This error:

Please include the following error message in any email:

Identity provider lookup failed at (http://sp.machine/secure)

EntityID: https://idp.machine/idp/shibboleth

opensaml::saml2md::MetadataException: Unable to locate metadata for identity provider (https://idp.machine/idp/shibboleth)

arises because the default config in

/opt/shibboleth-idp-2.0.0/metadata/idp-metadata.xml

uses a different machine name in the entityID attribute from the "idp.machine" used elsewhere in the example.

Fixed that, now onto a ssh error...

T

Labels: config, shibboleth

- posted by Tim Bruce @ 3:56 PM