<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi Akshik,<br>
<br>
Did you upload your Metadata file to the testshib server? <br>
You are advised to follow steps starting from here:
<a class="moz-txt-link-freetext" href="http://testshib.org/register.html">http://testshib.org/register.html</a><br>
<br>
For the record, Keystone will act here as a Service Provider, so
you need to follow testhib docs/tutorials for setting your SP
(Service Provider)<br>
<br>
Let me know if that was your issue.<br>
If not, a more detailed steps of how your configured your Keystone
acting as a Service Provider would be more helpful.<br>
<br>
Marek Denis<br>
<br>
<div class="moz-cite-prefix">On 27.02.2015 11:26, Akshik DBK wrote:<br>
</div>
<blockquote cite="mid:BLU171-W289BE1E1087711E52AC497CF150@phx.gbl"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style>
<div dir="ltr">
<p style="margin-bottom: 14px; padding-right: 5px;
padding-bottom: 5px; border: none; font-size: 14px;
line-height: 1.4; font-family: 'Helvetica Neue', Arial,
Helvetica, sans-serif; color: rgb(75, 75, 75);
background-color: rgb(255, 255, 255);">Hi I'm new to SAML,
trying to integrate keystone with SAML, Im using Ubuntu 12.04
with Icehouse,</p>
<p style="margin-bottom: 14px; padding-right: 5px;
padding-bottom: 5px; border: none; font-size: 14px;
line-height: 1.4; font-family: 'Helvetica Neue', Arial,
Helvetica, sans-serif; color: rgb(75, 75, 75);
background-color: rgb(255, 255, 255);">im following <a
moz-do-not-send="true"
href="http://docs.openstack.org/developer/keystone/extensions/shibboleth.html"
style="color: rgb(27, 121, 189); text-decoration: none;
cursor: pointer;">http://docs.openstack.org/developer/k...</a></p>
<p style="margin-bottom: 14px; padding-right: 5px;
padding-bottom: 5px; border: none; font-size: 14px;
line-height: 1.4; font-family: 'Helvetica Neue', Arial,
Helvetica, sans-serif; color: rgb(75, 75, 75);
background-color: rgb(255, 255, 255);">when im trying to
configure keystone with two idp,</p>
<p style="margin-bottom: 14px; padding-right: 5px;
padding-bottom: 5px; border: none; font-size: 14px;
line-height: 1.4; font-family: 'Helvetica Neue', Arial,
Helvetica, sans-serif; color: rgb(75, 75, 75);
background-color: rgb(255, 255, 255);">when i access <a
moz-do-not-send="true"
href="https://myserver:5000/v3/OS-FEDERATION/identity_providers/idp_2/protocols/saml2/auth"
style="color: rgb(27, 121, 189); text-decoration: none;
cursor: pointer;">https://MYSERVER:5000/v3/OS-FEDERATIO...</a></p>
<p style="margin-bottom: 14px; padding-right: 5px;
padding-bottom: 5px; border: none; font-size: 14px;
line-height: 1.4; font-family: 'Helvetica Neue', Arial,
Helvetica, sans-serif; color: rgb(75, 75, 75);
background-color: rgb(255, 255, 255);">it gets redirected to <a
moz-do-not-send="true" href="http://testshib.org/"
style="color: rgb(27, 121, 189); text-decoration: none;
cursor: pointer;">testshib.org</a> , it prompts for username
and password when the same is given im getting</p>
<p style="margin-bottom: 14px; padding-right: 5px;
padding-bottom: 5px; border: none; font-size: 14px;
line-height: 1.4; font-family: 'Helvetica Neue', Arial,
Helvetica, sans-serif; color: rgb(75, 75, 75);
background-color: rgb(255, 255, 255);"><strong>shibsp::ConfigurationException
at ( <a moz-do-not-send="true"
href="https://myserver:5000/Shibboleth.sso/SAML2/POST"
style="color: rgb(27, 121, 189); text-decoration: none;
cursor: pointer;">https://MYSERVER:5000/Shibboleth.sso/...</a> )
No MetadataProvider available.</strong></p>
<p style="margin-bottom: 14px; padding-right: 5px;
padding-bottom: 5px; border: none; font-size: 14px;
line-height: 1.4; font-family: 'Helvetica Neue', Arial,
Helvetica, sans-serif; color: rgb(75, 75, 75);
background-color: rgb(255, 255, 255);">here is my
shibboleth2.xml content</p>
<pre class="prettyprint" style="font-family: Menlo, Monaco, 'Courier New', monospace; font-size: 12.025px; margin-top: 0px; margin-bottom: 18px; padding: 2px; color: rgb(51, 51, 51); border-radius: 4px; line-height: 18px; border: 1px solid rgb(136, 136, 136); white-space: pre-wrap; word-break: break-all; word-wrap: break-word; clear: both; background-color: rgb(245, 245, 245);"><code style="font-family: Menlo, Monaco, 'Courier New', monospace; font-size: 12px; padding: 0px; color: inherit; border-radius: 3px; border: 0px; clear: both; background-color: transparent;"><span class="tag" style="color: rgb(0, 0, 136);"><SPConfig</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">xmlns</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"urn:mace:shibboleth:2.0:native:sp:config"</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="atn" style="color: rgb(102, 0, 102);">xmlns:conf</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"urn:mace:shibboleth:2.0:native:sp:config"</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="atn" style="color: rgb(102, 0, 102);">xmlns:saml</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"urn:oasis:names:tc:SAML:2.0:assertion"</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="atn" style="color: rgb(102, 0, 102);">xmlns:samlp</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"urn:oasis:names:tc:SAML:2.0:protocol"</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="atn" style="color: rgb(102, 0, 102);">xmlns:md</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"urn:oasis:names:tc:SAML:2.0:metadata"</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="atn" style="color: rgb(102, 0, 102);">clockSkew</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"180"</span><span class="tag" style="color: rgb(0, 0, 