<div dir="ltr"><div><div><div>Actually now starting lighttpd and shibresponder in a socket (like this <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPFastCGIConfig">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPFastCGIConfig</a>), and sending a POST into that socket still gives<br>"opensamlBindingException at (<a href="http://localhost/">http://localhost/</a><wbr>Shibboleth.sso/SAML2/POST)<br>SAML message delivered with POST to incorrect server URL."<br><br></div>Even though with lighttpd running <a href="http://localhost/">http://localhost/</a><wbr>Shibboleth.sso/SAML2/POST is a valid URL (accessing it through browser gives 'Invalid HTTP method (GET)' as it should).<br></div>Generating metadata, '<a href="http://localhost/">http://localhost/</a><wbr>Shibboleth.sso/SAML2/POST' is shown as the ACS url for http-post binding..<br><br></div>So I guess new question is, if '<a href="http://localhost/">http://localhost/</a><wbr>Shibboleth.sso/SAML2/POST' is the incorrect url, where is it trying to send assertions / where should it send them to?<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Dec 28, 2016 at 12:02 PM, Br LRd <span dir="ltr"><<a href="mailto:blasterradius@gmail.com" target="_blank">blasterradius@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div>Average use case: You use Apache + modshib, depending on apache and shib settings your URL to stuff like login etc would be something like '<a href="http://localhost/Shibboleth.sso/" target="_blank">http://localhost/Shibboleth.<wbr>sso/</a><handler>'.<br><br></div>What I'm doing: Running only shibd daemon on my machine, start shibresponder binary listening on a socket, for example with spawn-fcgi <br>'spawn-fcgi -f /usr/lib/x86_64-linux-gnu/<wbr>shibboleth/shibresponder -s /tmp/shib.sock'.<br></div><br></div>When I send HTTP requests into /tmp/shib.sock, it works, except for when I try to send a POST<br></div>with valid samlrequest parameter into /Shibboleth.sso/SAML2/POST, I get:<br><br>opensaml::<wbr>BindingException at (http://localhost/<wbr>Shibboleth.sso/SAML2/POST)<br>SAML message delivered with POST to incorrect server URL<br><br><div><div><div>Shibresponder requires a serverName and serverPort values, which I had randomly set to localhost and 80, so that's why it gives that URL in the bindingexception. <br></div><div>It looks like the error is because it tries to send the assertion to that URL but since I'm not running a server, there's nothing at that address.<br><br></div><div>What I'm confused about is that when I send a GET request to /Shibboleth.sso/Login, it works and returns HTTP response containing a 302 URL. Why wouldn't the POST work?<br></div><div><br></div><div>What should serverAddress and serverPort values be when I'm not running a local server but only have shibresponder listening on a socket, i.e can i make it send the assertions also into the socket, because sending HTTP requests there works? <br></div></div></div></div>
</blockquote></div><br></div>