Listener won't start after modifying config for Shib IdP delegation plugin configuration

[Brent Putman]

On 4/18/12 4:23 PM, Karla Borecky wrote:
> The only step I didn't do yet was to modify the idp metadata file to
> add an SSO endpoint. I don't know if that's a deal-breaker? Perhaps
> so. Goodness knows the error could be in any one of those files! I
> just started with the first one it complained about. 


If you are still dealing with the "Classpath resource does not exist"
error: no, that wouldn't have anything to do with, nor would any of the
other config files.  That cause of that error is unambiguously that you
aren't running the idp.war that you think you are.



> I sort of figure the internal.xml file must be loaded early on in the
> process, though.


It is.  It is in fact the first one loaded.  See the idp.war's
/WEB-INF/web.xml.  None of this is relevant to your problem though.


>
> I'm attaching the whole shebang. I feel confident the idp.war that
> shows the correct contents is in the right place (/srv/tomcat6/webapps
> - running SLES 11 SP1, FYI.)
>

Well, that is a hint as to the idp.war problem.  We usually don't
recommend that you copy or put the war in the webapps directory because,
amongst other reasons, Tomcat does seemingly unpredictable things with
what it actually deploys, especially if you have it set to unpack the
war.  We recommend that you use a context deployment fragment, as
documented here:


https://wiki.shibboleth.net/confluence/display/SHIB2/IdPApacheTomcatPrepare

That section in the wiki even highlights the exact issue you are
probably experiencing.

--Brent



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120418/0e2fc389/attachment.html