<style>
/* Changing the layout to use less space for mobiles */
@media screen and (max-device-width: 480px), screen and (-webkit-min-device-pixel-ratio: 2) {
    #email-body { min-width: 30em !important; }
    #email-page { padding: 8px !important; }
    #email-banner { padding: 8px 8px 0 8px !important; }
    #email-avatar { margin: 1px 8px 8px 0 !important; padding: 0 !important; }
    #email-fields { padding: 0 8px 8px 8px !important; }
    #email-gutter { width: 0 !important; }
}
</style>
<div id="email-body">
<table id="email-wrap" align="center" border="0" cellpadding="0" cellspacing="0" style="background-color:#f0f0f0;color:#000000;width:100%;">
    <tr valign="top">
        <td id="email-page" style="padding:16px !important;">
            <table align="center" border="0" cellpadding="0" cellspacing="0" style="background-color:#ffffff;border:1px solid #bbbbbb;color:#000000;width:100%;">
                <tr valign="top">
                    <td bgcolor="#ffffff" style="background-color:#ffffff;color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;line-height:1;"><img src="https://shibboleth.net/images/shib_240x83.png" alt="" style="vertical-align:top;" /></td>
                </tr><tr valign="top">
    <td id="email-banner" style="padding:32px 32px 0 32px;">

                
        
        
            <table align="left" border="0" cellpadding="0" cellspacing="0" width="100%" style="width:100%;">
    <tr valign="top">
        <td style="color:#505050;font-family:Arial,FreeSans,Helvetica,sans-serif;padding:0;">
                                        <img id="email-avatar" src="https://issues.shibboleth.net/jira/secure/useravatar?avatarId=10202" alt="" height="48" width="48" border="0" align="left" style="padding:0;margin: 0 16px 16px 0;" />
                        <div id="email-action" style="padding: 0 0 8px 0;font-size:12px;line-height:18px;">
                                    <a class="user-hover" rel="martin.haase@idp.protectnetwork.org" id="email_martin.haase@idp.protectnetwork.org" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=martin.haase%40idp.protectnetwork.org" style="color:#326ca6;">martin.haase@idp.protectnetwork.org</a>
     commented on <img src="https://issues.shibboleth.net/jira/images/icons/issuetypes/bug.png" height="16" width="16" border="0" align="absmiddle" alt="Bug"> <a style='color:#326ca6;text-decoration:none;' href='https://issues.shibboleth.net/jira/browse/SIDP-597'>SIDP-597</a>
            </div>
                        <div id="email-summary" style="font-size:16px;line-height:20px;padding:2px 0 16px 0;">
                <a style='color:#326ca6;text-decoration:none;' href='https://issues.shibboleth.net/jira/browse/SIDP-597'><strong>IdP stopping metadata retrieval</strong></a>
            </div>
                    </td>
    </tr>
</table>
    </td>
</tr>
<tr valign="top">
    <td id="email-fields" style="padding:0 32px 32px 32px;">
        <table border="0" cellpadding="0" cellspacing="0" style="padding:0;text-align:left;width:100%;" width="100%">
            <tr valign="top">
                <td id="email-gutter" style="width:64px;white-space:nowrap;"></td>
                <td>
                    <table border="0" cellpadding="0" cellspacing="0" width="100%">
                        <tr valign="top">
    <td colspan="2" style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 16px 0;width:100%;">
        <div class="comment-block" style="background-color:#edf5ff;border:1px solid #dddddd;color:#000000;padding:12px;"><p>I'm afraid there's nothing valuable in the logs. Tomcat logs around last successful metadata retrieval time (=attempt) contain nothing. IdP logs at that time just tell that this line:<br/>
02:13:16.817 - INFO <span class="error">&#91;edu.internet2.middleware.shibboleth.common.security.MetadataPKIXValidationInformationResolver:803&#93;</span> - PKIX validation info cache cleared<br/>
... (always coming twice) stops occuring at exactly the last successful metadata retrieval time .</p>

