<div dir="ltr">On further research I found that this error is actually coming from /var/log/httpd/ssl_error_log<div><br></div><div>[Wed Jun 20 14:28:38.091829 2018] [mod_shib:error] [pid 1251] [client <a href="http://123.201.54.30:18945">123.201.54.30:18945</a>] Invalid attribute: Id, referer: <a href="https://cassoidp.shaku08.edu/affwebservices/public/saml2sso?SMASSERTIONREF=QUERY&SAMLRequest=fZJNU4MwFEX%2FCpN9CY1SSqYwg%2B3CzlTt2OrCjRPgVTJCgrzE6r83gB910204uTf3DAsUTd3yzJpK3cObBTTeR1Mr5MOHhNhOcS1QIleiAeSm4LvsZsOZH%2FC200YXuiZehgidkVottULbQLeD7l0W8HC%2FSUhlTIucUqxkjm0JjfaN6%2FGhtHTnznJdg6l8RE37aEa3d7s98VaOkUr0qX8ZhXCYLFsfK%2FFqg%2FkQIg6HI%2BQ4ViJtbV7LgvYDmKOJt14l5DkI4%2FhChBDnRRjF85AFBYSHQySiGYvzMHIYooW1QiOUSQgLpvNJMJuwYD%2B95Czi4fyJeNvvyVdSlVK9nPeTjxDy6%2F1%2BOxlXPUKHwyIHkHTRP5IPxd2J9%2FOx4kc2SU%2FVDmJPteCv2wU96RlLW37rgterrXauPr2srvVx2YEwkJApoel45f%2BfkX4B&RelayState=ss%3Amem%3A531967b93ad043fd65b381dc9f4dbf64562e71e1fa30a29efcad90074d7c0a1b&SAMLTRANSACTIONID=23fc9d12-a96163d2-1ebf1443-77008b54-13086b4d-ee8">https://cassoidp.shaku08.edu/affwebservices/public/saml2sso?SMASSERTIONREF=QUERY&SAMLRequest=fZJNU4MwFEX%2FCpN9CY1SSqYwg%2B3CzlTt2OrCjRPgVTJCgrzE6r83gB910204uTf3DAsUTd3yzJpK3cObBTTeR1Mr5MOHhNhOcS1QIleiAeSm4LvsZsOZH%2FC200YXuiZehgidkVottULbQLeD7l0W8HC%2FSUhlTIucUqxkjm0JjfaN6%2FGhtHTnznJdg6l8RE37aEa3d7s98VaOkUr0qX8ZhXCYLFsfK%2FFqg%2FkQIg6HI%2BQ4ViJtbV7LgvYDmKOJt14l5DkI4%2FhChBDnRRjF85AFBYSHQySiGYvzMHIYooW1QiOUSQgLpvNJMJuwYD%2B95Czi4fyJeNvvyVdSlVK9nPeTjxDy6%2F1%2BOxlXPUKHwyIHkHTRP5IPxd2J9%2FOx4kc2SU%2FVDmJPteCv2wU96RlLW37rgterrXauPr2srvVx2YEwkJApoel45f%2BfkX4B&RelayState=ss%3Amem%3A531967b93ad043fd65b381dc9f4dbf64562e71e1fa30a29efcad90074d7c0a1b&SAMLTRANSACTIONID=23fc9d12-a96163d2-1ebf1443-77008b54-13086b4d-ee8</a></div><div><br></div><div>does this make sense? something to do with cert ?</div><div><br></div><div>I have converted using dos2unix and reuploaded and error persists.<br><div><br></div><div><br><div><br></div></div></div></div><br><div class="gmail_quote"><div dir="ltr">On Wed, Jun 20, 2018 at 3:07 PM Kunal Shah <<a href="mailto:ks186033@gmail.com">ks186033@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi Rod,<div><br></div><div>Thanks for your help. I will check each step by step. </div><div><br></div><div>I am using CA Single Sign On policy server as IDP. To test that IDP I use testshib's SP. it is at SP I get this error. </div><div><br></div><div>My IDP guys are saying once SAML leaves IDP, only SP can tell what is wrong with it and if it can be fixed at IDP side, it will be fixed. But only SP can say why it is not accepting SAML. </div><div><br></div><div>Thanks</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Jun 20, 2018 at 2:34 PM, Rod Widdowson <span dir="ltr"><<a href="mailto:rdw@steadingsoftware.com" target="_blank">rdw@steadingsoftware.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Kunai,<br>
I'm sorry, but have a busy day ahead and I (like all the Shibboleth developers) am not paid to answer mail here. You will need to reply on the generosity of other but<br>
<span><br>
> xmltooling::UnmarshallingException at (<a href="https://www.testshib.org/Shibboleth.sso/SAML2/POST" rel="noreferrer" target="_blank">https://www.testshib.org/Shibboleth.sso/SAML2/POST</a>)<br>
<br>
</span>It seems unlikely to the level of impossibility that this doesn't log anything so it may be to do with testshib. <br>
<br>
> Invalid attribute: Id<br>
<br>
On your side I'd look for bogosity introduced into the SAML pushed to the SP. In particular an attribute called Id<br>
<br>
Also can I confirm that you are testing a Shibboleth SP pushing SAML to the SP?  <br>
<br>
> (<a href="https://www.ca.com/us/products/ca-single-sign-on.html" rel="noreferrer" target="_blank">https://www.ca.com/us/products/ca-single-sign-on.html</a><br>
<br>
Doesn't sound very Shibboleth to me.<br>
<div class="m_3622988357396860899HOEnZb"><div class="m_3622988357396860899h5"><br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>
</blockquote></div>