136);">></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><ApplicationDefaults</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">entityID</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);"><a class="moz-txt-link-rfc2396E" href="https://MYSERVER:5000/Shibboleth">"https://MYSERVER:5000/Shibboleth"</a></span><span class="tag" style="color: rgb(0, 0, 136);">></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><Sessions</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">lifetime</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"28800"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">timeout</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"3600"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">checkAddress</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"false"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">relayState</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><sp
an class="atv" style="color: rgb(0, 136, 0);">"ss:mem"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">handlerSSL</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"false"</span><span class="tag" style="color: rgb(0, 0, 136);">></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><SSO</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">entityID</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);"><a class="moz-txt-link-rfc2396E" href="https://idp.testshib.org/idp/shibboleth">"https://idp.testshib.org/idp/shibboleth"</a></span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">ECP</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"true"</span><span class="tag" style="color: rgb(0, 0, 136);">></span><span class="pln" style="color: rgb(0, 0, 0);">
SAML2 SAML1
</span><span class="tag" style="color: rgb(0, 0, 136);"></SSO></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><Logout></span><span class="pln" style="color: rgb(0, 0, 0);">SAML2 Local</span><span class="tag" style="color: rgb(0, 0, 136);"></Logout></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><Handler</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">type</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"MetadataGenerator"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">Location</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"/Metadata"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">signing</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"false"</span><span class="tag" style="color: rgb(0, 0, 136);">/></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><Handler</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">type</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"Status"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">Location</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"/Status"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="tag" style="color: rgb(0, 0, 136);">/></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><Handler</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">type</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"Session"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">Location</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"/Session"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">showAttributeValues</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"false"</span><span class="tag" style="color: rgb(0, 0, 136);">/></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><Handler</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">type</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"DiscoveryFeed"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">Location</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"/DiscoFeed"</span><span class="tag" style="color: rgb(0, 0, 136);">/></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"></Sessions></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><Errors</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">supportContact</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"root@localhost"</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="atn" style="color: rgb(102, 0, 102);">logoLocation</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"/shibboleth-sp/logo.jpg"</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="atn" style="color: rgb(102, 0, 102);">styleSheet</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"/shibboleth-sp/main.css"</span><span class="tag" style="color: rgb(0, 0, 136);">/></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><AttributeExtractor</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">type</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"XML"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">validate</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"true"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">path</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"attribute-map.xml"</span><span class="tag" style="color: rgb(0, 0, 136);">/></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><AttributeResolver</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">type</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"Query"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">subjectMatch</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"true"</span><span class="tag" style="color: rgb(0, 0, 136);">/></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><AttributeFilter</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">type</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"XML"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">validate</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"true"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">path</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"attribute-policy.xml"</span><span