Skip to Content.
Sympa Menu

shibboleth-dev - Re: shib origin 1.0 sso assertion error

Subject: Shibboleth Developers

List archive

Re: shib origin 1.0 sso assertion error


Chronological Thread 
  • From: Derek Atkins <>
  • To: Ryan Muldoon <>
  • Cc: "RL 'Bob' Morgan" <>, Shibboleth Design Team <>
  • Subject: Re: shib origin 1.0 sso assertion error
  • Date: 10 Jun 2003 14:08:02 -0400

Well, the 1.0 target can be configured to accept with 1.0 or 0.8
origins.. However there hasn't been a good deal of thought put into
how to name URLs for different versions.

-derek

Ryan Muldoon
<>
writes:

> Wasn't sure which list to use...sorry about that.
> Can anyone point me to a 1.0 target? I have only set up the origin side
> of things so I don't have a target to test against. I realized that I
> was trying the sample target which is version 0.8.
>
> Has there been any consideration to how to handle version mismatches in
> the future? Like a policy on versioning URLs?
>
> --Ryan
>
> On Tue, 2003-06-10 at 12:47, RL 'Bob' Morgan wrote:
> > Probably best not to do 1.0 traffic on -users, since it's not release yet
> > ... 8^)
> >
> > There should be shibboleth.ini in /opt/shibboleth/etc/shibboleth. You
> > need to configure it with your target info ... The AAP policy is in
> > AAP.xml, which is in that same directory.
> >
> > - RL "Bob"
> >
> > On 10 Jun 2003, Ryan Muldoon wrote:
> >
> > > I am close to having a 1.0 origin working, but I have run into a SSO
> > > Assertion error from the SHIRE. My understanding is that this is
> > > because of the lack of a valid AAP policy set in my shibboleth.ini.
> > > However, it seems that I don't have a shibboleth.ini file anywhere on
> > > the computer. Could someone point me in the right direction for
> > > creating a shibboleth.ini file that would set a valid AAP policy?
> > > Thanks!
> > >
> > > --Ryan
> > >
> > > -------------------------------------------------------mace-shib-users-+
> > > For list utilities, archives, subscribe, unsubscribe, etc. please visit
> > > the
> > > ListProc web interface at
> > >
> > > http://archives.internet2.edu/
> > >
> > > -------------------------------------------------------mace-shib-users--
> > >
> > >
> >
>
>

--
Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
Member, MIT Student Information Processing Board (SIPB)
URL: http://web.mit.edu/warlord/ PP-ASEL-IA N1NWH


PGP key available

------------------------------------------------------mace-shib-design-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at

http://archives.internet2.edu/

------------------------------------------------------mace-shib-design--




Archive powered by MHonArc 2.6.16.

Top of Page