<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0" /> <base href="https://issues.shibboleth.net/jira" />
<title>Message Title</title>
</head>
<body class="jira" style="color: #333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<!-- header here -->
<tr>
<td id="header-pattern-container" style="padding: 0px; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0px; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px"> <img id="header-avatar-image" class="image_fix" src="cid:jira-generated-image-avatar-a230226d-f08b-44ab-b025-c072b14e9218" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top" />
</td>
<td id="header-text-container" valign="middle" style="padding: 0px; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="mbrookov@mines.edu" id="email_mbrookov@mines.edu" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=mbrookov%40mines.edu" style="color:#3b73af;; color: #3b73af; text-decoration: none">Matthew B</a> <strong>commented</strong> on <a href="https://issues.shibboleth.net/jira/browse/IDP-1122" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-3f92d1c0-1424-4c94-a9c1-6786ff50c08f" height="16" width="16" border="0" align="absmiddle" alt="Bug" /> IDP-1122</a>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0px; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-spacing: 0; border-collapse: separate">
<tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0px; border-collapse: collapse; color: #fff; padding: 0 15px 0 16px; height: 15px; background-color: #fff; border-left: 1px solid #ccc; border-top: 1px solid #ccc; border-right: 1px solid #ccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly">
</td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #ccc; border-right: 1px solid #ccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #fff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td style="vertical-align: top;; padding: 0px; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1122" style="color: #3b73af; text-decoration: none">Re: mdui:Description from metadata not showing up on Shibboleth 3.3 login page</a> </span>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td id="text-paragraph-pattern-top" class="email-content-main mobile-expand comment-top-pattern" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #ccc; border-right: 1px solid #ccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #fff; border-bottom: none; padding-bottom: 0">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0px; border-collapse: collapse; padding: 0 0 10px 0">
<p style="margin: 10px 0 0 0">This time it worked. I actually did three builds this morning. The third time I ran install.sh as the jetty user. My security folks will never allow that in production, but for a test, it did work, which suggests this is a file permission problem. I have not seen any permission denied errors or any file not found errors in the logs that I have scrolled through. Admittedly, some of the logs are quite extensive. At this point, I think I am going to try to run java under strace, search for calls to open(2) that failed in /usr/local/shibboleth3.</p>
<p style="margin: 10px 0 0 0">For completeness sake, I attached the screen shot "Shibboleth login screen 2017-02-22 at 9.25.19 AM.png", this is what I did on that last build:<br /> <span class="error">[root@merlin local]</span># mkdir shibboleth3<br /> <span class="error">[root@merlin local]</span># chown jetty.jetty shibboleth3<br /> <span class="error">[root@merlin local]</span># chmod 2770 shibboleth3 !Shibboleth login screen 2017-02-22 at 9.25.19 AM.png|thumbnail! <br /> <span class="error">[root@merlin local]</span># su - jetty<br /> <span class="error">[jetty@merlin ~]</span>$ cd /usr/local/src/shibboleth3/shibboleth-identity-provider-3.3.0<br /> <span class="error">[jetty@merlin shibboleth-identity-provider-3.3.0]</span>$ export JAVA_HOME=/usr/local/java/jdk1.8.0_121<br /> <span class="error">[jetty@merlin shibboleth-identity-provider-3.3.0]</span>$ export PATH=$</p> {JAVA_HOME}/bin:$PATH<br /> <span class="error">[jetty@merlin shibboleth-identity-provider-3.3.0]</span>$ export IDPHOME=/usr/local/shibboleth3<br /> <span class="error">[jetty@merlin shibboleth-identity-provider-3.3.0]</span>$ export JETTY_HOME=/usr/local/jetty-distribution-9.3.16.v20170120/<br /> <span class="error">[jetty@merlin shibboleth-identity-provider-3.3.0]</span>$ export JETTY_BASE=/usr/local/jetty-base/<br /> <span class="error">[jetty@merlin shibboleth-identity-provider-3.3.0]</span>$ java -version<br /> java version "1.8.0_121"<br /> Java(TM) SE Runtime Environment (build 1.8.0_121-b13)<br /> Java HotSpot(TM) 64-Bit Server VM (build 25.121-b13, mixed mode)<br /> <span class="error">[jetty@merlin shibboleth-identity-provider-3.3.0]</span>$ cd /usr/local/src/shibboleth3/shibboleth-identity-provider-3.3.0<br /> <span class="error">[jetty@merlin shibboleth-identity-provider-3.3.0]</span>$ ./bin/install.sh<br /> Source (Distribution) Directory (press <enter> to accept default: <span class="error">[/usr/local/src/shibboleth3/shibboleth-identity-provider-3.3.0]</span><br /> <br /> Installation Directory: <span class="error">[/opt/shibboleth-idp]</span><br /> /usr/local/shibboleth3<br /> Hostname: <span class="error">[merlin.mines.edu]</span><br /> <br /> SAML EntityID: <a href="https://merlin.mines.edu/idp/shibboleth" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">https://merlin.mines.edu/idp/shibboleth</a><br /> <br /> Attribute Scope: <span class="error">[mines.edu]</span><br /> <br /> Backchannel PKCS12 Password: <br /> Re-enter password: <br /> Cookie Encryption Key Password: <br /> Re-enter password: <br /> Warning: /usr/local/shibboleth3/bin does not exist.<br /> Warning: /usr/local/shibboleth3/dist does not exist.<br /> Warning: /usr/local/shibboleth3/doc does not exist.<br /> Warning: /usr/local/shibboleth3/system does not exist.<br /> Warning: /usr/local/shibboleth3/webapp does not exist.<br /> Generating Signing Key, CN = merlin.mines.edu URI = <a href="https://merlin.mines.edu/idp/shibboleth" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">https://merlin.mines.edu/idp/shibboleth</a> ...<br /> ...done<br /> Creating Encryption Key, CN = merlin.mines.edu URI = <a href="https://merlin.mines.edu/idp/shibboleth" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">https://merlin.mines.edu/idp/shibboleth</a> ...<br /> ...done<br /> Creating Backchannel keystore, CN = merlin.mines.edu URI = <a href="https://merlin.mines.edu/idp/shibboleth" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">https://merlin.mines.edu/idp/shibboleth</a> ...<br /> ...done<br /> Creating cookie encryption key files...<br /> ...done<br /> Rebuilding /usr/local/shibboleth3/war/idp.war ...<br /> ...done<br /> <br /> BUILD SUCCESSFUL<br /> Total time: 33 seconds<br /> <span class="error">[jetty@merlin shibboleth-identity-provider-3.3.0]</span>$ cd /usr/local/shibboleth3/conf<br /> <span class="error">[jetty@merlin conf]</span>$ cp metadata-providers.xml metadata-providers.xml.20170222<br /> <span class="error">[jetty@merlin conf]</span>$ vi metadata-providers.xml<br /> <span class="error">[jetty@merlin conf]</span>$ diff metadata-providers.xml metadata-providers.xml.20170222 <br /> 38,50c38<br /> < <MetadataProvider id="InCommonMetaData"<br /> < xsi:type="FileBackedHTTPMetadataProvider"<br /> < backingFile="%{idp.home}/metadata/InCommon-metadata.xml"<br /> < metadataURL="http://md.incommon.org/InCommon/InCommon-metadata.xml"><br /> < <br /> < <MetadataFilter