class="tag" style="color: rgb(0, 0, 136);">/></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><CredentialResolver</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">type</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"File"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">key</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"sp-key.pem"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">certificate</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"sp-cert.pem"</span><span class="tag" style="color: rgb(0, 0, 136);">/></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><ApplicationOverride</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">id</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"idp_1"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">entityID</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);"><a class="moz-txt-link-rfc2396E" href="https://MYSERVER:5000/Shibboleth">"https://MYSERVER:5000/Shibboleth"</a></span><span class="tag" style="color: rgb(0, 0, 136);">></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><Sessions</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">lifetime</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"28800"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">timeout</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"3600"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">checkAddress</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"false"</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="atn" style="color: rgb(102, 0, 102);">relayState</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"ss:mem"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">handlerSSL</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"false"</span><span class="tag" style="color: rgb(0, 0, 136);">></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><SSO</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">entityID</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);"><a class="moz-txt-link-rfc2396E" href="https://portal4.mss.internalidp.com/idp/shibboleth">"https://portal4.mss.internalidp.com/idp/shibboleth"</a></span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">ECP</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"true"</span><span class="tag" style="color: rgb(0, 0, 136);">></span><span class="pln" style="color: rgb(0, 0, 0);">
SAML2 SAML1
</span><span class="tag" style="color: rgb(0, 0, 136);"></SSO></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><Logout></span><span class="pln" style="color: rgb(0, 0, 0);">SAML2 Local</span><span class="tag" style="color: rgb(0, 0, 136);"></Logout></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"></Sessions></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><MetadataProvider</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">type</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"XML"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">uri</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);"><a class="moz-txt-link-rfc2396E" href="https://portal4.mss.internalidp.com/idp/shibboleth">"https://portal4.mss.internalidp.com/idp/shibboleth"</a></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="atn" style="color: rgb(102, 0, 102);">backingFilePath</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"/tmp/tata.xml"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">reloadInterval</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"180000"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="tag" style="color: rgb(0, 0, 136);">/></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"></ApplicationOverride></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><ApplicationOverride</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">id</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"idp_2"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">entityID</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);"><a class="moz-txt-link-rfc2396E" href="https://MYSERVER:5000/Shibboleth">"https://MYSERVER:5000/Shibboleth"</a></span><span class="tag" style="color: rgb(0, 0, 136);">></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><Sessions</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">lifetime</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"28800"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">timeout</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"3600"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">checkAddress</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"false"</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="atn" style="color: rgb(102, 0, 102);">relayState</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"ss:mem"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">handlerSSL</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"false"</span><span class="tag" style="color: rgb(0, 0, 136);">></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><SSO</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">entityID</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);"><a class="moz-txt-link-rfc2396E" href="https://idp.testshib.org/idp/shibboleth">"https://idp.testshib.org/idp/shibboleth"</a></span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">ECP</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"true"</span><span class="tag" style="color: rgb(0, 0, 136);">></span><span class="pln" style="color: rgb(0, 0, 0);">
