Do I need to restart HANA if I create a new Trust store file
/usr/sap/H1D/HDB<Instance Number>/imdbmaster/sec/sapsrv.pse
I can get everything configured..
Add IDP cert to sapsrv.pse.
Insert IDP Cert and URL data into hana. MAKE SURE sapsrv.pse and SAML_Providers subject and issuer data match
configure User to use the IDP
configure Xs test app to use SAML and the IDP
Update IDP with Xs Engine Service Provider data.
Service Provider Initiated request
XS Engine Logs Spew:
x509.cc(00436) : Enter int xmlSecHDBKeyDataX509VerifyAndExtractKey(xmlSecKeyDataPtr, xmlSecKeyPtr, xmlSecKeyInfoCtxPtr)
[27380]{-1}[19/-1] 2015-04-03 14:35:44.772812 a Authentication x509vfy.cc(00133) : Enter Crypto::X509::CertificateHndl xmlSecHDBX509StoreVerify(xmlSecKeyDataStorePtr, ltt::vector<ltt::smartptr_handle<Crypto::X509::Certificate> >&, xmlSecKeyInfoCtx*)
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773032 d Authentication SAMLAuthenticator.cpp(00235) : ERROR in libxmlsec
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773037 d Authentication SAMLAuthenticator.cpp(00236) : file: /HDB/IMP/NewDB100_REL/src/sys/src/Authentication/extern/libxmlsec/xmlsec_hdb/impl/x509vfy.cc
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773040 d Authentication SAMLAuthenticator.cpp(00237) : line: 174
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773043 d Authentication SAMLAuthenticator.cpp(00238) : func: xmlSecHDBX509StoreVerify
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773045 d Authentication SAMLAuthenticator.cpp(00239) : errorObject: x509-store
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773046 d Authentication SAMLAuthenticator.cpp(00240) : errorSubject:
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773048 d Authentication SAMLAuthenticator.cpp(00241) : reason: 71
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773050 d Authentication SAMLAuthenticator.cpp(00242) : msg:
Exit Crypto::X509::CertificateHndl xmlSecHDBX509StoreVerify(xmlSecKeyDataStorePtr, ltt::vector<ltt::smartptr_handle<Crypto::X509::Certificate> >&, xmlSecKeyInfoCtx*)(240usec)
Exit int xmlSecHDBKeyDataX509VerifyAndExtractKey(xmlSecKeyDataPtr, xmlSecKeyPtr, xmlSecKeyInfoCtxPtr)(247usec)
Exit int xmlSecHDBKeyDataX509XmlRead(xmlSecKeyDataId, xmlSecKeyPtr, xmlNodePtr, xmlSecKeyInfoCtxPtr)(396usec)
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773060 a Authentication x509.cc(00282) : Enter void xmlSecHDBKeyDataX509Finalize(xmlSecKeyDataPtr)
Exit void xmlSecHDBKeyDataX509Finalize(xmlSecKeyDataPtr)(14usec)
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773082 d Authentication SAMLAuthenticator.cpp(00235) : ERROR in libxmlsec
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773084 d Authentication SAMLAuthenticator.cpp(00236) : file: keys.c
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773085 d Authentication SAMLAuthenticator.cpp(00237) : line: 1370
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773087 d Authentication SAMLAuthenticator.cpp(00238) : func: xmlSecKeysMngrGetKey
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773089 d Authentication SAMLAuthenticator.cpp(00239) : errorObject:
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773091 d Authentication SAMLAuthenticator.cpp(00240) : errorSubject: xmlSecKeysMngrFindKey
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773092 d Authentication SAMLAuthenticator.cpp(00241) : reason: 1
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773094 d Authentication SAMLAuthenticator.cpp(00242) : msg:
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773096 d Authentication SAMLAuthenticator.cpp(00235) : ERROR in libxmlsec
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773098 d Authentication SAMLAuthenticator.cpp(00236) : file: xmldsig.c
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773099 d Authentication SAMLAuthenticator.cpp(00237) : line: 871
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773101 d Authentication SAMLAuthenticator.cpp(00238) : func: xmlSecDSigCtxProcessKeyInfoNode
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773103 d Authentication SAMLAuthenticator.cpp(00239) : errorObject:
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773104 d Authentication SAMLAuthenticator.cpp(00240) : errorSubject:
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773105 d Authentication SAMLAuthenticator.cpp(00241) : reason: 45
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773107 d Authentication SAMLAuthenticator.cpp(00242) : msg:
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773109 d Authentication SAMLAuthenticator.cpp(00235) : ERROR in libxmlsec
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773111 d Authentication SAMLAuthenticator.cpp(00236) : file: xmldsig.c
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773112 d Authentication SAMLAuthenticator.cpp(00237) : line: 565
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773114 d Authentication SAMLAuthenticator.cpp(00238) : func: xmlSecDSigCtxProcessSignatureNode
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773116 d Authentication SAMLAuthenticator.cpp(00239) : errorObject:
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773117 d Authentication SAMLAuthenticator.cpp(00240) : errorSubject: xmlSecDSigCtxProcessKeyInfoNode
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773119 d Authentication SAMLAuthenticator.cpp(00241) : reason: 1
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773120 d Authentication SAMLAuthenticator.cpp(00242) : msg:
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773122 d Authentication SAMLAuthenticator.cpp(00235) : ERROR in libxmlsec
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773124 d Authentication SAMLAuthenticator.cpp(00236) : file: xmldsig.c
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773125 d Authentication SAMLAuthenticator.cpp(00237) : line: 366
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773127 d Authentication SAMLAuthenticator.cpp(00238) : func: xmlSecDSigCtxVerify
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773129 d Authentication SAMLAuthenticator.cpp(00239) : errorObject:
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773130 d Authentication SAMLAuthenticator.cpp(00240) : errorSubject: xmlSecDSigCtxSigantureProcessNode
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773132 d Authentication SAMLAuthenticator.cpp(00241) : reason: 1
[27380]{-1}[19/-1] 2015-04-03 14:35:44.773133 d Authentication SAMLAuthenticator.cpp(00242) : msg:
where do i find REASON values.. what is reason 45, 71
Not sure if IDP initiated request DO NOT WORK.. i try anyway and get:
No cookie with target path found in request
Your Expertise is Advised..
Thank you for your diligence.