-29 11:41:50,688 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:385] -
Service 'shibboleth.AttributeResolverService': Reload complete<br>
2016-02-29 11:41:50,689 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:199]
- Service 'shibboleth.AttributeResolverService': Reload time set
to: 900000, starting refresh thread<br>
2016-02-29 11:41:50,717 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:172]
- Service 'shibboleth.NameIdentifierGenerationService': Performing
initial load<br>
2016-02-29 11:41:50,722 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:258]
- Service 'shibboleth.NameIdentifierGenerationService': Reloading
service configuration<br>
2016-02-29 11:41:50,733 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/saml-nameid.xml]<br>
2016-02-29 11:41:50,848 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/system/conf/saml-nameid-system.xml]<br>
2016-02-29 11:41:50,959 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:577]
- Refreshing
ApplicationContext:shibboleth.NameIdentifierGenerationService:
startup date [Mon Feb 29 11:41:50 CST 2016]; parent: Root
WebApplicationContext<br>
2016-02-29 11:41:51,382 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:378] -
Service 'shibboleth.NameIdentifierGenerationService': Completed
reload and swapped in latest configuration for service
'shibboleth.NameIdentifierGenerationService'<br>
2016-02-29 11:41:51,383 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:385] -
Service 'shibboleth.NameIdentifierGenerationService': Reload
complete<br>
2016-02-29 11:41:51,384 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:199]
- Service 'shibboleth.NameIdentifierGenerationService': Reload
time set to: 900000, starting refresh thread<br>
2016-02-29 11:41:51,402 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:172]
- Service 'shibboleth.RelyingPartyResolverService': Performing
initial load<br>
2016-02-29 11:41:51,403 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:258]
- Service 'shibboleth.RelyingPartyResolverService': Reloading
service configuration<br>
2016-02-29 11:41:51,417 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/relying-party.xml]<br>
2016-02-29 11:41:51,535 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/credentials.xml]<br>
2016-02-29 11:41:51,572 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/system/conf/relying-party-system.xml]<br>
2016-02-29 11:41:51,654 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:577]
- Refreshing
ApplicationContext:shibboleth.RelyingPartyResolverService: startup
date [Mon Feb 29 11:41:51 CST 2016]; parent: Root
WebApplicationContext<br>
2016-02-29 11:41:52,503 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:172]
- Service 'shibboleth.MetadataResolverService': Performing initial
load<br>
2016-02-29 11:41:52,504 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:258]
- Service 'shibboleth.MetadataResolverService': Reloading service
configuration<br>
2016-02-29 11:41:52,508 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/metadata-providers.xml]<br>
2016-02-29 11:41:52,673 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/system/conf/metadata-providers-system.xml]<br>
2016-02-29 11:41:52,715 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:577]
- Refreshing
ApplicationContext:shibboleth.MetadataResolverService: startup
date [Mon Feb 29 11:41:52 CST 2016]; parent: Root
WebApplicationContext<br>
2016-02-29 11:41:53,859 - INFO
[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:465]
- New metadata successfully loaded for '<a moz-do-not-send="true"
class="moz-txt-link-freetext"
href="http://www.testshib.org/metadata/testshib-providers.xml">http://www.testshib.org/metadata/testshib-providers.xml</a>'<br>
2016-02-29 11:41:53,916 - INFO
[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:306]
- Next refresh cycle for metadata provider '<a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://www.testshib.org/metadata/testshib-providers.xml"><a class="moz-txt-link-freetext" href="http://www.testshib.org/metadata/testshib-providers.xml">http://www.testshib.org/metadata/testshib-providers.xml</a></a>'
will occur on '2016-02-29T20:41:53.585Z'
('2016-02-29T14:41:53.585-06:00' local time)<br>
2016-02-29 11:41:54,002 - INFO
[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:465]
- New metadata successfully loaded for
'/opt/shibboleth-idp/metadata/boxmetadata.xml'<br>
2016-02-29 11:41:54,003 - INFO
[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:306]
