Shibboleth SP crashing during signature computation

[Rob Whitener]

Hello,

Things were going pretty smoothly with our Shibboleth SP installation and
configuration and suddenly today, the shibd process appears to be crashing
during the computation of the signature after receiving a response from the
IDP (I think).  Here is what I am seeing in the
/var/log/shibboleth/shibd.log when it goes down:

2012-07-12 19:41:42 DEBUG Shibboleth.Listener [1]: dispatching message
(default::getHeaders::Application)
2012-07-12 19:41:42 DEBUG Shibboleth.Listener [1]: dispatching message
(default/Login::run::SAML2SI)
2012-07-12 19:41:42 DEBUG OpenSAML.MessageEncoder.SAML2POST [1]: validating
input
2012-07-12 19:41:42 DEBUG OpenSAML.MessageEncoder.SAML2POST [1]: signing
and marshalling the message
2012-07-12 19:41:42 DEBUG XMLTooling.Signature [1]: applying signature
2012-07-12 19:41:42 DEBUG XMLTooling.Signature [1]: creating signature
reference(s)
2012-07-12 19:41:42 DEBUG XMLTooling.Signature [1]: computing signature

And over in syslog, I see this:

ul 12 19:41:42 ip-10-90-230-192 shibboleth-sp: 1342122102 DEBUG
Shibboleth.Listener [19926] shib_check_user: sending message
(default::getHeaders::Application)
Jul 12 19:41:42 ip-10-90-230-192 shibboleth-sp: 1342122102 DEBUG
Shibboleth.Listener [19926] shib_check_user: trying to connect to listener
Jul 12 19:41:42 ip-10-90-230-192 shibboleth-sp: 1342122102 DEBUG
Shibboleth.Listener [19926] shib_check_user: socket (50) connected
successfully
Jul 12 19:41:42 ip-10-90-230-192 shibboleth-sp: 1342122102 DEBUG
Shibboleth.Listener [19926] shib_check_user: send completed, reading
response message
Jul 12 19:41:42 ip-10-90-230-192 shibboleth-sp: 1342122102 DEBUG
Shibboleth.SessionInitiator.SAML2 [19926] shib_check_user: attempting to
initiate session using SAML 2.0 with provider (https://REDACTED
/sps/idp_saml20/saml20)
Jul 12 19:41:42 ip-10-90-230-192 shibboleth-sp: 1342122102 DEBUG
Shibboleth.Listener [19926] shib_check_user: sending message
(default/Login::run::SAML2SI)
Jul 12 19:41:42 ip-10-90-230-192 shibboleth-sp: 1342122102 DEBUG
Shibboleth.Listener [19926] shib_check_user: send completed, reading
response message
Jul 12 19:41:42 ip-10-90-230-192 shibboleth-sp: 1342122102 ERROR
Shibboleth.Listener [19926] shib_check_user: error reading size of output
message
Jul 12 19:41:42 ip-10-90-230-192 shibboleth-sp: 1342122102 ERROR
Shibboleth.Apache [19926] shib_check_user: Failure receiving response to
remoted message (default/Login::run::SAML2SI).
Jul 12 19:41:42 ip-10-90-230-192 shibboleth-sp: 1342122102 DEBUG
Shibboleth.Apache [23272] shib_auth_checker: mapped
https://www.dev.careverge.com/shibboleth-sp/main.css to default
Jul 12 19:41:42 ip-10-90-230-192 shibboleth-sp: 1342122102 DEBUG
Shibboleth.Apache [23272] shib_auth_checker: mapped
https://www.dev.careverge.com/shibboleth-sp/logo.jpg to default


Our partner is using a Tivoly SAML solution.  Beyond syslog and shibd.log,
is there another place I can look to help debug this?  Has anyone seen this
problem before?  Also, I am using an unsupported version on an unsupported
OS: Shibboleth 2.3.1 on Ubuntu 10.04.

Thanks,

Rob
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120712/f2661e7b/attachment.html