xsi:type="SignatureValidation" certificateFile="/usr/local/var/metadata/inc-md-cert.pem"<br /> < requireSignedRoot="true"/><br /> < <MetadataFilter xsi:type="RequiredValidUntil" maxValidityInterval="P30D"/><br /> < <MetadataFilter xsi:type="EntityRoleWhiteList"><br /> < <RetainedRole>md:SPSSODescriptor</RetainedRole><br /> < </MetadataFilter><br /> < </MetadataProvider><br /> < <br /> —<br /> > <br /> <span class="error">[jetty@merlin conf]</span>$ exit<br /> logout<br /> <span class="error">[root@merlin local]</span># export JAVA_HOME=/usr/local/java/jdk1.8.0_121<br /> <span class="error">[root@merlin local]</span># export PATH=${JAVA_HOME}
<p style="margin: 10px 0 0 0">/bin:$PATH<br /> <span class="error">[root@merlin local]</span># export IDPHOME=/usr/local/shibboleth3<br /> <span class="error">[root@merlin local]</span># export JETTY_HOME=/usr/local/jetty-distribution-9.3.16.v20170120/<br /> <span class="error">[root@merlin local]</span># export JETTY_BASE=/usr/local/jetty-base/<br /> <span class="error">[root@merlin local]</span># cd $JETTY_BASE<br /> <span class="error">[root@merlin jetty-base]</span># java -jar $JETTY_HOME/start.jar<br /> Java HotSpot(TM) 64-Bit Server VM warning: ignoring option MaxPermSize=128m; support was removed in 8.0<br /> Feb 22, 2017 9:19:53 AM org.eclipse.jetty.util.log.Log initialized<br /> INFO: Logging initialized @122ms<br /> Feb 22, 2017 9:19:53 AM sun.reflect.NativeMethodAccessorImpl invoke0<br /> INFO: Redirecting stderr/stdout to /usr/local/jetty-base/logs/2017_02_22.stderrout.log<br /> Feb 22, 2017 9:19:53 AM org.eclipse.jetty.setuid.SetUIDListener lifeCycleStarting<br /> INFO: Setting umask=07<br /> Feb 22, 2017 9:19:53 AM org.eclipse.jetty.setuid.SetUIDListener lifeCycleStarting<br /> INFO: Opened ServerConnector@3234e239</p> {SSL,[ssl, http/1.1]}{0.0.0.0:8443}<br /> Feb 22, 2017 9:19:53 AM org.eclipse.jetty.setuid.SetUIDListener lifeCycleStarting<br /> INFO: Opened ServerConnector@3d921e20{HTTP/1.1,[http/1.1]}{0.0.0.0:80}<br /> Feb 22, 2017 9:19:53 AM org.eclipse.jetty.setuid.SetUIDListener lifeCycleStarting<br /> INFO: Opened ServerConnector@36b4cef0{SSL,[ssl, http/1.1]} {0.0.0.0:443}
<p style="margin: 10px 0 0 0">Feb 22, 2017 9:19:53 AM org.eclipse.jetty.setuid.SetUIDListener setGidUid<br /> INFO: Setting GID=150001<br /> Feb 22, 2017 9:19:53 AM org.eclipse.jetty.setuid.SetUIDListener setGidUid<br /> INFO: Setting UID=150001<br /> Feb 22, 2017 9:19:53 AM org.eclipse.jetty.server.Server doStart<br /> INFO: jetty-9.3.16.v20170120<br /> Feb 22, 2017 9:19:53 AM org.eclipse.jetty.deploy.providers.ScanningAppProvider doStart<br /> INFO: Deployment monitor <a href="file:///usr/local/jetty-base/webapps/" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">file:///usr/local/jetty-base/webapps/</a> at interval 1<br /> Feb 22, 2017 9:19:54 AM org.eclipse.jetty.server.handler.ContextHandler doStart<br /> INFO: Started o.e.j.w.WebAppContext@5d11346a</p> {/HelloWorld,file:///usr/local/jetty-base/tmp/jetty-0.0.0.0-8443-HelloWorld.war-_HelloWorld-any-1268695676976213805.dir/webapp/,AVAILABLE} {/HelloWorld.war}
<p style="margin: 10px 0 0 0">Feb 22, 2017 9:19:58 AM org.eclipse.jetty.annotations.AnnotationConfiguration scanForAnnotations<br /> INFO: Scanning elapsed time=2870ms<br /> Feb 22, 2017 9:19:58 AM org.eclipse.jetty.server.handler.ContextHandler$Context log<br /> INFO: No Spring WebApplicationInitializer types detected on classpath<br /> Feb 22, 2017 9:19:58 AM org.eclipse.jetty.security.ConstraintSecurityHandler checkPathsWithUncoveredHttpMethods<br /> WARNING: ServletContext@o.e.j.w.WebAppContext@43195e57</p> {/idp,[file:///usr/local/jetty-base/tmp/jetty-0.0.0.0-8443-idp.war-_idp-any-562969357959133932.dir/webinf/, jar:file:///usr/local/shibboleth3/war/idp.war!