Shibboleth Developers

["Scott Cantor" <>]

> We are using the exact same configuration from a working 
> Linux target, so we don't believe it is a configuration issue.

Does that target successfully find metadata about a urn:mace:incommon IdP
when you interact with the IdP in question?

> A valid-looking SAML response gets written to shibd.log before we see the
> errors above. We suspect that the XML data from the metadata file are not
> read correctly or corrupt, and the lookups of the issuer
> urn:mace:incommon:ohio.edu consequently fail.

So you have a metadata file supplied with an EntityDescriptor with
entityID="urn:mace:incommon:ohio.edu"?

> Questions:
> - could there be incompatibilities related to 64bit vs. 32bit 
> compilation modes?

I have no experience with 64 bit anything.

> - are there class methods that dump the parsed metadata?

No, but you could add log messages to the code that's loading the entities
and storing them in the site map.

> - does metadata lookup take place in mod_shib or in shibd? We 
> would like to debug the code spanning from Metadata.cpp.

Both, but shibd is responsible initially.

-- Scott