Shibboleth Users

Text archives Help

RE: Shibboleth errors differ on SSL/non-SSL.

Chronological Thread 
  • From: Nathan Dors < >
  • To: Scott Cantor < >
  • Cc: ,
  • Subject: RE: Shibboleth errors differ on SSL/non-SSL.
  • Date: Mon, 28 Feb 2005 09:06:54 -0800 (PST)

In cases like this, would you recommend ignoring the SSL case until the non-SSL case has been fixed?


On Mon, 28 Feb 2005, Scott Cantor wrote:

For starters, you're using the wrong log, the shire log is not generally
useful for anything except very esoteric problems or problems with the
RequestMap process.

The first error is an IdP blocking you because the SP's metadata is wrong.
The assertion consumer service URL has to be published in the metadata
loaded into the IdP, and apparently it's not. Probably only the SSL URL is
published, so it's (correctly) blocking you.

In the SSL case, anything could be happening, but it's a configuration
failure and the shar service is undoubtedly failing to process the new
session, which the log will indicate.

-- Scott

Archive powered by MHonArc 2.6.16.

Top of page