IdP aacli.sh output yields unexpected errors
Kevin P. Foote
kpfoote at iup.edu
Wed Sep 28 20:15:12 BST 2011
Well are you running the aacli command as root then?
I usually don't but ...
-> /data/shibboleth-idp/logs/idp-audit.log (Permission denied)
that kinda points to permissions
------
thanks
kevin.foote
On Wed, 28 Sep 2011, Oleg Chaikovsky wrote:
->
-> I have an IdP 2.3.3 installed on Red Hat Enterprise Linux Server release
-> 5.7. Taking over some troubleshooting. in trying to run aacli.sh in a
-> simple fashion i receive a ton of odd output. (i removed actual
-> directories and usernames) .
->
-> I entered $IDPHOME/bin/aacli.sh --configDIR=$IPDHOME/conf
-> --principal=$USERNAME
->
-> and I get the response below.. and it repeats 3 times..
->
-> It's not even the output I expected, and the log files are there
-> despite the errors below AND they are writeable by root. I'm at a loss
-> to even know where to start looking for the issue. Pointers or ideas on
-> where to look would be great. Thanks.
->
-> ##########################
-> 19:00:20,080 |-INFO in ch.qos.logback.core.joran.action.AppenderAction -
-> About to instantiate appender of type
-> [ch.qos.logback.core.rolling.RollingFileAppender]
-> 19:00:20,080 |-INFO in ch.qos.logback.core.joran.action.AppenderAction -
-> Naming appender as [IDP_AUDIT]
-> 19:00:20,080 |-ERROR in ch.qos.logback.core.joran.spi.Interpreter at 54:25
-> - no applicable action for [ImmediateFlush], current pattern is
-> [[configuration][appender][ImmediateFlush]]
-> 19:00:20,081 |-INFO in c.q.l.core.rolling.TimeBasedRollingPolicy - No
-> compression will be used
-> 19:00:20,081 |-INFO in c.q.l.core.rolling.TimeBasedRollingPolicy - Will
-> use the pattern /data/shibboleth-idp/logs/idp-audit-%d{yyyy-MM-dd}.log
-> for the active file
-> 19:00:20,082 |-INFO in
-> c.q.l.core.rolling.DefaultTimeBasedFileNamingAndTriggeringPolicy - The
-> date pattern is 'yyyy-MM-dd' from file name pattern
-> '/data/shibboleth-idp/logs/idp-audit-%d{yyyy-MM-dd}.log'.
-> 19:00:20,082 |-INFO in
-> c.q.l.core.rolling.DefaultTimeBasedFileNamingAndTriggeringPolicy -
-> Roll-over at midnight.
-> 19:00:20,082 |-INFO in
-> c.q.l.core.rolling.DefaultTimeBasedFileNamingAndTriggeringPolicy -
-> Setting initial period to Wed Sep 21 16:18:08 CDT 2011
-> 19:00:20,087 |-WARN in
-> ch.qos.logback.core.rolling.RollingFileAppender[IDP_AUDIT] - This
-> appender no longer admits a layout as a sub-component, set an encoder
-> instead.
-> 19:00:20,087 |-WARN in
-> ch.qos.logback.core.rolling.RollingFileAppender[IDP_AUDIT] - To ensure
-> compatibility, wrapping your layout in LayoutWrappingEncoder.
-> 19:00:20,087 |-WARN in
-> ch.qos.logback.core.rolling.RollingFileAppender[IDP_AUDIT] - See also
-> http://logback.qos.ch/codes.html#layoutInsteadOfEncoder for details
-> 19:00:20,087 |-INFO in
-> ch.qos.logback.core.rolling.RollingFileAppender[IDP_AUDIT] - Active log
-> file name: /data/shibboleth-idp/logs/idp-audit.log
-> 19:00:20,087 |-INFO in
-> ch.qos.logback.core.rolling.RollingFileAppender[IDP_AUDIT] - File
-> property is set to [/data/shibboleth-idp/logs/idp-audit.log]
-> 19:00:20,087 |-ERROR in
-> ch.qos.logback.core.rolling.RollingFileAppender[IDP_AUDIT] -
-> openFile(/data/shibboleth-idp/logs/idp-audit.log,true) call failed.
