Re: Need help with Shibboleth2 SP installation

[Peter Schober]

The Shibboleth users list is where support requests to the commmunity
should be sent to. If you're instead looking for a commercial support
contract there's a list at http://shibboleth.internet2.edu/support.html

* <ma...@dominicstellwag.de> [2011-07-23 18:57]:
> Im currently working on setting up a Shibboleth2 SP which I need
> according to a coding assignment I have to accomplish.
> Anyway, since several hours I'm stuck at the same point and can't
> figure out a solution. I did EVERYTHING according to
> https://www.switch.ch/aai/docs/shibboleth/SWITCH/2.4/sp/deployment/debian-source.html#setupprofile

First of all, the official documentation for the Shibboleth SP is at
https://wiki.shibboleth.net/confluence/display/SHIB2/Home
not the SWITCH site. (If you have questions with regard to SWITCH's
documentation you should ask SWITCH, but be prepared that if you're
not part of SWITCH's consituency -- swiss higher education
institutions -- they will probably also refuse to provide personal
support).

If you've installed the SP software (as documented on
https://wiki.shibboleth.net/confluence/display/SHIB2/Installation --
on Redhat, SuSE and Debian this usually is a single install command
away) your next step is "Getting started" at
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPGettingStarted
which steps you through the configuration.

> I'm stuck with testing a simple test resource at
> https://dominicstellwag.de/secure/ .

OK, I did access this site to actually find out what you're actually
asking about -- But why didn't you provide the error message up front
instead of letting people search for it? If you want others to solve
*your* problems (for free and make it quick, I'm in a hurry!) you
should make every effort to make it as easy as possible for others to
help you.
Anyway, the last line on that web page tells you, what the problem is:

Unable to locate metadata for identity provider
(https://idp.example.org/shibboleth)

You didn't configure a default identity provider for the SP to use, so
it's using the default *example* for which the SP doesn't have any
metadata (because it's only an example value).

So a. you don't have a real IdP configured as default and b. you
didn't tell the software to use a specific other IdP (several ways
available, which I won't mention yet to not cause further confusion).
Whether you've already configured metadata for some other IdP we
cannot know (and you didn't say).

N.B.: The SP by itself cannot do anything useful, you'll need an IdP
for identifcation/authentication/attributes.

If you don't already have an IdP to use (you also don't mention which
IdP you're trying to use or whether you have access to one) look at
the other mail on the shibboleth users list I sent today, where two
publicly available IdPs are mentioned.
If you do have an institutionally provided IdP they will have
documentation for you to follow and they very likely will also have
to perform some configuration steps on their end so that your SP can
make use of their IdP (e.g. release attributes to your SP).
-peter

--
To unsubscribe from this group, send email to
users+un...@shibboleth.net