SAML2 SAML1
</span><span class="tag" style="color: rgb(0, 0, 136);"></SSO></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><Logout></span><span class="pln" style="color: rgb(0, 0, 0);">SAML2 Local</span><span class="tag" style="color: rgb(0, 0, 136);"></Logout></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"></Sessions></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><MetadataProvider</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">type</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"XML"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">uri</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);"><a class="moz-txt-link-rfc2396E" href="https://idp.testshib.org/idp/shibboleth">"https://idp.testshib.org/idp/shibboleth"</a></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="atn" style="color: rgb(102, 0, 102);">backingFilePath</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"/tmp/testshib.xml"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">reloadInterval</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"180000"</span><span class="tag" style="color: rgb(0, 0, 136);">/></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"></ApplicationOverride></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"></ApplicationDefaults></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><SecurityPolicyProvider</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">type</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"XML"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">validate</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"true"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">path</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"security-policy.xml"</span><span class="tag" style="color: rgb(0, 0, 136);">/></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"><ProtocolProvider</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">type</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"XML"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">validate</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"true"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">reloadChanges</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span class="atv" style="color: rgb(0, 136, 0);">"false"</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="atn" style="color: rgb(102, 0, 102);">path</span><span class="pun" style="color: rgb(102, 102, 0);">=</span><span cla
ss="atv" style="color: rgb(0, 136, 0);">"protocols.xml"</span><span class="tag" style="color: rgb(0, 0, 136);">/></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="tag" style="color: rgb(0, 0, 136);"></SPConfig></span></code></pre>
<p style="margin-bottom: 14px; padding-right: 5px;
padding-bottom: 5px; border: none; font-size: 14px;
line-height: 1.4; font-family: 'Helvetica Neue', Arial,
Helvetica, sans-serif; color: rgb(75, 75, 75);
background-color: rgb(255, 255, 255);">here is my
wsgi-keystone</p>
<pre class="prettyprint" style="font-family: Menlo, Monaco, 'Courier New', monospace; font-size: 12.025px; margin-top: 0px; margin-bottom: 18px; padding: 2px; color: rgb(51, 51, 51); border-radius: 4px; line-height: 18px; border: 1px solid rgb(136, 136, 136); white-space: pre-wrap; word-break: break-all; word-wrap: break-word; clear: both; background-color: rgb(245, 245, 245);"><code style="font-family: Menlo, Monaco, 'Courier New', monospace; font-size: 12px; padding: 0px; color: inherit; border-radius: 3px; border: 0px; clear: both; background-color: transparent;"><span class="typ" style="color: rgb(102, 0, 102);">WSGIScriptAlias</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">keystone</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">main </span><span class="pun" style="color: rgb(102, 102, 0);"
>/</span><span class="kwd" style="color: rgb(0, 0, 136);">var</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">www</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">cgi</span><span class="pun" style="color: rgb(102, 102, 0);">-</span><span class="pln" style="color: rgb(0, 0, 0);">bin</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">keystone</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">main
</span><span class="typ" style="color: rgb(102, 0, 102);">WSGIScriptAlias</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">keystone</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">admin </span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="kwd" style="color: rgb(0, 0, 136);">var</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">www</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">cgi</span><span class="pun" style="color: rgb(102, 102, 0);">-</span><span class="pln" style="color: rgb(0, 0, 0);">bin</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">keystone</span><span class="pun" style="color: rgb(
102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">admin
</span><span class="pun" style="color: rgb(102, 102, 0);"><</span><span class="typ" style="color: rgb(102, 0, 102);">Location</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="str" style="color: rgb(0, 136, 0);">"/keystone"</span><span class="pun" style="color: rgb(102, 102, 0);">></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="com" style="color: rgb(136, 0, 0);"># NSSRequireSSL</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="typ" style="color: rgb(102, 0, 102);">SSLRequireSSL</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="typ" style="color: rgb(102, 0, 102);">Authtype</span><span class="pln" style="color: rgb(0, 0, 0);"> none