-> java.io.FileNotFoundException: /data/shibboleth-idp/logs/idp-audit.log
-> (Permission denied)
-> at java.io.FileNotFoundException:
-> /data/shibboleth-idp/logs/idp-audit.log (Permission denied)
-> at at java.io.FileOutputStream.openAppend(Native Method)
-> at at java.io.FileOutputStream.<init>(FileOutputStream.java:177)
-> at at
-> ch.qos.logback.core.recovery.ResilientFileOutputStream.<init>(ResilientFileOutputStream.java:30)
-> at at
-> ch.qos.logback.core.FileAppender.openFile(FileAppender.java:163)
-> at at
-> ch.qos.logback.core.FileAppender.start(FileAppender.java:115)
-> at at
-> ch.qos.logback.core.rolling.RollingFileAppender.start(RollingFileAppender.java:79)
-> at at
-> ch.qos.logback.core.joran.action.AppenderAction.end(AppenderAction.java:96)
-> at at
-> ch.qos.logback.core.joran.spi.Interpreter.callEndAction(Interpreter.java:315)
-> at at
-> ch.qos.logback.core.joran.spi.Interpreter.endElement(Interpreter.java:194)
-> at at
-> ch.qos.logback.core.joran.spi.Interpreter.endElement(Interpreter.java:180)
-> at at
-> ch.qos.logback.core.joran.spi.EventPlayer.play(EventPlayer.java:52)
-> at at
-> ch.qos.logback.core.joran.spi.Interpreter.play(Interpreter.java:332)
-> at at
-> ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:126)
-> at at
-> ch.qos.logback.core.joran.GenericConfigurator.doConfigure(GenericConfigurator.java:93)
-> at at
-> edu.internet2.middleware.shibboleth.common.log.LogbackConfigurationChangeListener.configureLogback(LogbackConfigurationChangeListener.java:65)
-> at at
-> edu.internet2.middleware.shibboleth.common.log.LogbackConfigurationChangeListener.onResourceCreate(LogbackConfigurationChangeListener.java:38)
-> at at
-> edu.internet2.middleware.shibboleth.common.log.LogbackLoggingService.<init>(LogbackLoggingService.java:51)
-> at at
-> sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
-> at at
-> sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
-> at at
-> sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
-> at at
-> java.lang.reflect.Constructor.newInstance(Constructor.java:513)
-> at at
-> org.springframework.beans.BeanUtils.instantiateClass(BeanUtils.java:100)
-> at at
-> org.springframework.beans.factory.support.SimpleInstantiationStrategy.instantiate(SimpleInstantiationStrategy.java:87)
-> at at
-> org.springframework.beans.factory.support.ConstructorResolver.autowireConstructor(ConstructorResolver.java:248)
-> at at
-> org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.autowireConstructor(AbstractAutowireCapableBeanFactory.java:925)
-> at at
-> org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBeanInstance(AbstractAutowireCapableBeanFactory.java:835)
-> at at
-> org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.doCreateBean(AbstractAutowireCapableBeanFactory.java:440)
-> at at
-> org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory$1.run(AbstractAutowireCapableBeanFactory.java:409)
-> at at java.security.AccessController.doPrivileged(Native Method)
-> at at
-> org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.createBean(AbstractAutowireCapableBeanFactory.java:380)
-> at at
-> org.springframework.beans.factory.support.AbstractBeanFactory$1.getObject(AbstractBeanFactory.java:264)
-> at at
-> org.springframework.beans.factory.support.DefaultSingletonBeanRegistry.getSingleton(DefaultSingletonBeanRegistry.java:222)
-> at at
-> org.springframework.beans.factory.support.AbstractBeanFactory.doGetBean(AbstractBeanFactory.java:261)
-> at at
-> org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:185)
-> at at
-> org.springframework.beans.factory.support.AbstractBeanFactory.getBean(AbstractBeanFactory.java:164)
-> at at
-> org.springframework.beans.factory.support.DefaultListableBeanFactory.preInstantiateSingletons(DefaultListableBeanFactory.java:429)
-> at at
-> org.springframework.context.support.AbstractApplicationContext.finishBeanFactoryInitialization(AbstractApplicationContext.java:728)
-> at at
-> org.springframework.context.support.AbstractApplicationContext.refresh(AbstractApplicationContext.java:380)
-> at at
-> edu.internet2.middleware.shibboleth.common.attribute.AttributeAuthorityCLI.loadConfigurations(AttributeAuthorityCLI.java:199)
-> at at
-> edu.internet2.middleware.shibboleth.common.attribute.AttributeAuthorityCLI.main(AttributeAuthorityCLI.java:90)
->
-> --
-> Oleg Chaikovsky
-> AegisUSA - The Identity Company
-> 714-742-2823
-> http://www.aegisusa.com
->
-> --
-> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
->
More information about the users
mailing list