Discovery Service/WAYF v1.2.1 Shibboleth service provider and simpleSAMLphp - cannot recognize federation metadata
Coeus[TM]
coeus.ph at gmail.com
Thu Jun 7 11:12:10 BST 2012
> So the usual sort of questions -
> - what does logging show?
shibd.log
---------
2012-06-07 08:21:52 INFO OpenSAML.MetadataProvider.XML : reloading
remote resource...
2012-06-07 08:21:52 INFO OpenSAML.MetadataProvider.XML : remote
resource (https://metadata.wayf.dk/birk-idp.xml) unchanged, adjusted
reload interval to 180000 seconds
2012-06-07 08:21:52 INFO OpenSAML.MetadataProvider.XML : using local
backup of remote resource
2012-06-07 08:21:52 INFO OpenSAML.MetadataProvider.XML : loaded XML
resource (/etc/shibboleth/federations/birk-idp.xml)
2012-06-07 08:21:52 ERROR OpenSAML.MetadataProvider.XML : metadata
intance failed manual validation checking: EmailAddress must have
TextContent.
2012-06-07 08:21:52 CRIT OpenSAML.MetadataProvider.XML : maintaining
existing configuration, error reloading resource
(https://metadata.wayf.dk/birk-idp.xml): Metadata instance failed
manual validation checking.
shib_warn.log
-------------
2012-06-07 08:21:52 ERROR OpenSAML.MetadataProvider.XML : metadata
intance failed manual validation checking: EmailAddress must have
TextContent.
2012-06-07 08:21:52 CRIT OpenSAML.MetadataProvider.XML : maintaining
existing configuration, error reloading resource
(https://metadata.wayf.dk/birk-idp.xml): Metadata instance failed
manual validation checking.
Test #1:
showUnusableIdPs=true,
federation metadata=https://metadata.wayf.dk/birk-idp.xml
discovery page was not able to load and
resulted to an error in the jboss logs:
jboss log
---------
09:52:12,385 WARN [HDScanner] Scan failed
java.lang.OutOfMemoryError: Java heap space
2012-06-07 10:17:24,210 ERROR
[org.apache.catalina.core.ContainerBase.[jboss.web].[localhost].[/discovery].[WAYF]]
(ajp-192.168.59.24-8009-2) Allocate exception for servlet WAYF
java.lang.NullPointerException
at org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider.refresh(AbstractReloadingMetadataProvider.java:269)
at org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider.doInitialization(AbstractReloadingMetadataProvider.java:236)
at org.opensaml.saml2.metadata.provider.AbstractMetadataProvider.initialize(AbstractMetadataProvider.java:407)
at edu.internet2.middleware.shibboleth.wayf.IdPSiteSet.<init>(IdPSiteSet.java:179)
at edu.internet2.middleware.shibboleth.wayf.WayfService.init(WayfService.java:181)
at javax.servlet.GenericServlet.init(GenericServlet.java:212)
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1048)
at org.apache.catalina.core.StandardWrapper.allocate(StandardWrapper.java:777)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:129)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:190)
at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:92)
at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.process(SecurityContextEstablishmentValve.java:126)
at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.invoke(SecurityContextEstablishmentValve.java:70)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:158)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:330)
at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:436)
at org.apache.coyote.ajp.AjpProtocol$AjpConnectionHandler.process(AjpProtocol.java:384)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
at java.lang.Thread.run(Thread.java:662)
Test #2:
showUnusableIdPs=true,
federation metadata=https://testbridge.wayf.dk/saml2/idp/metadata.php
discovery page was able to load but still, no luck...
> - Are you sure you are editing the correct config file (try breaking it)?
I am 100% sure about this.
I'll try to setup an EDS and see if the federation and its Idps will
be successfully listed.
Thanks!
More information about the users
mailing list