</span><span class="pun" style="color: rgb(102, 102, 0);"><</span><span class="str" style="color: rgb(0, 136, 0);">/Location>
<Location /</span><span class="typ" style="color: rgb(102, 0, 102);">Shibboleth</span><span class="pun" style="color: rgb(102, 102, 0);">.</span><span class="pln" style="color: rgb(0, 0, 0);">sso</span><span class="pun" style="color: rgb(102, 102, 0);">></span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="typ" style="color: rgb(102, 0, 102);">SetHandler</span><span class="pln" style="color: rgb(0, 0, 0);"> shib
</span><span class="pun" style="color: rgb(102, 102, 0);"><</span><span class="str" style="color: rgb(0, 136, 0);">/Location>
<Location /</span><span class="pln" style="color: rgb(0, 0, 0);">v3</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">OS</span><span class="pun" style="color: rgb(102, 102, 0);">-</span><span class="pln" style="color: rgb(0, 0, 0);">FEDERATION</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">identity_providers</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">idp_1</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">protocols</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">saml2</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">auth</span><span class="pun" style="color: rgb(102, 102, 0);">></span><span class="pln
" style="color: rgb(0, 0, 0);">
</span><span class="typ" style="color: rgb(102, 0, 102);">ShibRequestSetting</span><span class="pln" style="color: rgb(0, 0, 0);"> requireSession </span><span class="lit" style="color: rgb(0, 102, 102);">1</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="typ" style="color: rgb(102, 0, 102);">ShibRequestSetting</span><span class="pln" style="color: rgb(0, 0, 0);"> applicationId idp_1
</span><span class="typ" style="color: rgb(102, 0, 102);">AuthType</span><span class="pln" style="color: rgb(0, 0, 0);"> shibboleth
</span><span class="typ" style="color: rgb(102, 0, 102);">ShibRequireAll</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="typ" style="color: rgb(102, 0, 102);">On</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="typ" style="color: rgb(102, 0, 102);">ShibRequireSession</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="typ" style="color: rgb(102, 0, 102);">On</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="typ" style="color: rgb(102, 0, 102);">ShibExportAssertion</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="typ" style="color: rgb(102, 0, 102);">Off</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="typ" style="color: rgb(102, 0, 102);">Require</span><span class="pln" style="color: rgb(0, 0, 0);"> valid</span><span class="pun" style="color: rgb(102, 102, 0);">-</span><span class="pln" style="color: rgb(0, 0, 0);">user
</span><span class="pun" style="color: rgb(102, 102, 0);"><</span><span class="str" style="color: rgb(0, 136, 0);">/Location>
<Location /</span><span class="pln" style="color: rgb(0, 0, 0);">v3</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">OS</span><span class="pun" style="color: rgb(102, 102, 0);">-</span><span class="pln" style="color: rgb(0, 0, 0);">FEDERATION</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">identity_providers</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">idp_2</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">protocols</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">saml2</span><span class="pun" style="color: rgb(102, 102, 0);">/</span><span class="pln" style="color: rgb(0, 0, 0);">auth</span><span class="pun" style="color: rgb(102, 102, 0);">></span><span class="pln
" style="color: rgb(0, 0, 0);">
</span><span class="typ" style="color: rgb(102, 0, 102);">ShibRequestSetting</span><span class="pln" style="color: rgb(0, 0, 0);"> requireSession </span><span class="lit" style="color: rgb(0, 102, 102);">1</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="typ" style="color: rgb(102, 0, 102);">ShibRequestSetting</span><span class="pln" style="color: rgb(0, 0, 0);"> applicationId idp_2
</span><span class="typ" style="color: rgb(102, 0, 102);">AuthType</span><span class="pln" style="color: rgb(0, 0, 0);"> shibboleth
</span><span class="typ" style="color: rgb(102, 0, 102);">ShibRequireAll</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="typ" style="color: rgb(102, 0, 102);">On</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="typ" style="color: rgb(102, 0, 102);">ShibRequireSession</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="typ" style="color: rgb(102, 0, 102);">On</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="typ" style="color: rgb(102, 0, 102);">ShibExportAssertion</span><span class="pln" style="color: rgb(0, 0, 0);"> </span><span class="typ" style="color: rgb(102, 0, 102);">Off</span><span class="pln" style="color: rgb(0, 0, 0);">
</span><span class="typ" style="color: rgb(102, 0, 102);">Require</span><span class="pln" style="color: rgb(0, 0, 0);"> valid</span><span class="pun" style="color: rgb(102, 102, 0);">-</span><span class="pln" style="color: rgb(0, 0, 0);">user
</span><span class="pun" style="color: rgb(102, 102, 0);"></</span><span class="typ" style="color: rgb(102, 0, 102);">Location</span><span class="pun" style="color: rgb(102, 102, 0);">></span></code></pre>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: <a class="moz-txt-link-abbreviated" href="mailto:OpenStack-dev-request@lists.openstack.org?subject:unsubscribe">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a>
<a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a>
</pre>
</blockquote>
<br>
</body>
</html>