Moonshot
Page tree

Versions Compared

Old Version 15

changes.mady.by.user Stefan Paetow

Saved on

compared with

New Version 16

changes.mady.by.user Stefan Paetow

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Panel
bgColor#fff
  1. There appears to be a problem with either your credentials or with the RP realm that you specified.
  2. Check that you have imported the credentials file as the FreeRADIUS user, and that you are running the TIDC command as the same user.
  3. Check that the value of your RP realm is correct and the same as the one you specified when you applied for credentials at JANET.

 

Problem

I can't seem to be able to connect my service to the trust router infrastructure. It seems to start but then I get the following error when running the TIDC command:

tidc_open_connection: Opening GSS connection to tr1.moonshot.ja.net:12309.gss_connect: Connecting to host 'tr1.moonshot.ja.net' on port 12309
CTRL-EVENT-EAP-STARTED EAP authentication started
:
:
CTRL-EVENT-EAP-SUCCESS EAP authentication completed successfully
tidc_fwd_request: Sending TID request: {"msg_type": "tid_request", "msg_body": {"rp_realm": "my RP realm", "target_realm": "apc.moonshot.ja.net", "community": "apc.moonshot.ja.net", ...}
tidc_fwd_request: Response Received (198 bytes).
{"msg_type": "tid_response", "msg_body": {"result": "error", "err_msg": "RP Realm filter error", "rp_realm": "my RP realm", "target_realm": "apc.moonshot.ja.net", "comm": "apc.moonshot.ja.net"}, "msg_type": "tid_response"}
tr_msg_decode_tidresp(): Error! result = error.
Response received! Realm = apc.moonshot.ja.net, Community = apc.moonshot.ja.net.
tidc_resp_handler: Response is an error.

Solution:

Panel
bgColor#fff
  1. There appears to be a problem with the RP realm that you specified.
  2. Check that:
    1. the value of your RP realm is the same as the one you specified when you applied for credentials at JANET
    2. the value of your RP realm is specified in the second parameter of the TIDC command-line
    3. you have not specified your ID Provider realm by accident, if it differs from your RP realm.

 

More to come...