<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Tabitha,
<div class=""><br class="">
</div>
<div class="">I think there are meaningful known vulnerabilities in both of those versions, so I think you’ll be asked to upgrade and the scope of support will be limited, but this one isn’t very mysterious.</div>
<div class=""><br class="">
</div>
<div class="">The ACS URL requested in the AuthnRequest doesn’t match any known valid recipient in metadata.</div>
<div class=""><br class="">
</div>
<div class="">You can look at the AuthnRequest value and you can look at their metadata. They don’t match for some reason.</div>
<div class=""><br class="">
</div>
<div class="">If this changed in the update, I would suspect either that you had a very old copy of metadata that did work with the AuthnRequest or you accidentally just patched a security vulnerability. Either explanation would leave me nervous, but you will
be able to resolve this by identifying the discrepency and “fixing” the values to be the right, matching ones.</div>
<div class=""><br class="">
</div>
<div class="">Take care,</div>
<div class="">Nate.</div>
<div class=""><br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Mar 1, 2016, at 12:36, Tabitha O. Locklear <<a href="mailto:tabithao.locklear@uncp.edu" class="">tabithao.locklear@uncp.edu</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="WordSection1" style="page: WordSection1; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<span style="font-size: 12pt; font-family: Garamond, serif;" class="">We recently performed an update to our shibboleth system from 2.0 to 2.3. After the update we are no longer able to authenticate to one of our SP. I have checked the metadata file to make
sure that it is being read. I removed it and did a wget to retrieve the latest.<o:p class=""></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<span style="font-size: 12pt; font-family: Garamond, serif;" class=""> </span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<span style="font-size: 12pt; font-family: Garamond, serif;" class="">The Log file reads:<o:p class=""></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<span style="font-size: 12pt; font-family: Garamond, serif;" class="">10:25:26.448 - WARN [org.opensaml.saml2.binding.AuthnResponseEndpointSelector:206] - Relying party '<a href="https://uncp-stg.saasit.com/'" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">https://uncp-stg.saasit.com/'</a><span class="Apple-converted-space"> </span>requested
the response to be returned to endpoint with ACS URL '<a href="https://uncp-stg.saasit.com/handlers/sso/SamlAssertionConsumerHandler.ashx'" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">https://uncp-stg.saasit.com/handlers/sso/SamlAssertionConsumerHandler.ashx'</a>
and binding 'urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST' however no endpoint, with that URL and using a supported binding, can be found in the relying party's metadata<o:p class=""></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<span style="font-size: 12pt; font-family: Garamond, serif;" class="">10:25:26.449 - ERROR [edu.internet2.middleware.shibboleth.idp.profile.AbstractSAMLProfileHandler:429] - No return endpoint available for relying party<span class="Apple-converted-space"> </span><a href="https://uncp-stg.saasit.com/" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">https://uncp-stg.saasit.com/</a><o:p class=""></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<span style="font-size: 12pt; font-family: Garamond, serif;" class="">10:25:28.012 - INFO [Shibboleth-Access:74] - 20160301T152528Z|152.21.2.152|<a href="http://dev.idp.uncp.edu/" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">dev.idp.uncp.edu</a>:443|/profile/SAML2/Redirect/SSO|<o:p class=""></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<span style="font-size: 12pt; font-family: Garamond, serif;" class="">10:25:28.012 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:86] - shibboleth.HandlerManager: Looking up profile handler for request path: /SAML2/Redirect/SSO<o:p class=""></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<span style="font-size: 12pt; font-family: Garamond, serif;" class="">10:25:28.013 - DEBUG [edu.internet2.middleware.shibboleth.idp.profile.IdPProfileHandlerManager:97] - shibboleth.HandlerManager: Located profile handler of the following type for the request
path: edu.internet2.middleware.shibboleth.idp.profile.saml2.SSOProfileHandler<o:p class=""></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<span style="font-size: 12pt; font-family: Garamond, serif;" class=""> </span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<b class=""><span style="font-family: 'Bradley Hand ITC'; color: rgb(91, 155, 213);" class="">Tabitha O. Locklear<o:p class=""></o:p></span></b></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<b class=""><span style="font-family: 'Bradley Hand ITC'; color: rgb(91, 155, 213);" class="">MS Information Technology<o:p class=""></o:p></span></b></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<b class=""><span style="font-family: 'Bradley Hand ITC'; color: rgb(91, 155, 213);" class="">Operations & Systems Analyst<o:p class=""></o:p></span></b></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<b class=""><span style="font-family: 'Bradley Hand ITC'; color: rgb(91, 155, 213);" class="">Division of Information Technology<o:p class=""></o:p></span></b></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<b class=""><span style="font-family: 'Bradley Hand ITC'; color: rgb(91, 155, 213);" class="">University of North Carolina at Pembroke<o:p class=""></o:p></span></b></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<b class=""><span style="font-family: 'Bradley Hand ITC'; color: rgb(91, 155, 213);" class=""><a href="mailto:tabithao.locklear@uncp.edu" style="color: rgb(149, 79, 114); text-decoration: underline;" class="">tabithao.locklear@uncp.edu</a><o:p class=""></o:p></span></b></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<b class=""><span style="font-family: 'Bradley Hand ITC'; color: rgb(91, 155, 213);" class="">Office : 910-775-4039<o:p class=""></o:p></span></b></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<b class=""><span style="font-family: 'Bradley Hand ITC'; color: rgb(91, 155, 213);" class="">Fax : 910-521-6649</span></b><span style="font-family: 'Bradley Hand ITC'; color: rgb(91, 155, 213);" class=""><o:p class=""></o:p></span></div>
<div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">
<o:p class=""> </o:p></div>
</div>
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">--<span class="Apple-converted-space"> </span></span><br style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">To
unsubscribe from this list send an email to<span class="Apple-converted-space"> </span></span><a href="mailto:users-unsubscribe@shibboleth.net" style="color: rgb(149, 79, 114); text-decoration: underline; font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">users-unsubscribe@shibboleth.net</a></div>
</blockquote>
</div>
<br class="">
</div>
</body>
</html>