[Shib-Users] FatalProfileException

[sai_...@ymail.com]

Hi Nate Team,

I successfully install and using UK federation to login to applications through institute logins from our application using SP(Service Provider).

Now we are having one error for specific institute login of
"Warwickshire College " IDP

Error Description:
--------------------------------------------------------------------------------
The system encountered an error at Wed May 12 02:54:21 2010

To report this problem, please contact the site administrator at (hidden mail id)

Please include the following message in any email:

opensaml::FatalProfileException at (https://sso-ed.datamonitor.com/Shibboleth.sso/SAML2/POST)

Unable to establish security of incoming assertion.

--------------------------------------------------------------------------------

We are able to login to application throught other institutes.

Details of shibd.log file :
--------------------------------------------------------------------------------
2010-05-12 02:16:06 INFO OpenSAML.MetadataProvider.XML [1]: change detected, reloading local resource...

2010-05-12 02:16:07 INFO OpenSAML.MetadataProvider.XML [1]: loaded XML resource (M:/shibboleth/shibboleth-sp/etc/shibboleth/ukfederation-metadata.xml)

2010-05-12 02:18:47 WARN OpenSAML.MessageDecoder.SAML2 [1]: no metadata found, can't establish identity of issuer (https://idp.warkscol.ac.uk/shibboleth)

2010-05-12 02:18:47 WARN Shibboleth.SSO.SAML2 [1]: no metadata found, can't establish identity of issuer (https://idp.warkscol.ac.uk/shibboleth)

2010-05-12 02:18:47 WARN Shibboleth.SSO.SAML2 [1]: detected a problem with assertion: Unable to establish security of incoming assertion.
--------------------------------------------------------------------------------

So here i am not able to find the problem of this error?

Can Anyone help me in this?


Thanks & Regards
Sai

[Peter Schober]

* sai_...@ymail.com <sai_...@ymail.com> [2010-05-12 11:11]:

> 2010-05-12 02:16:06 INFO OpenSAML.MetadataProvider.XML [1]: change detected, reloading local resource...
>
> 2010-05-12 02:16:07 INFO OpenSAML.MetadataProvider.XML [1]: loaded XML resource (M:/shibboleth/shibboleth-sp/etc/shibboleth/ukfederation-metadata.xml)
>
> 2010-05-12 02:18:47 WARN OpenSAML.MessageDecoder.SAML2 [1]: no metadata found, can't establish identity of issuer (https://idp.warkscol.ac.uk/shibboleth)
>
> 2010-05-12 02:18:47 WARN Shibboleth.SSO.SAML2 [1]: no metadata found, can't establish identity of issuer (https://idp.warkscol.ac.uk/shibboleth)
>
> 2010-05-12 02:18:47 WARN Shibboleth.SSO.SAML2 [1]: detected a problem with assertion: Unable to establish security of incoming assertion.

Why would you have a local resource for the UK Federation metadata?
Anyway, does your copy of the metadata have an entry for
https://idp.warkscol.ac.uk/shibboleth ?
The one available online certainly does (ID="uk000999").

> Can Anyone help me in this?

I guess you should ask this at the UK Federation helpdesk or mailing
list.
http://www.ukfederation.org.uk/content/Documents/FedSupport
http://www.ukfederation.org.uk/content/Documents/MailingLists
cheers,
-peter