<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Hi <span style="color: rgb(83, 83, 83); font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif; font-size: 12.00119972229px; line-height: 18.0018005371094px; background-color: rgb(255, 255, 255);">Marek ,</span><div><font color="#535353" face="Helvetica Neue, Arial, Helvetica, sans-serif"><span style="font-size: 12.00119972229px; line-height: 18.0018005371094px;"><br></span></font></div><div><font color="#535353" face="Helvetica Neue, Arial, Helvetica, sans-serif"><span style="font-size: 12.00119972229px; line-height: 18.0018005371094px;">I've registered with testshib, this is my keystone-apache-error.log </span></font><span style="font-size: 12.00119972229px; line-height: 18.0018005371094px; color: rgb(83, 83, 83); font-family: 'Helvetica Neue', Arial, Helvetica, sans-serif;">log i get </span></div><div><font color="#535353" face="Helvetica Neue, Arial, Helvetica, sans-serif"><span style="font-size: 12.00119972229px; line-height: 18.0018005371094px;">[error] [client 121.243.33.212] No MetadataProvider available., referer: https://idp.testshib.org/idp/profile/SAML2/Redirect/SSO</span></font></div><div><br><div><hr id="stopSpelling">From: akshik@outlook.com<br>To: openstack-dev@lists.openstack.org<br>Date: Fri, 27 Feb 2015 15:56:57 +0530<br>Subject: [openstack-dev] Need help in configuring keystone<br><br>
<style><!--
.ExternalClass .ecxhmmessage P {
padding:0px;
}
.ExternalClass body.ecxhmmessage {
font-size:12pt;
font-family:Calibri;
}
--></style>
<div dir="ltr"><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);background-color:rgb(255, 255, 255);">Hi I'm new to SAML, trying to integrate keystone with SAML, Im using Ubuntu 12.04 with Icehouse,</p><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);background-color:rgb(255, 255, 255);">im following <a href="http://docs.openstack.org/developer/keystone/extensions/shibboleth.html" style="color:rgb(27, 121, 189);text-decoration:none;cursor:pointer;" target="_blank">http://docs.openstack.org/developer/k...</a></p><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);background-color:rgb(255, 255, 255);">when im trying to configure keystone with two idp,</p><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);background-color:rgb(255, 255, 255);">when i access <a href="https://myserver:5000/v3/OS-FEDERATION/identity_providers/idp_2/protocols/saml2/auth" style="color:rgb(27, 121, 189);text-decoration:none;cursor:pointer;" target="_blank">https://MYSERVER:5000/v3/OS-FEDERATIO...</a></p><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);background-color:rgb(255, 255, 255);">it gets redirected to <a href="http://testshib.org/" style="color:rgb(27, 121, 189);text-decoration:none;cursor:pointer;" target="_blank">testshib.org</a> , it prompts for username and password when the same is given im getting</p><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);background-color:rgb(255, 255, 255);"><strong>shibsp::ConfigurationException at ( <a href="https://myserver:5000/Shibboleth.sso/SAML2/POST" style="color:rgb(27, 121, 189);text-decoration:none;cursor:pointer;" target="_blank">https://MYSERVER:5000/Shibboleth.sso/...</a> ) No MetadataProvider available.</strong></p><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);background-color:rgb(255, 255, 255);">here is my shibboleth2.xml content</p><pre class="ecxprettyprint" style="font-family:Menlo, Monaco, 'Courier New', monospace;font-size:12.025px;padding:2px;color:rgb(51, 51, 51);border-radius:4px;line-height:18px;border:1px solid rgb(136, 136, 136);white-space:pre-wrap;word-break:break-all;word-wrap:break-word;clear:both;background-color:rgb(245, 245, 245);"><code style="font-family:Menlo, Monaco, 'Courier New', monospace;font-size:12px;padding:0px;color:inherit;border-radius:3px;border:0px;clear:both;background-color:transparent;"><span class="ecxtag" style="color:rgb(0, 0, 136);"><SPConfig</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">xmlns</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"urn:mace:shibboleth:2.0:native:sp:config"</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxatn" style="color:rgb(102, 0, 102);">xmlns:conf</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"urn:mace:shibboleth:2.0:native:sp:config"</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxatn" style="color:rgb(102, 0, 102);">xmlns:saml</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"urn:oasis:names:tc:SAML:2.0:assertion"</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxatn" style="color:rgb(102, 0, 102);">xmlns:samlp</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"urn:oasis:names:tc:SAML:2.0:protocol"</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxatn" style="color:rgb(102, 0, 102);">xmlns:md</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"urn:oasis:names:tc:SAML:2.0:metadata"</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxatn" style="color:rgb(102, 0, 102);">clockSkew</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"180"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><ApplicationDefaults</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">entityID</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"https://MYSERVER:5000/Shibboleth"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><Sessions</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">lifetime</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"28800"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">timeout</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"3600"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">checkAddress</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"false"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">relayState</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"ss:mem"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">handlerSSL</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"false"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><SSO</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">entityID</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"https://idp.testshib.org/idp/shibboleth"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">ECP</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"true"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
SAML2 SAML1
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"></SSO></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><Logout></span><span class="ecxpln" style="color:rgb(0, 0, 0);">SAML2 Local</span><span class="ecxtag" style="color:rgb(0, 0, 136);"></Logout></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><Handler</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">type</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"MetadataGenerator"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">Location</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"/Metadata"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">signing</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"false"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">/></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><Handler</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">type</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"Status"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">Location</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"/Status"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxtag" style="color:rgb(0, 0, 136);">/></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><Handler</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">type</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"Session"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">Location</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"/Session"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">showAttributeValues</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"false"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">/></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><Handler</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">type</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"DiscoveryFeed"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">Location</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"/DiscoFeed"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">/></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"></Sessions></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><Errors</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">supportContact</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"root@localhost"</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxatn" style="color:rgb(102, 