Hi
Thanks for the response, I don't have an easy way of capturing the exact HTTP messages and my boss doesn't seem happy with the idea of me spending time to set that up and help debug this (though still wants me to fix it, go figure :s). Hopefully I'll get chance to eventually but for now here is the debug that the openid4java library that I'm using logs, I don't know if it's of any use but it's all I have at the moment.
- Starting discovery on URL identifier:
http://yahoo.com/- Yadis discovery succeeded on
http://yahoo.com/- Using Yadis normalized URL as claimedID:
http://www.yahoo.com/- Discovered 1 OpenID endpoints.
- Trying to associate with
https://open.login.yahooapis.com/openid/op/auth attempts left: 4
- Going to buffer response body of large or unknown size. Using getResponseBodyAsStream instead is recommended.
- Association attempt failed.
- Going to buffer response body of large or unknown size. Using getResponseBodyAsStream instead is recommended.
- Associated with
https://open.login.yahooapis.com/openid/op/auth handle: wbMOm5dy6dlF_HbK5IdSTAscp7c8DFzFORHzcDXq4GboJM4kyJCqUmv9hI0YuHSouWPGDCfAOo5R7w0A
YbSJQK1hmBTvIHtTWOdIpP70FAoOhORMJxUtDboU8Vnz6RMV
- Trying to associate with
https://open.login.yahooapis.com/openid/op/auth attempts left: 4
- Found an existing association.
- Creating authentication request for OP-endpoint:
https://open.login.yahooapis.com/openid/op/auth claimedID:
http://specs.openid.net/auth/2.0/identifier_select OP-specific ID:
http://specs.openid.net/auth/2.0/identifier_select- Return URL:
http://myserver.com/testO/servlet/ep.blank...mp;openIdResp=y matches realm:
http://myserver.com/testO/servlet/ep.blank...mp;openIdResp=y- Yadis discovery succeeded on
http://myserver.com/testO/servlet/ep.blank...mp;openIdResp=y- Return URL:
http://myserver.com/testO/servlet/ep.blank...mp;openIdResp=y matches realm:
http://myserver.com/testO/- Return URL:
http://myserver.com/testO/servlet/ep.blank...mp;openIdResp=y matched discovered RP endpoint:
http://myserver.com/testO/- Return URL:
http://myserver.com/testO/servlet/ep.blank...mp;openIdResp=y matches realm:
http://myserver.com/testO/servlet/ep.blank...mp;openIdResp=y- Yadis discovery succeeded on
http://myserver.com/testO/servlet/ep.blank...mp;openIdResp=y- Return URL:
http://myserver.com/testO/servlet/ep.blank...mp;openIdResp=y matches realm:
http://myserver.com/testO/- Return URL:
http://myserver.com/testO/servlet/ep.blank...mp;openIdResp=y matched discovered RP endpoint:
http://myserver.com/testO/- Verifying authentication response...
- Received positive auth response.
- Starting discovery on URL identifier:
https://me.yahoo.com/a/Cql4tXgUpfLuruBICxEp...tgscnHW9Fo.1w--- Creating transaction G211079
- Yadis discovery succeeded on
https://me.yahoo.com/a/Cql4tXgUpfLuruBICxEp...tgscnHW9Fo.1w--- Using Yadis normalized URL as claimedID:
https://me.yahoo.com/a/Cql4tXgUpfLuruBICxEp...tgscnHW9Fo.1w--- Discovered 1 OpenID endpoints.
- No association found, contacting the OP for direct verification...
- Going to buffer response body of large or unknown size. Using getResponseBodyAsStream instead is recommended.
- Verification failed for: null reason: Direct signature verification failed.
By the way, the server isn't really called "myserver.com", it's on a publicly accessable web address as it should be, I've just edit the logs to remove the business name and save myself some embarrassment.
