edugain-discuss AT lists.geant.org

Subject: An open discussion list for topics related to the eduGAIN interfederation service.

List archive

[eduGAIN-discuss] IdP discoveryURL error

From: Andreas Theodorou <andreas.theodorou AT cynet.ac.cy>
To: "'edugain-discuss AT lists.geant.org'" <edugain-discuss AT lists.geant.org>
Subject: [eduGAIN-discuss] IdP discoveryURL error
Date: Fri, 26 May 2023 07:27:56 +0000
Accept-language: en-GB, en-US
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cynet.ac.cy; dmarc=pass action=none header.from=cynet.ac.cy; dkim=pass header.d=cynet.ac.cy; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=tdH/mphlIslotMuPh5MoEizS0iMEst8T2dYG6fY0feI=; b=HA8onKOfJhTVQg1o+84CGfe7Q9FgfMirtZrTLO7DJ3GHonNkjUcRcoUJeMqPG958SVpL/JmhKwveYVwrVaprkWRLok+XpxrJHYSscHwkK59U5zJXwRzdZy6rcAapGMN14/gmsAv1Hz6PmDUlYbvwDwObmW/DG21fwiEXlCWPYQZ12YY0g5xI2BGGtn8px9esYZBHJN/N32D3gYjEMGEK8v+GDfhq0UjhDm7ani/ctIzFYHYkVonezvpDQm8/OdVHlyYx/XidRAcJp2wxc1mGqO/Rgfspibw7Lg02NP9kPBLaR6PDONpx8T8LHDzZa2KQr7RZLbGhn+aDO51ascoNcw==
Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Ma9F+J5t4dC0zRBlkLjoJlcFfcdzBdhCYxyRtGY3i36dW08WZFDmV9gqjLO4rZ4NoIYSyrU/k+Iq7XkggojV97te7JoHBKFlGjeub6BsF/IdkW+/qt/tUMLs6Y1+9vG2oP4Xd52oPhBsohzRxg22gQksjO6Usrsb9ke89jxTh0gEdivhHKDXxI4aNsdc0gjoaL8oTdeFSCYInHQMHAS74A8uLZjkMs94inBZOLrkVYgz4aLn++cQYUAgNRpbm/ZCgOGUussc1U4AuJIUQaqC56YG3u41pPCtwKRRsYcKuzb3QSln7xYBuhoAMCtnPlhCKIFTSxoz75hg2mAVNcH43Q==
Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cynet.ac.cy;

Dear All,

I have identified the error message below in idp-process.log file. It looks that it affects the eduGAIN connectivity status.

ERROR [net.shibboleth.idp.authn:39] - Uncaught runtime exception net.shibboleth.utilities.java.support.logic.ConstraintViolationException: Discovery URL cannot be null or empty at net.shibboleth.utilities.java.support.logic.Constraint.isNotEmpty(Constraint.java:289)

This line is in /conf/authn/authn.properties and was commented out and the eduGAIN connectivity check was showing the red warning “IdP-Generic-Error”.

I then removed the comments and set this parameter to idp.authn.discoveryURL = https://idp.cynet.ac.cy/idp/profile/SAML2/Redirect/SSO and now the eduGAIN connectivity check shows the yellow warning.

I kindly request your assistance in resolving the issue. Thank you for your attention.

Kind regards,

Andreas.

[eduGAIN-discuss] IdP discoveryURL error, Andreas Theodorou, 05/26/2023
- Re: [eduGAIN-discuss] IdP discoveryURL error, Marco Malavolti, 26-May-2023
  - Re: [eduGAIN-discuss] IdP discoveryURL error, Pål Axelsson, 29-May-2023