Discovery Service/WAYF v1.2.1 Shibboleth service provider and simpleSAMLphp - cannot recognize federation metadata

Coeus[TM] coeus.ph at gmail.com
Thu Jun 7 11:12:10 BST 2012


> So the usual sort of questions -
> - what does logging show?

shibd.log
---------
2012-06-07 08:21:52 INFO OpenSAML.MetadataProvider.XML : reloading
remote resource...

2012-06-07 08:21:52 INFO OpenSAML.MetadataProvider.XML : remote
resource (https://metadata.wayf.dk/birk-idp.xml) unchanged, adjusted
reload interval to 180000 seconds

2012-06-07 08:21:52 INFO OpenSAML.MetadataProvider.XML : using local
backup of remote resource

2012-06-07 08:21:52 INFO OpenSAML.MetadataProvider.XML : loaded XML
resource (/etc/shibboleth/federations/birk-idp.xml)

2012-06-07 08:21:52 ERROR OpenSAML.MetadataProvider.XML : metadata
intance failed manual validation checking: EmailAddress must have
TextContent.

2012-06-07 08:21:52 CRIT OpenSAML.MetadataProvider.XML : maintaining
existing configuration, error reloading resource
(https://metadata.wayf.dk/birk-idp.xml): Metadata instance failed
manual validation checking.

shib_warn.log
-------------
2012-06-07 08:21:52 ERROR OpenSAML.MetadataProvider.XML : metadata
intance failed manual validation checking: EmailAddress must have
TextContent.

2012-06-07 08:21:52 CRIT OpenSAML.MetadataProvider.XML : maintaining
existing configuration, error reloading resource
(https://metadata.wayf.dk/birk-idp.xml): Metadata instance failed
manual validation checking.

Test #1:
showUnusableIdPs=true,
federation metadata=https://metadata.wayf.dk/birk-idp.xml
discovery page was not able to load and
resulted to an error in the jboss logs:

jboss log
---------
09:52:12,385 WARN  [HDScanner] Scan failed
java.lang.OutOfMemoryError: Java heap space

2012-06-07 10:17:24,210 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[localhost].[/discovery].[WAYF]]
(ajp-192.168.59.24-8009-2) Allocate exception for servlet WAYF
java.lang.NullPointerException
	at org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider.refresh(AbstractReloadingMetadataProvider.java:269)
	at org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider.doInitialization(AbstractReloadingMetadataProvider.java:236)
	at org.opensaml.saml2.metadata.provider.AbstractMetadataProvider.initialize(AbstractMetadataProvider.java:407)
	at edu.internet2.middleware.shibboleth.wayf.IdPSiteSet.<init>(IdPSiteSet.java:179)
	at edu.internet2.middleware.shibboleth.wayf.WayfService.init(WayfService.java:181)
	at javax.servlet.GenericServlet.init(GenericServlet.java:212)
	at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1048)
	at org.apache.catalina.core.StandardWrapper.allocate(StandardWrapper.java:777)
	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:129)
	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
	at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:190)
	at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:92)
	at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.process(SecurityContextEstablishmentValve.java:126)
	at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.invoke(SecurityContextEstablishmentValve.java:70)
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
	at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:158)
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:330)
	at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:436)
	at org.apache.coyote.ajp.AjpProtocol$AjpConnectionHandler.process(AjpProtocol.java:384)
	at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
	at java.lang.Thread.run(Thread.java:662)

Test #2:
showUnusableIdPs=true,
federation metadata=https://testbridge.wayf.dk/saml2/idp/metadata.php
discovery page was able to load but still, no luck...

> - Are you sure you are editing the correct config file (try breaking it)?

I am 100% sure about this.

I'll try to setup an EDS and see if the federation and its Idps will
be successfully listed.

Thanks!


More information about the users mailing list