<div dir="ltr"><div><div>Kevin,<br><br></div>Thanks for looking into the metadata load possible issue. I tried to follow the list guidelines and provided all configuration files and logs. I am trying to get a workable idp-sp configuration going. Regards,<br><br></div>Dariusz<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Dec 16, 2016 at 8:56 AM, Kevin Foote <span dir="ltr"><<a href="mailto:kevin.foote@colorado.edu" target="_blank">kevin.foote@colorado.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=""><br>
> On Dec 16, 2016, at 07:42, Dariusz Dolecki <<a href="mailto:dariusz.dolecki@gmail.com">dariusz.dolecki@gmail.com</a>> wrote:<br>
><br>
> I've installed the IDP and the SP and am testing against <a href="https://sp.testshib.org/" rel="noreferrer" target="_blank">https://sp.testshib.org/</a><br>
<br>
</span>Hi Dariusz,<br>
<br>
You are testing your IdP against the TestShib SP?<br>
<span class=""><br>
> I am getting the following error message:<br>
> 2016-12-15 18:55:26 WARN Shibboleth.SessionInitiator.<wbr>SAML2 [70]: unable to locate metadata for provider (<a href="https://ec2-54-91-116-213.compute-1.amazonaws.com/idp/shibboleth" rel="noreferrer" target="_blank">https://ec2-54-91-116-213.<wbr>compute-1.amazonaws.com/idp/<wbr>shibboleth</a>)<br>
<br>
</span>This is perhaps an IdP metadata load problem on the TestShib side. I’ll check into that.<br>
<div><div class="h5"><br>
> In [root@ip-172-31-50-83 shibboleth]# tail shibd_warn.log<br>
> 2016-12-15 21:35:37 WARN Shibboleth.Application : no MetadataProvider available, configure at least one for standard SSO usage<br>
> 2016-12-15 21:48:51 WARN Shibboleth.Application : insecure cookieProps setting, set to "https" for SSL/TLS-only usage<br>
> 2016-12-15 21:48:51 WARN Shibboleth.Application : handlerSSL should be enabled for SSL/TLS-enabled web sites<br>
> 2016-12-15 21:48:51 WARN Shibboleth.Application : no MetadataProvider available, configure at least one for standard SSO usage<br>
> 2016-12-15 22:06:09 WARN Shibboleth.Application : insecure cookieProps setting, set to "https" for SSL/TLS-only usage<br>
> 2016-12-15 22:06:09 WARN Shibboleth.Application : handlerSSL should be enabled for SSL/TLS-enabled web sites<br>
> 2016-12-15 22:06:09 WARN Shibboleth.Application : no MetadataProvider available, configure at least one for standard SSO usage<br>
> 2016-12-15 23:39:21 WARN Shibboleth.Application : empty/missing cookieProps setting, set to "https" for SSL/TLS-only usage<br>
> 2016-12-15 23:39:21 WARN Shibboleth.Application : handlerSSL should be enabled for SSL/TLS-enabled web sites<br>
> 2016-12-15 23:39:21 WARN Shibboleth.AttributeExtractor.<br>
> XML : attribute mappings are reloadable; be sure to restart web server when adding new attribute IDs<br>
><br>
> shibboleth2.xml: <a href="http://pastebin.com/muJ9WJqP" rel="noreferrer" target="_blank">http://pastebin.com/muJ9WJqP</a><br>
><br>
><br>
> #cat /opt/shibboleth-idp/conf/<wbr>metadata-providers.xml<br>
> <MetadataProvider id="HTTPMetadataTESTSHIB"<br>
> xsi:type="<wbr>FileBackedHTTPMetadataProvider<wbr>"<br>
> backingFile="%{idp.home}/<wbr>metadata/testshib-providers.<wbr>xml"<br>
> metadataURL="<a href="http://www.testshib.org/metadata/testshib-providers.xml" rel="noreferrer" target="_blank">http://www.<wbr>testshib.org/metadata/<wbr>testshib-providers.xml</a>"/><br>
><br>
> [root@ip-172-31-50-83 shibboleth]# tail shibd.log<br>
> 2016-12-15 23:39:21 INFO Shibboleth.AttributeFilter : loaded XML resource (/etc/shibboleth/attribute-<wbr>policy.xml)<br>
> 2016-12-15 23:39:21 INFO Shibboleth.Application : building AttributeResolver of type Query...<br>
> 2016-12-15 23:39:21 INFO Shibboleth.Application : building CredentialResolver of type File...<br>
> 2016-12-15 23:39:21 INFO XMLTooling.SecurityHelper : loading private key from file (/etc/shibboleth/sp-key.pem)<br>
> 2016-12-15 23:39:21 INFO XMLTooling.SecurityHelper : loading certificate(s) from file (/etc/shibboleth/sp-cert.pem)<br>
> 2016-12-15 23:39:21 INFO Shibboleth.Listener : registered remoted message endpoint (default::getHeaders::<wbr>Application)<br>
> 2016-12-15 23:39:21 INFO Shibboleth.Listener : listener service starting<br>
> 2016-12-15 23:39:21 INFO Shibboleth.AttributeExtractor.<wbr>XML : reload thread started...running when signaled<br>
> 2016-12-15 23:39:21 INFO Shibboleth.AttributeFilter : reload thread started...running when signaled<br>
> 2016-12-15 23:39:21 INFO OpenSAML.MetadataProvider.XML : reload thread started...running every 180000 seconds<br>
> [root@ip-172-31-50-83 shibboleth]#<br>
<br>
</div></div>You are however, showing logs and configuration from your install of the shib-sp software.<br>
I’m confused on what you are trying to test.<br>
<br>
--------<br>
thanks<br>
<span class="HOEnZb"><font color="#888888"> kevin.foote<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a></font></span></blockquote></div><br></div>