InCommon Technical Discussions

[Nick Roy <>]

FYI


-------- Forwarded Message --------
Subject: [eduGAIN-SG] Fwd: [md-ops] eduGAIN metadata filtering report
Date: Wed, 30 May 2018 13:55:58 -0600
From: Nick Roy 
<>
Reply-To: Nick Roy 
<>
To: 

 
<>

Hello, colleagues,

InCommon continues to filter metadata imported from eduGAIN per a set of 
rules defined at:

https://github.internet2.edu/InCommon/inc-meta/blob/master/mdx/incommon/edugain-policy.xml

Documented at:

https://spaces.internet2.edu/display/InCFederation/Interfederation+Technical+Policy

There continue to be a large number of IdPs filtered due to problems 
with their shibmd:scope(s)

Anyone who wishes to get our filtering reports on a regular basis may 
subscribe to the md-ops list at lists.incommon.org

Best Regards,

Nick


-------- Forwarded Message --------
Subject: [md-ops] eduGAIN metadata filtering report
Date: Wed, 30 May 2018 13:26:23 -0600
From: InC Ops 
<>
Reply-To: 

 
<>
To: Metadata Ops 
<>

The following filter report was produced during importing process for 
today's
signinng.  It is also posted at
https://wayf.incommonfederation.org/metadata-diff/md_filter_reports/md_filter_report_1527708296.log

Current Time: 2018-05-30 19:24:56 +0000

       [echo] Running incommon report flow.
       [java] ERROR - Item http://sts.deltion.nl/adfs/services/trust 
(NL) was marked with the following Error status messages
       [java] ERROR -     domainName/noPublicSuffix: scope is not under 
a public suffix: 'ow.deltion.local'
       [java] ERROR - Item http://login.saxion.nl/adfs/services/trust 
(NL) was marked with the following Error status messages
       [java] ERROR -     checkScopes/literalTail: regular expression 
'.*@saxion\.nl$' does not end with a literal tail
       [java] ERROR - Item 
http://sts.roc-nijmegen.nl/adfs/services/trust (NL) was marked with the 
following Error status messages
       [java] ERROR -     domainName/noPublicSuffix: scope is not under 
a public suffix: 'roc-nijmegen.local'
       [java] ERROR - Item http://fed.rijnijssel.nl/adfs/services/trust 
(NL) was marked with the following Error status messages
       [java] ERROR -     domainName/noPublicSuffix: scope is not under 
a public suffix: 'rij.local'
       [java] ERROR - Item https://meta.cesnet.cz/sp/shibboleth (CZ) was 
marked with the following Error status messages
       [java] ERROR -     check_saml1: no POST support on SAML 1.1 SP
       [java] ERROR - Item https://attributes.eduid.cz/shibboleth (CZ) 
was marked with the following Error status messages
       [java] ERROR -     check_reqattr: RequestedAttribute uses unknown 
name http://eduroam.cz/attributes/eduroamUID with SAML 2.0 NameFormat 
(eduroamUID)
       [java] WARN  - Item https://idp.pxl.be/idp/f5/ (BE) was marked 
with the following Warning status messages
       [java] WARN  -     stripMDUILogoHttp: mdui:Logo from non-TLS 
location removed: 'http://www.pxl.be/img/logo.png'
       [java] ERROR - Item https://acesso.ufabc.edu.br/idp/shibboleth 
(BR) was marked with the following Error status messages
       [java] ERROR -     domainName/publicSuffix: scope is a public 
suffix: 'edu.br'
       [java] ERROR -     domainName/publicSuffix: scope is a public 
suffix: 'edu.br'
       [java] ERROR - Item https://cafe.ufba.br/idp/shibboleth (BR) was 
marked with the following Error status messages
       [java] ERROR -     domainName/publicSuffix: scope is a public 
suffix: 'br'
       [java] ERROR -     domainName/publicSuffix: scope is a public 
suffix: 'edu.br'
       [java] ERROR - Item https://birk.wayf.dk/birk.php/wayf.aau.dk 
(DK) was marked with the following Error status messages
       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR -     checkScopes/domainName: scope is not a valid 
domain name: 