0, 102);">logoLocation</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"/shibboleth-sp/logo.jpg"</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxatn" style="color:rgb(102, 0, 102);">styleSheet</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"/shibboleth-sp/main.css"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">/></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><AttributeExtractor</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">type</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"XML"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">validate</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"true"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">path</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"attribute-map.xml"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">/></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><AttributeResolver</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">type</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"Query"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">subjectMatch</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"true"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">/></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><AttributeFilter</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">type</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"XML"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">validate</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"true"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">path</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"attribute-policy.xml"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">/></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><CredentialResolver</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">type</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"File"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">key</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"sp-key.pem"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">certificate</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"sp-cert.pem"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">/></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><ApplicationOverride</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">id</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"idp_1"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">entityID</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"https://MYSERVER:5000/Shibboleth"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><Sessions</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">lifetime</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"28800"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">timeout</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"3600"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">checkAddress</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"false"</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxatn" style="color:rgb(102, 0, 102);">relayState</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"ss:mem"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">handlerSSL</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"false"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><SSO</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">entityID</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"https://portal4.mss.internalidp.com/idp/shibboleth"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">ECP</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"true"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
SAML2 SAML1
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"></SSO></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><Logout></span><span class="ecxpln" style="color:rgb(0, 0, 0);">SAML2 Local</span><span class="ecxtag" style="color:rgb(0, 0, 136);"></Logout></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"></Sessions></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><MetadataProvider</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">type</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"XML"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">uri</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"https://portal4.mss.internalidp.com/idp/shibboleth"</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxatn" style="color:rgb(102, 0, 102);">backingFilePath</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"/tmp/tata.xml"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">reloadInterval</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"180000"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxtag" style="color:rgb(0, 0, 136);">/></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"></ApplicationOverride></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><ApplicationOverride</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">id</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"idp_2"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">entityID</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"https://MYSERVER:5000/Shibboleth"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><Sessions</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">lifetime</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"28800"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">timeout</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"3600"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">checkAddress</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"false"</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxatn" style="color:rgb(102, 0, 102);">relayState</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"ss:mem"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">handlerSSL</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"false"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><SSO</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">entityID</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"https://idp.testshib.org/idp/shibboleth"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">ECP</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"true"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
SAML2 SAML1
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"></SSO></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><Logout></span><span class="ecxpln" style="color:rgb(0, 0, 0);">SAML2 Local</span><span class="ecxtag" style="color:rgb(0, 0, 136);"></Logout></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"></Sessions></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><MetadataProvider</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">type</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"XML"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">uri</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"https://idp.testshib.org/idp/shibboleth"</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxatn" style="color:rgb(102, 0, 102);">backingFilePath</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"/tmp/testshib.xml"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">reloadInterval</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"180000"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">/></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"></ApplicationOverride></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"></ApplicationDefaults></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><SecurityPolicyProvider</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">type</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"XML"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">validate</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"true"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">path</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"security-policy.xml"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">/></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"><ProtocolProvider</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">type</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"XML"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">validate</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"true"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">reloadChanges</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"false"</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxatn" style="color:rgb(102, 