/],STARTING} {/usr/local/shibboleth3/war/idp.war} has uncovered http methods <br /> for path: /*<br /> Feb 22, 2017 9:19:58 AM org.eclipse.jetty.server.handler.ContextHandler$Context log<br /> INFO: Initializing Spring root WebApplicationContext<br /> Feb 22, 2017 9:20:11 AM org.eclipse.jetty.server.handler.ContextHandler$Context log<br /> INFO: Initializing Spring FrameworkServlet 'idp'<br /> Feb 22, 2017 9:20:12 AM org.eclipse.jetty.server.handler.ContextHandler doStart<br /> INFO: Started o.e.j.w.WebAppContext@43195e57{/idp,[file:///usr/local/jetty-base/tmp/jetty-0.0.0.0-8443-idp.war-_idp-any-562969357959133932.dir/webinf/, jar:file:///usr/local/shibboleth3/war/idp.war!/],AVAILABLE}{/usr/local/shibboleth3/war/idp.war}
<p style="margin: 10px 0 0 0">Feb 22, 2017 9:20:12 AM org.eclipse.jetty.annotations.AnnotationConfiguration scanForAnnotations<br /> INFO: Scanning elapsed time=26ms<br /> Feb 22, 2017 9:20:12 AM org.eclipse.jetty.server.handler.ContextHandler doStart<br /> INFO: Started o.e.j.w.WebAppContext@2e3252</p> {/,file:///usr/local/jetty-base/webapps/ROOT/,AVAILABLE} {/ROOT}
<p style="margin: 10px 0 0 0">Feb 22, 2017 9:20:12 AM org.eclipse.jetty.server.AbstractConnector doStart<br /> INFO: Started ServerConnector@3d921e20</p> {HTTP/1.1,[http/1.1]} {0.0.0.0:80}
<p style="margin: 10px 0 0 0">Feb 22, 2017 9:20:12 AM org.eclipse.jetty.util.ssl.SslContextFactory load<br /> INFO: x509=X509@63a7781(1,h=<span class="error">[idp.mines.edu, www.idp.mines.edu]</span>,w=[]) for SslContextFactory@73b74615(<a href="file:///usr/local/jetty-base/etc/idp.keystore,null" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">file:///usr/local/jetty-base/etc/idp.keystore,null</a>)<br /> Feb 22, 2017 9:20:12 AM org.eclipse.jetty.server.AbstractConnector doStart<br /> INFO: Started ServerConnector@36b4cef0</p> {SSL,[ssl, http/1.1]} {0.0.0.0:443}
<hr />
<p style="margin: 10px 0 0 0">Matt</p>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #ccc; border-right: 1px solid #ccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #fff">
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0px; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0px; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1122#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-d52e18ca-aa88-4862-bff1-fe3ea1e24418" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle" /> </a>
</td>
<td class="actions-pattern-action-text-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://issues.shibboleth.net/jira/browse/IDP-1122#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0px; border-collapse: collapse; color: #fff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #fff; border-top: 0; border-left: 1px solid #ccc; border-bottom: 1px solid #ccc; border-right: 1px solid #ccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly">
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0px; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0px; border-collapse: collapse; color: #999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px">
This message was sent by Atlassian JIRA <span id="footer-build-information">(v7.0.10#70120-<span title="37e3d7a6fc4d580639533e7f7c232c925e554a6a" data-commit-id="37e3d7a6fc4d580639533e7f7c232c925e554a6a}">sha1:37e3d7a</span>)</span>
</td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0px; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0px; border-collapse: collapse; padding-top: 3px"> <img id="footer-pattern-logo-desktop" src="cid:jira-generated-image-static-footer-desktop-logo-cb0a5869-2267-418e-94f2-13c119091051" alt="Atlassian logo" title="Atlassian logo" width="169" height="36" class="image_fix" />
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</body>
</html>