- Next refresh cycle for metadata provider
'/opt/shibboleth-idp/metadata/boxmetadata.xml' will occur on
'2016-02-29T20:41:53.956Z' ('2016-02-29T14:41:53.956-06:00' local
time)<br>
2016-02-29 11:41:54,012 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:378] -
Service 'shibboleth.MetadataResolverService': Completed reload and
swapped in latest configuration for service
'shibboleth.MetadataResolverService'<br>
2016-02-29 11:41:54,013 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:385] -
Service 'shibboleth.MetadataResolverService': Reload complete<br>
2016-02-29 11:41:54,377 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:378] -
Service 'shibboleth.RelyingPartyResolverService': Completed reload
and swapped in latest configuration for service
'shibboleth.RelyingPartyResolverService'<br>
2016-02-29 11:41:54,380 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:385] -
Service 'shibboleth.RelyingPartyResolverService': Reload complete<br>
2016-02-29 11:41:54,386 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:199]
- Service 'shibboleth.RelyingPartyResolverService': Reload time
set to: 900000, starting refresh thread<br>
2016-02-29 11:41:54,412 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:172]
- Service 'shibboleth.ReloadableAccessControlService': Performing
initial load<br>
2016-02-29 11:41:54,421 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:258]
- Service 'shibboleth.ReloadableAccessControlService': Reloading
service configuration<br>
2016-02-29 11:41:54,434 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/access-control.xml]<br>
2016-02-29 11:41:54,561 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/system/conf/access-control-system.xml]<br>
2016-02-29 11:41:54,623 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:577]
- Refreshing
ApplicationContext:shibboleth.ReloadableAccessControlService:
startup date [Mon Feb 29 11:41:54 CST 2016]; parent: Root
WebApplicationContext<br>
2016-02-29 11:41:54,722 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:378] -
Service 'shibboleth.ReloadableAccessControlService': Completed
reload and swapped in latest configuration for service
'shibboleth.ReloadableAccessControlService'<br>
2016-02-29 11:41:54,728 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:385] -
Service 'shibboleth.ReloadableAccessControlService': Reload
complete<br>
2016-02-29 11:41:54,732 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:199]
- Service 'shibboleth.ReloadableAccessControlService': Reload time
set to: 300000, starting refresh thread<br>
2016-02-29 11:41:54,767 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:172]
- Service 'shibboleth.ReloadableCASServiceRegistry': Performing
initial load<br>
2016-02-29 11:41:54,776 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:258]
- Service 'shibboleth.ReloadableCASServiceRegistry': Reloading
service configuration<br>
2016-02-29 11:41:54,788 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/cas-protocol.xml]<br>
2016-02-29 11:41:54,866 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:577]
- Refreshing
ApplicationContext:shibboleth.ReloadableCASServiceRegistry:
startup date [Mon Feb 29 11:41:54 CST 2016]; parent: Root
WebApplicationContext<br>
2016-02-29 11:41:54,932 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:378] -
Service 'shibboleth.ReloadableCASServiceRegistry': Completed
reload and swapped in latest configuration for service
'shibboleth.ReloadableCASServiceRegistry'<br>
2016-02-29 11:41:54,933 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:385] -
Service 'shibboleth.ReloadableCASServiceRegistry': Reload complete<br>
2016-02-29 11:41:54,934 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:199]
- Service 'shibboleth.ReloadableCASServiceRegistry': Reload time
set to: 900000, starting refresh thread<br>
2016-02-29 11:41:55,980 - INFO
[net.shibboleth.ext.spring.context.DelimiterAwareApplicationContext:577]
- Refreshing WebApplicationContext for namespace 'idp-servlet':
startup date [Mon Feb 29 11:41:55 CST 2016]; parent: Root
WebApplicationContext<br>
2016-02-29 11:41:58,015 - INFO
[net.shibboleth.idp.authn.impl.RemoteUserAuthServlet:193] -
RemoteUserAuthServlet will process REMOTE_USER, along with
attributes [] and headers []<br>
2016-02-29 11:42:51,508 - INFO
[org.ldaptive.auth.Authenticator:259] - Authentication succeeded
for dn: cn=casutton,ou=Admstr,ou=Napvil,o=NCC<br>
2016-02-29 11:42:51,512 - INFO
[net.shibboleth.idp.authn.impl.ValidateUsernamePasswordAgainstLDAP:139]