0, 102);">path</span><span class="ecxpun" style="color:rgb(102, 102, 0);">=</span><span class="ecxatv" style="color:rgb(0, 136, 0);">"protocols.xml"</span><span class="ecxtag" style="color:rgb(0, 0, 136);">/></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtag" style="color:rgb(0, 0, 136);"></SPConfig></span></code></pre><p style="padding-right:5px;padding-bottom:5px;border:none;font-size:14px;line-height:1.4;font-family:'Helvetica Neue', Arial, Helvetica, sans-serif;color:rgb(75, 75, 75);background-color:rgb(255, 255, 255);">here is my wsgi-keystone</p><pre class="ecxprettyprint" style="font-family:Menlo, Monaco, 'Courier New', monospace;font-size:12.025px;padding:2px;color:rgb(51, 51, 51);border-radius:4px;line-height:18px;border:1px solid rgb(136, 136, 136);white-space:pre-wrap;word-break:break-all;word-wrap:break-word;clear:both;background-color:rgb(245, 245, 245);"><code style="font-family:Menlo, Monaco, 'Courier New', monospace;font-size:12px;padding:0px;color:inherit;border-radius:3px;border:0px;clear:both;background-color:transparent;"><span class="ecxtyp" style="color:rgb(102, 0, 102);">WSGIScriptAlias</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">keystone</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">main </span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxkwd" style="color:rgb(0, 0, 136);">var</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">www</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">cgi</span><span class="ecxpun" style="color:rgb(102, 102, 0);">-</span><span class="ecxpln" style="color:rgb(0, 0, 0);">bin</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">keystone</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">main
</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">WSGIScriptAlias</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">keystone</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">admin </span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxkwd" style="color:rgb(0, 0, 136);">var</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">www</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">cgi</span><span class="ecxpun" style="color:rgb(102, 102, 0);">-</span><span class="ecxpln" style="color:rgb(0, 0, 0);">bin</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">keystone</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">admin
</span><span class="ecxpun" style="color:rgb(102, 102, 0);"><</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">Location</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxstr" style="color:rgb(0, 136, 0);">"/keystone"</span><span class="ecxpun" style="color:rgb(102, 102, 0);">></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxcom" style="color:rgb(136, 0, 0);"># NSSRequireSSL</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">SSLRequireSSL</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">Authtype</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> none
</span><span class="ecxpun" style="color:rgb(102, 102, 0);"><</span><span class="ecxstr" style="color:rgb(0, 136, 0);">/Location>
<Location /</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">Shibboleth</span><span class="ecxpun" style="color:rgb(102, 102, 0);">.</span><span class="ecxpln" style="color:rgb(0, 0, 0);">sso</span><span class="ecxpun" style="color:rgb(102, 102, 0);">></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">SetHandler</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> shib
</span><span class="ecxpun" style="color:rgb(102, 102, 0);"><</span><span class="ecxstr" style="color:rgb(0, 136, 0);">/Location>
<Location /</span><span class="ecxpln" style="color:rgb(0, 0, 0);">v3</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">OS</span><span class="ecxpun" style="color:rgb(102, 102, 0);">-</span><span class="ecxpln" style="color:rgb(0, 0, 0);">FEDERATION</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">identity_providers</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">idp_1</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">protocols</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">saml2</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">auth</span><span class="ecxpun" style="color:rgb(102, 102, 0);">></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">ShibRequestSetting</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> requireSession </span><span class="ecxlit" style="color:rgb(0, 102, 102);">1</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">ShibRequestSetting</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> applicationId idp_1
</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">AuthType</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> shibboleth
</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">ShibRequireAll</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxtyp" style="color:rgb(102, 0, 102);">On</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">ShibRequireSession</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxtyp" style="color:rgb(102, 0, 102);">On</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">ShibExportAssertion</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxtyp" style="color:rgb(102, 0, 102);">Off</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">Require</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> valid</span><span class="ecxpun" style="color:rgb(102, 102, 0);">-</span><span class="ecxpln" style="color:rgb(0, 0, 0);">user
</span><span class="ecxpun" style="color:rgb(102, 102, 0);"><</span><span class="ecxstr" style="color:rgb(0, 136, 0);">/Location>
<Location /</span><span class="ecxpln" style="color:rgb(0, 0, 0);">v3</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">OS</span><span class="ecxpun" style="color:rgb(102, 102, 0);">-</span><span class="ecxpln" style="color:rgb(0, 0, 0);">FEDERATION</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">identity_providers</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">idp_2</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">protocols</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">saml2</span><span class="ecxpun" style="color:rgb(102, 102, 0);">/</span><span class="ecxpln" style="color:rgb(0, 0, 0);">auth</span><span class="ecxpun" style="color:rgb(102, 102, 0);">></span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">ShibRequestSetting</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> requireSession </span><span class="ecxlit" style="color:rgb(0, 102, 102);">1</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">ShibRequestSetting</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> applicationId idp_2
</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">AuthType</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> shibboleth
</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">ShibRequireAll</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxtyp" style="color:rgb(102, 0, 102);">On</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">ShibRequireSession</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxtyp" style="color:rgb(102, 0, 102);">On</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">ShibExportAssertion</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> </span><span class="ecxtyp" style="color:rgb(102, 0, 102);">Off</span><span class="ecxpln" style="color:rgb(0, 0, 0);">
</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">Require</span><span class="ecxpln" style="color:rgb(0, 0, 0);"> valid</span><span class="ecxpun" style="color:rgb(102, 102, 0);">-</span><span class="ecxpln" style="color:rgb(0, 0, 0);">user
</span><span class="ecxpun" style="color:rgb(102, 102, 0);"></</span><span class="ecxtyp" style="color:rgb(102, 0, 102);">Location</span><span class="ecxpun" style="color:rgb(102, 102, 0);">></span></code></pre> </div>
<br>__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: OpenStack-dev-request@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</div></div> </div></body>
</html>