       [java] ERROR - Item 
urn:mace:ac.uk:sdss.ac.uk:provider:identity:uhi.ac.uk (UK) was marked 
with the following Error status messages
       [java] ERROR -     check_idp_non_saml2: IdP does not support the 
SAML 2 HTTP-Redirect binding
       [java] ERROR - Item https://www.westlaw.co.uk/metadata (UK) was 
marked with the following Error status messages
       [java] ERROR -     check_sp_non_saml2: SP does not support the 
SAML 2 HTTP-POST binding
       [java] ERROR - Item 
https://auth.cs.serialssolutions.com/auth/Metadata/Shib (UK) was marked 
with the following Error status messages
       [java] ERROR -     check_sp_non_saml2: SP does not support the 
SAML 2 HTTP-POST binding
       [java] ERROR - Item https://auth.services.bmj.com/auth (UK) was 
marked with the following Error status messages
       [java] ERROR -     check_sp_non_saml2: SP does not support the 
SAML 2 HTTP-POST binding
       [java] ERROR - Item 
https://auth.search.serialssolutions.com/auth/Metadata/Shib (UK) was 
marked with the following Error status messages
       [java] ERROR -     check_sp_non_saml2: SP does not support the 
SAML 2 HTTP-POST binding
       [java] ERROR - Item https://www.crcnetbase.com/shibboleth (UK) 
was marked with the following Error status messages
       [java] ERROR -     check_sp_non_saml2: SP does not support the 
SAML 2 HTTP-POST binding
       [java] ERROR - Item https://test.ingentaconnect.com/shibboleth 
(UK) was marked with the following Error status messages
       [java] ERROR -     check_sp_non_saml2: SP does not support the 
SAML 2 HTTP-POST binding
       [java] ERROR - Item https://www.ingentaconnect.com/shibboleth 
(UK) was marked with the following Error status messages
       [java] ERROR -     check_sp_non_saml2: SP does not support the 
SAML 2 HTTP-POST binding
       [java] ERROR - Item 
https://test.worldbank.pub2web.ingenta.com/shibboleth (UK) was marked 
with the following Error status messages
       [java] ERROR -     check_sp_non_saml2: SP does not support the 
SAML 2 HTTP-POST binding
       [java] ERROR - Item https://beta.ingentaconnect.com/shibboleth 
(UK) was marked with the following Error status messages
       [java] ERROR -     check_sp_non_saml2: SP does not support the 
SAML 2 HTTP-POST binding
       [java] ERROR - Item 
https://beta.jbep.pub2web.ingenta.com/shibboleth (UK) was marked with 
the following Error status messages
       [java] ERROR -     check_sp_non_saml2: SP does not support the 
SAML 2 HTTP-POST binding
       [java] ERROR - Item https://www.jbe-platform.com/shibboleth (UK) 
was marked with the following Error status messages
       [java] ERROR -     check_sp_non_saml2: SP does not support the 
SAML 2 HTTP-POST binding
       [java] ERROR - Item 
https://beta.aip.pub2web.ingenta.com/shibboleth (UK) was marked with the 
following Error status messages
       [java] ERROR -     check_sp_non_saml2: SP does not support the 
SAML 2 HTTP-POST binding
       [java] ERROR - Item https://x-oecd-beta-01.ingenta.com/shibboleth 
(UK) was marked with the following Error status messages
       [java] ERROR -     check_sp_non_saml2: SP does not support the 
SAML 2 HTTP-POST binding
       [java] ERROR - Item https://test.oecd-ilibrary.org/shibboleth 
(UK) was marked with the following Error status messages
       [java] ERROR -     check_sp_non_saml2: SP does not support the 
SAML 2 HTTP-POST binding
       [java] ERROR - Item https://www.oecd-ilibrary.org/shibboleth (UK) 
was marked with the following Error status messages
       [java] ERROR -     check_sp_non_saml2: SP does not support the 
SAML 2 HTTP-POST binding
       [java] ERROR - Item 
https://beta.sgm.pub2web.ingenta.com/shibboleth (UK) was marked with the 
following Error status messages
       [java] ERROR -     check_sp_non_saml2: SP does not support the 
SAML 2 HTTP-POST binding
       [java] ERROR - Item 
https://www.microbiologyresearch.org/shibboleth (UK) was marked with the 
following Error status messages
       [java] ERROR -     check_sp_non_saml2: SP does not support the 
SAML 2 HTTP-POST binding
       [java] ERROR - Item https://elixir.mf.uni-lj.si/sp/201506181025 
(SI) was marked with the following Error status messages
       [java] ERROR -     check_reqattr: RequestedAttribute sn lacks 
NameFormat attribute (implicitly 
'urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified')
       [java] ERROR -     check_reqattr: RequestedAttribute givenName 
lacks NameFormat attribute (implicitly 
'urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified')
       [java] ERROR -     check_reqattr: RequestedAttribute mail lacks 
NameFormat attribute (implicitly 
'urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified')
       [java] ERROR -     check_reqattr: RequestedAttribute 
eduPersonPrincipalName lacks NameFormat attribute (implicitly 
'urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified')
       [java] ERROR - Item https://elixir.mf.uni-lj.si/sp/20150622 (SI) 
was marked with the following Error status messages
       [java] ERROR -     check_reqattr: RequestedAttribute sn lacks 
NameFormat attribute (implicitly 
'urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified')
       [java] ERROR -     check_reqattr: RequestedAttribute givenName 
lacks NameFormat attribute (implicitly 
'urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified')
       [java] ERROR -     check_reqattr: RequestedAttribute mail lacks 
NameFormat attribute (implicitly 
'urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified')
       [java] ERROR -     check_reqattr: RequestedAttribute 
eduPersonPrincipalName lacks NameFormat attribute (implicitly 
'urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified')
       [java] ERROR - Item https://idp.renata.edu.co/idp/shibboleth (CO) 
was marked with the following Error status messages
       [java] ERROR -     domainName/publicSuffix: scope is a public 
suffix: 'edu.co'
       [java] ERROR -     domainName/publicSuffix: scope is a public 
suffix: 'edu.co'
       [java] ERROR - Item https://idp.trc.gov.om/idp/shibboleth 
(https://home.trc.gov.om) was marked with the following Error status 
messages
       [java] ERROR -     domainName/publicSuffix: scope is a public 
suffix: 'gov.om'
       [java] ERROR -     domainName/publicSuffix: scope is a public 
suffix: 'gov.om'
       [java] ERROR - Item https://id-dev.unc.edu.ar/idp/shibboleth (AR) 
was marked with the following Error status messages
       [java] ERROR -     domainName/publicSuffix: scope is a public 
suffix: 'edu.ar'
       [echo] Completed incommon report flow.
       [echo] Report complete.

BUILD SUCCESSFUL
Total time: 1 minute 6 seconds
An archive of this and past filter reports is available here:
https://wayf.incommonfederation.org/metadata-diff/md_filter_reports/?C=M;O=D 

If you have questions, please email 
.

- InCommon Federation Operations