- Profile Action ValidateUsernamePasswordAgainstLDAP: Login by
'casutton' succeeded<br>
2016-02-29 11:42:55,191 - INFO [Shibboleth-Audit.SSO:241] -
20160229T174255Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|ETAvfkI-wEW8YuADoFou._WfUBc|box.net|<a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://shibboleth.net/ns/profiles/saml2/sso/browser"><a class="moz-txt-link-freetext" href="http://shibboleth.net/ns/profiles/saml2/sso/browser">http://shibboleth.net/ns/profiles/saml2/sso/browser</a></a>|<a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="https://logintest.noctrl.edu/idp/shibboleth"><a class="moz-txt-link-freetext" href="https://logintest.noctrl.edu/idp/shibboleth">https://logintest.noctrl.edu/idp/shibboleth</a></a>|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_817d94c987361e29bb9f9d5750d3f6bd|casutton|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport||AAdzZWNyZXQxIl7AAkBipqOzRaFi2ruv/mKaluWx49H0QdvSe+D97Cm/Y2+ZCtX6fQrq+KeKL96l8NifbRbp/ZxQjHW3krEwePUcISHFcx9frC3wD6OQ|_aa4fb83994af539580ee74cc88c064e3|<br>
<br>
<br>
<br>
<br>
<pre class="moz-signature" cols="72">Regards,
Chad Sutton - North Central College ITS
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:casutton@noctrl.edu">casutton@noctrl.edu</a>
630-637-5448</pre>
<div class="moz-cite-prefix">On 02/29/2016 10:38 AM, Rob Gorrell
wrote:<br>
</div>
<blockquote
cite="mid:CAOE6PzxDVpfgVACM40bDE9iHxsd_Z+490h6=sYHQthieeHUagg@mail.gmail.com"
type="cite">
<div dir="ltr">
<div>Is your filter matching the Box SP? The
AttributeRequesterString value we match against is "<a
moz-do-not-send="true" href="http://box.net">box.net</a>"
but you have "<a moz-do-not-send="true"
href="https://services.box.com/sp" rel="noreferrer"
target="_blank">https://services.box.com/sp</a>". <br>
<br>
Looking at your audit trace...<br>
<span tabindex="0" class=""><span class="">016-02-29</span></span>
08:40:02,513 - INFO [Shibboleth-Audit.SSO:241] -
20160229T144002Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|aTaVxkNsrMagR4Tsw3dkh5l-TGR<span
style="color:rgb(255,0,0)">|<b><a moz-do-not-send="true"
href="http://box.net">box.net</a></b></span>|<a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://shibboleth.net/ns/profiles/saml2/sso/browser"><a class="moz-txt-link-freetext" href="http://shibboleth.net/ns/profiles/saml2/sso/browser">http://shibboleth.net/ns/profiles/saml2/sso/browser</a></a>|<a
moz-do-not-send="true" class="moz-txt-link-freetext"
href="https://logintest.noctrl.edu/idp/shibboleth"><a class="moz-txt-link-freetext" href="https://logintest.noctrl.edu/idp/shibboleth">https://logintest.noctrl.edu/idp/shibboleth</a></a>|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_f3849b289760d44449f9bfe62d6f459e|casutton|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport||AAdzZWNyZXQxxxKquNVPpR5LnofTIk0ea6li7WEdmUEbq73t1trVyy0qmhwrpQqqRs93c3KvN2CKOCYhfPgpkI+m6tk9A3s0lgwRsyjjyWfzgPj5TKvI|_12beaf680eaf737d7b4d9ef639e27a4f|<br>
<br>
<br>
</div>
-Rob<br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Feb 29, 2016 at 11:21 AM, Rod
Widdowson <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:rdw@steadingsoftware.com" target="_blank">rdw@steadingsoftware.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex"><span
class="">> 2016-02-29 08:40:00,327 - ERROR<br>
>
[net.shibboleth.idp.profile.impl.ResolveAttributes:240]
- Profile Action<br>
> ResolveAttributes: Error resolving attributes:
Invalid Attribute<br>
> resolver configuration<br>
<br>
</span><span class="">> I'm assuming that this is a
problem with my attribute-filter.xml file?<br>
<br>
</span>No, with your attribute-resolver file.<br>
<br>
Look earlier in the log (like when tomcat starts) and
you'll get more info.<br>
<span class="HOEnZb"><font color="#888888"><br>
Rod<br>
</font></span>
<div class="HOEnZb">
<div class="h5"><br>
--<br>
To unsubscribe from this list send an email to <a
moz-do-not-send="true"
class="moz-txt-link-abbreviated"
href="mailto:users-unsubscribe@shibboleth.net"><a class="moz-txt-link-abbreviated" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a></a><br>
</div>
</div>
</blockquote>
</div>
<br>
<br clear="all">
<br>
-- <br>
<div class="gmail_signature">
<div dir="ltr">
<div>Robert W. Gorrell<br>
Systems Architect, Identity and Access Management </div>
<div>University of NC at Greensboro<br>
<span style="white-space:nowrap">336-334-5954</span><br>
PGP Key ID B36DB0CA<br>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
</body>
</html>