<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body dir="auto">
<div>Hang on Steve I'll take a look.<br>
<br>
- sent from mobile</div>
<div><br>
On Jul 27, 2016, at 12:47 PM, Steve Sirag <<a href="mailto:ssirag@eresources.com">ssirag@eresources.com</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">I’m setting up a Shibboleth 2.6 win64 test config on a new Windows 2012 R2 server. I’ve installed the Windows IIS6 compatibility components and all prerequisites stated in this document:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="text-indent:.5in"><b><a href="https://doit.missouri.edu/wp-content/uploads/2014/09/WindowsGuide.pdf">https://doit.missouri.edu/wp-content/uploads/2014/09/WindowsGuide.pdf</a><o:p></o:p></b></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m getting a 500 error on the return page after successfully authenticating with the TestShib IdP, containing this error:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="text-indent:.5in"><b>opensaml::FatalProfileException at (<a href="https://testshib.eresources.com/Shibboleth.sso/SAML2/POST">https://testshib.eresources.com/Shibboleth.sso/SAML2/POST</a>)<o:p></o:p></b></p>
<p class="MsoNormal" style="text-indent:.5in"><b>A valid authentication statement was not found in the incoming message.</b><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">In the shibd.log file, I see this error:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="text-indent:.5in"><b>ERROR Shibboleth.SSO.SAML2 [1]: failed to decrypt assertion: Unable to resolve any key decryption keys.<o:p></o:p></b></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’ve uninstalled/reinstalled Shibboleth, re-uploaded Metadata, and checked the sp-cert.pem to make sure the public key matches my Metadata file.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">My key Shibboleth2.xml configs specific to the test site are as follows:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><InProcess logger="native.logger"><o:p></o:p></p>
<p class="MsoNormal"> <ISAPI normalizeRequest="true" safeHeaderNames="true"><o:p></o:p></p>
<p class="MsoNormal"> <Site id="3" name="<a href="http://testshib.eresources.com">testshib.eresources.com</a>" scheme="https" port="443"/><o:p></o:p></p>
<p class="MsoNormal"> </ISAPI><o:p></o:p></p>
<p class="MsoNormal"></InProcess><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><RequestMapper type="Native"><o:p></o:p></p>
<p class="MsoNormal"> <RequestMap><o:p></o:p></p>
<p class="MsoNormal"> <Host name="<a href="http://testshib.eresources.com">testshib.eresources.com</a>" applicationId="testshib"><o:p></o:p></p>
<p class="MsoNormal"> <Path name="secure" authType="shibboleth" requireSession="true"/><o:p></o:p></p>
<p class="MsoNormal"> </Host><o:p></o:p></p>
<p class="MsoNormal"> </RequestMap><o:p></o:p></p>
<p class="MsoNormal"></RequestMapper><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><ApplicationOverride id="testshib" entityID="<a href="http://testshib.eresources.com/shibboleth-sp">http://testshib.eresources.com/shibboleth-sp</a>"><o:p></o:p></p>
<p class="MsoNormal" style="text-indent:.5in"><Sessions lifetime="28800" timeout="3600" checkAddress="false" relayState="ss:mem" handlerSSL="false"><o:p></o:p></p>
<p class="MsoNormal"> <SSO entityID="<a href="https://idp.testshib.org/idp/shibboleth">https://idp.testshib.org/idp/shibboleth</a>"><o:p></o:p></p>
<p class="MsoNormal"> SAML2 SAML1<o:p></o:p></p>
<p class="MsoNormal"> </SSO><o:p></o:p></p>
<p class="MsoNormal"> </Sessions><o:p></o:p></p>
<p class="MsoNormal" style="text-indent:.5in"><MetadataProvider type="XML" uri="<a href="http://www.testshib.org/metadata/testshib-providers.xml">http://www.testshib.org/metadata/testshib-providers.xml</a>" backingFilePath="testshib-two-idp-metadata.xml" legacyOrgNames="true"
reloadInterval="180000"/><o:p></o:p></p>
<p class="MsoNormal"></ApplicationOverride><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">This works on another identical server, but doesn’t work on this one.<o:p></o:p></p>
<p class="MsoNormal">What am I missing?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Regards,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:14.0pt;font-family:"Arial","sans-serif";color:#F15623">Steve</span><span style="font-size:14.0pt;font-family:"Arial","sans-serif""> Sirag<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b><span style="color:#F15623">e</span></b><b>Resources<o:p></o:p></b></p>
<p class="MsoNormal">O: <span style="background:white">800-297-8293</span><span style="font-size:11.5pt;font-family:"Arial","sans-serif";color:#3D3C40;background:white">
</span>x7034<o:p></o:p></p>
<p class="MsoNormal">C: 703-608-8127<o:p></o:p></p>
<p class="MsoNormal"><a href="http://eresources.com">eresources.com</a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</blockquote>
<blockquote type="cite">
<div><span>-- </span><br>
<span>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">
users-unsubscribe@shibboleth.net</a></span></div>
</blockquote>
</body>
</html>