Skip to Content.
Sympa Menu

comanage-users - Re: [comanage-users] Trouble with the Comanage Release 2 VM

Subject: COmanage Users List

List archive

Re: [comanage-users] Trouble with the Comanage Release 2 VM

Chronological Thread 
  • From: Paul Caskey <>
  • To: Jeremy Rosenberg <>, "" <>
  • Subject: Re: [comanage-users] Trouble with the Comanage Release 2 VM
  • Date: Wed, 8 Feb 2017 04:37:26 +0000
  • Accept-language: en-US
  • Authentication-results:; dkim=none (message not signed) header.d=none;; dmarc=none action=none;
  • Ironport-phdr: 9a23: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
  • Spamdiagnosticoutput: 1:0

Hi Jeremy-

The IdP is back and seems happy. It says it has loaded the right metadata
and is logging a scheduled reload in 5 minutes (as it should).

Please let us know if you have trouble.

On 2/7/17, 10:29 PM,
on behalf of Paul Caskey"
on behalf of

Hi Jeremy-

As you’ve diagnosed, this looks to be a shibb SP metadata problem.

The error at the IdP was:
2017-02-08 00:19:50,293 - INFO
[org.opensaml.saml.common.binding.impl.SAMLMetadataLookupHandler:128] -
Message Handler: No metadata returned for in
role {urn:oasis:names:tc:SAML:2.0:metadata}SPSSODescriptor with protocol

I see metadata for the entityID above, but the IDP is not reloading it
every 5 minutes as it was told to do.

This IdP is an atypical install and it’s not doing well at the moment and
I’m having trouble figuring it out (how many tomcat instances does one server
need?), so it may be flaky for a little bit tonight…


On 2/7/17, 6:46 PM,
on behalf of Jeremy Rosenberg"
on behalf of

I’m not sure if this is the place to seek support but I’m trying to
test out COmanage Registry R2 V2.

I followed all the steps at:

And the VM is running. I can bring up the UI at https://[IP

I click the Login button.

I select TIER Testbed Shibboleth IdP which has this link:


Which brings up an error page on

“Web Login Service - Unsupported Request”
“The application you have accessed is not registered for use with
this service”

This is after waiting for a long time after registering my SPs, on
several different days.

I assume I have made a mistake when registering my VM as an SP in the
testbed IDP. But I’m not sure how to debug that.

If there is somewhere else I need to go for support on adding my VM
as an SP to the testbed, please let me know.


P.S. As an aside, someone should clean up the "Configuring the
COmanage Release" page. It looks like some bullets were added, but the
references to earlier steps within the text was not updated. So now
references are confusing. For example, Step 2.r. references the certificate
output in 2.o. But the certificate output is now described in 2.q. (I kept
thinking I missed somekind of output from script)

Jeremy Rosenberg
Manager, CalNet Identity and Access Management
UC Berkeley

Archive powered by MHonArc 2.6.19.

Top of Page