<div dir="ltr">native.log shows this - it has the same error .<div><br></div><div><br></div><div>




<span></span>





<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Monaco;color:rgb(244,244,244);background-color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">2018-06-20 14:28:38 DEBUG Shibboleth.Apache [1251] shib_handler: mapped <a href="https://shibspdemo.test.edu/Shibboleth.sso/SAML2/POST">https://shibspdemo.test.edu/Shibboleth.sso/SAML2/POST</a> to default</span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Monaco;color:rgb(244,244,244);background-color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">2018-06-20 14:28:38 DEBUG Shibboleth.Listener [1251] shib_handler: sending message (default/SAML2/POST)</span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Monaco;color:rgb(244,244,244);background-color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">2018-06-20 14:28:38 DEBUG Shibboleth.Listener [1251] shib_handler: trying to connect to listener</span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Monaco;color:rgb(244,244,244);background-color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">2018-06-20 14:28:38 DEBUG Shibboleth.Listener [1251] shib_handler: socket (24) connected successfully</span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Monaco;color:rgb(244,244,244);background-color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">2018-06-20 14:28:38 DEBUG Shibboleth.Listener [1251] shib_handler: send completed, reading response message</span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Monaco;color:rgb(244,244,244);background-color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">2018-06-20 14:28:38 ERROR Shibboleth.Listener [1251] shib_handler: remoted message returned an error: Invalid attribute: Id</span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Monaco;color:rgb(244,244,244);background-color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">2018-06-20 14:28:38 ERROR Shibboleth.Apache [1251] shib_handler: Invalid attribute: Id</span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Monaco;color:rgb(244,244,244);background-color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">2018-06-20 14:28:38 DEBUG Shibboleth.Apache [1537] shib_handler: mapped <a href="https://shibspdemo.test.edu/shibboleth-sp/main.css">https://shibspdemo.test.edu/shibboleth-sp/main.css</a> to default</span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Monaco;color:rgb(244,244,244);background-color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">2018-06-20 14:28:38 DEBUG Shibboleth.Apache [1537] shib_handler: mapped <a href="https://shibspdemo.test.edu/shibboleth-sp/logo.jpg">https://shibspdemo.test.edu/shibboleth-sp/logo.jpg</a> to default</span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Monaco;color:rgb(244,244,244);background-color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">2018-06-20 14:28:38 DEBUG Shibboleth.Config : using local resource (/etc/shibboleth/shibboleth2.xml), will monitor for changes</span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-weight:normal;font-stretch:normal;font-size:14px;line-height:normal;font-family:Monaco;color:rgb(244,244,244);background-color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">2018-06-20 14:28:38 DEBUG Shibboleth.Config : loading configuration from external resource...</span></p>


<br></div></div><br><div class="gmail_quote"><div dir="ltr">On Wed, Jun 20, 2018 at 9:36 PM Cantor, Scott <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 6/20/18, 11:50 AM, "users on behalf of Kunal Shah" <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:ks186033@gmail.com" target="_blank">ks186033@gmail.com</a>> wrote:<br>
<br>
> I started with pointing it to testshib SP so that I can check if IDP is giving proper response. I found error. Since I didn't<br>
> have more logs, I setup shibboleth SP on my other centos server and enabled debug logs.<br>
<br>
Since you took the time to do this right and actually test with a real SP, I'll weigh in...<br>
<br>
> Didn't find much in shibd.log but ssl error log in SP's /var/log/httpd/ssl_error_log file makes these entries. <br>
<br>
Anything from mod_shib in the Apache log is just a partial subset of logs in native.log. The error is weird and I have no idea what it is, it doesn't even look like a mod_shib error despite it apparently being one, but I'd check the real log before assuming anything more.<br>
<br>
If there's nothing in shibd.log, it isn't getting far enough to start processing the SAML POST at all. That would fit there being an error in native.log, but that's not typical. Of course if the IdP is broken and sending garbage anything is possible.<br>
<br>
-- Scott<br>
<br>
<br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div>