<p>On the 2.4.0 IdP I cannot see more. In the 2.3.6, there's this:</p>

<p>02:13:16.746 - ERROR <span class="error">&#91;org.opensaml.saml2.metadata.provider.HTTPMetadataProvider:273&#93;</span> - Error retrieving metadata from <a href="http://wayf.uni-osnabrueck.de/metadata/ndsaai-metadata.xml" class="external-link">http://wayf.uni-osnabrueck.de/metadata/ndsaai-metadata.xml</a><br/>
org.apache.commons.httpclient.ConnectTimeoutException: The host did not accept the connection within timeout of 5000 ms<br/>
        at org.apache.commons.httpclient.protocol.ReflectionSocketFactory.createSocket(ReflectionSocketFactory.java:155) ~<span class="error">&#91;commons-httpclient-3.1.jar:na&#93;</span><br/>
        at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(DefaultProtocolSocketFactory.java:125) ~<span class="error">&#91;commons-httpclient-3.1.jar:na&#93;</span><br/>
        at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:707) ~<span class="error">&#91;commons-httpclient-3.1.jar:na&#93;</span><br/>
        at org.apache.commons.httpclient.MultiThreadedHttpConnectionManager$HttpConnectionAdapter.open(MultiThreadedHttpConnectionManager.java:1361) ~<span class="error">&#91;commons-httpclient-3.1.jar:na&#93;</span><br/>
        at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:387) ~<span class="error">&#91;commons-httpclient-3.1.jar:na&#93;</span><br/>
        at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:171) ~<span class="error">&#91;commons-httpclient-3.1.jar:na&#93;</span><br/>
        at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:397) ~<span class="error">&#91;commons-httpclient-3.1.jar:na&#93;</span><br/>
        at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:323) ~<span class="error">&#91;commons-httpclient-3.1.jar:na&#93;</span><br/>
        at org.opensaml.saml2.metadata.provider.HTTPMetadataProvider.fetchMetadata(HTTPMetadataProvider.java:250) ~<span class="error">&#91;opensaml-2.5.3.jar:na&#93;</span><br/>
        at org.opensaml.saml2.metadata.provider.FileBackedHTTPMetadataProvider.fetchMetadata(FileBackedHTTPMetadataProvider.java:129) <span class="error">&#91;opensaml-2.5.3.jar:na&#93;</span><br/>
        at org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider.refresh(AbstractReloadingMetadataProvider.java:255) <span class="error">&#91;opensaml-2.5.3.jar:na&#93;</span><br/>
        at org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider$RefreshMetadataTask.run(AbstractReloadingMetadataProvider.java:508) <span class="error">&#91;opensaml-2.5.3.jar:na&#93;</span><br/>
        at java.util.TimerThread.mainLoop(Timer.java:534) <span class="error">&#91;na:1.6.0_20&#93;</span><br/>
        at java.util.TimerThread.run(Timer.java:484) <span class="error">&#91;na:1.6.0_20&#93;</span><br/>
Caused by: java.net.SocketTimeoutException: connect timed out<br/>
        at java.net.PlainSocketImpl.socketConnect(Native Method) ~<span class="error">&#91;na:1.6.0_20&#93;</span><br/>
        at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:327) ~<span class="error">&#91;na:1.6.0_20&#93;</span><br/>
        at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:193) ~<span class="error">&#91;na:1.6.0_20&#93;</span><br/>
        at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:180) ~<span class="error">&#91;na:1.6.0_20&#93;</span><br/>
        at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:384) ~<span class="error">&#91;na:1.6.0_20&#93;</span><br/>
        at java.net.Socket.connect(Socket.java:546) ~<span class="error">&#91;na:1.6.0_20&#93;</span><br/>
        at sun.reflect.GeneratedMethodAccessor41.invoke(Unknown Source) ~<span class="error">&#91;na:na&#93;</span><br/>
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) ~<span class="error">&#91;na:1.6.0_20&#93;</span><br/>
        at java.lang.reflect.Method.invoke(Method.java:616) ~<span class="error">&#91;na:1.6.0_20&#93;</span><br/>
        at org.apache.commons.httpclient.protocol.ReflectionSocketFactory.createSocket(ReflectionSocketFactory.java:140) ~<span class="error">&#91;commons-httpclient-3.1.jar:na&#93;</span><br/>
        ... 13 common frames omitted<br/>
02:13:16.817 - INFO <span class="error">&#91;edu.internet2.middleware.shibboleth.common.security.MetadataPKIXValidationInformationResolver:803&#93;</span> - PKIX validation info cache cleared<br/>
02:13:16.818 - INFO <span class="error">&#91;edu.internet2.middleware.shibboleth.common.security.MetadataPKIXValidationInformationResolver:803&#93;</span> - PKIX validation info cache cleared</p>

<p>...and no more /metadata/i occurences from here on (except two very last "PKIX validation info cache cleared" lines)</p>



</div>
        <div style="color:#505050;padding:4px 0 0 0;">                </div>
    </td>
</tr>
                    </table>
                </td>
            </tr>
        </table>
    </td>
</tr>













            </table>
        </td><!-- End #email-page -->
    </tr>
    <tr valign="top">
        <td style="color:#505050;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:10px;line-height:14px;padding: 0 16px 16px 16px;text-align:center;">
            This message is automatically generated by JIRA.<br />
            If you think it was sent incorrectly, please contact your JIRA administrators<br />
            For more information on JIRA, see: <a style='color:#326ca6;' href='http://www.atlassian.com/software/jira'>http://www.atlassian.com/software/jira</a>
        </td>
    </tr>
</table><!-- End #email-wrap -->
</div><!-- End #email-body -->