<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<div>On ons, 2016-03-02 at 18:05 +0000, Marvin Addison wrote:</div>
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_quote">
<div dir="ltr">On Wed, Mar 2, 2016 at 12:28 PM John Morrison <<a href="mailto:john.morrison@uadm.uu.se">john.morrison@uadm.uu.se</a>> wrote:<br>
</div>
<blockquote type="cite">Where is this 127.0.1.1 coming from and then trying <a href="http://www.apereo.org" rel="noreferrer" target="_blank">
www.apereo.org</a>?<br>
</blockquote>
<div><br>
</div>
<div>That's simply a profile URI that happens to be an HTTPS URL. No connections are made to anything at
<a href="http://apereo.org">apereo.org</a>. I may need to document that because it's a point of confusion that has come up before.</div>
</div>
</div>
</blockquote>
<div>OK, thanks</div>
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_quote">
<div> </div>
<blockquote type="cite">[net.shibboleth.idp.cas.flow.impl.BuildRelyingPartyContextAction:84] -<br>
Setting up RP context for unverified relying party<br>
<a href="https://127.0.1.1/cas/" rel="noreferrer" target="_blank">https://127.0.1.1/cas/</a><br>
2016-03-02 18:19:36,050 - DEBUG<br>
[net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:293] - Resolving relying party configuration<br>
2016-03-02 18:19:36,050 - DEBUG<br>
[net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:299] - Profile request is unverified, returning configuration shibboleth.UnverifiedRelyingParty<br>
</blockquote>
<div><br>
</div>
<div>That's the problem. You're testing a CAS client on the loopback address, and it's not registered in cas-protocol.xml. Because no matching service is found, it's using the "unverified" relying party configuration which does not have CAS protocol support
configured by default.</div>
</div>
</div>
</blockquote>
<div><br>
</div>
<div>Yes, sorry, I overlooked this, it was to do with my miss-configured apache host! :)</div>
<div><br>
</div>
<div>Is there a better way to have some sort of registration of a cas client, like we do with metadata rather than a simple regex access control?</div>
<div><br>
</div>
<div>Cheers, John</div>
<div><br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_quote">
<div><br>
</div>
</div>
</div>
</blockquote>
<blockquote type="cite">
<div dir="ltr">
<div class="gmail_quote">
<div><br>
</div>
<div>M<a href="mailto:users-unsubscribe@shibboleth.net" target="_blank"></a><br>
</div>
<div><br>
</div>
</div>
</div>
<pre>--
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a></pre>
</blockquote>
</body>
</html>