[Idpy-discuss] Re: IdP hinting problem

Hello everyone, I have a problem with a "idp hinting" feature. I set in SP a SAML AuthnRequest url, e.g.: https://proxy.example.com/Saml2/sso/redirect?idphint=https%3A%2F%2Fidp.exam… I have SATOSA 8.1.0 with a Discovery Service: https://service.seamlessaccess.org/ds/ and a configuration of idp hinting: https://github.com/IdentityPython/SATOSA/blob/master/example/plugins/micros… In satosa saml backend are metadata from eduGAIN. (For this example I changed domain to "example.com") After authentication request in SATOSA log is: [2022-07-26 14:09:40,711] [ERROR] [saml2.request._verify] https://proxy.example.com/Saml2/sso/redirect?idphint=https%3A%2F%2Fidp.exam… not in ['https://proxy.example.com/Saml2/sso/redirect'] [2022-07-26 14:09:40,711] [ERROR] [satosa.base.run] [urn:uuid:1f970493-c436-4d86-83a5-88162a2ca2a1] Uncaught exception Traceback (most recent call last): File "/usr/local/lib/python3.6/site-packages/satosa/base.py", line 240, in run resp = self._run_bound_endpoint(context, spec) File "/usr/local/lib/python3.6/site-packages/satosa/base.py", line 180, in _run_bound_endpoint return spec(context) File "/usr/local/lib/python3.6/site-packages/satosa/frontends/saml2.py", line 100, in handle_authn_request return self._handle_authn_request(context, binding_in, self.idp) File "/usr/local/lib/python3.6/site-packages/satosa/frontends/saml2.py", line 195, in _handle_authn_request req_info = idp.parse_authn_request(context.request["SAMLRequest"], binding_in) File "/usr/local/lib/python3.6/site-packages/saml2/server.py", line 244, in parse_authn_request signature=signature) File "/usr/local/lib/python3.6/site-packages/saml2/entity.py", line 1080, in _parse_request _request.verify() File "/usr/local/lib/python3.6/site-packages/saml2/request.py", line 157, in verify return self._verify() File "/usr/local/lib/python3.6/site-packages/saml2/request.py", line 144, in _verify raise OtherError("Not destined for me!") saml2.s_utils.OtherError: Not destined for me! [2022-07-26 14:09:40,712] [ERROR] [satosa.proxy_server.__call__] Unknown error Traceback (most recent call last): File "/usr/local/lib/python3.6/site-packages/satosa/base.py", line 240, in run resp = self._run_bound_endpoint(context, spec) File "/usr/local/lib/python3.6/site-packages/satosa/base.py", line 180, in _run_bound_endpoint return spec(context) File "/usr/local/lib/python3.6/site-packages/satosa/frontends/saml2.py", line 100, in handle_authn_request return self._handle_authn_request(context, binding_in, self.idp) File "/usr/local/lib/python3.6/site-packages/satosa/frontends/saml2.py", line 195, in _handle_authn_request req_info = idp.parse_authn_request(context.request["SAMLRequest"], binding_in) File "/usr/local/lib/python3.6/site-packages/saml2/server.py", line 244, in parse_authn_request signature=signature) File "/usr/local/lib/python3.6/site-packages/saml2/entity.py", line 1080, in _parse_request _request.verify() File "/usr/local/lib/python3.6/site-packages/saml2/request.py", line 157, in verify return self._verify() File "/usr/local/lib/python3.6/site-packages/saml2/request.py", line 144, in _verify raise OtherError("Not destined for me!") saml2.s_utils.OtherError: Not destined for me! The above exception was the direct cause of the following exception: Traceback (most recent call last): File "/usr/local/lib/python3.6/site-packages/satosa/proxy_server.py", line 148, in __call__ resp = self.run(context) File "/usr/local/lib/python3.6/site-packages/satosa/base.py", line 258, in run raise SATOSAUnknownError("Unknown error") from err satosa.exception.SATOSAUnknownError: Unknown error Do you know the solution of the problem? Best Regards, Marcin Miłek _______________________________________________ Idpy-discuss mailing list -- idpy-discuss(a)lists.sunet.se To unsubscribe send an email to idpy-discuss-leave(a)lists.sunet.se