idp.testshib.org server time wrong?

[Adam Conley]

Looks like things are working again.  Thanks a lot for the help.

Adam

From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Nate Klingenstein
Sent: Friday, December 27, 2013 12:07 PM
To: Shib Users
Subject: Re: idp.testshib.org server time wrong?

I think you're correct.  NTPD wasn't running for some reason.

[root at testshib2 ndk]# ntpdate time.nist.gov<http://time.nist.gov>
27 Dec 12:06:00 ntpdate[23132]: step time server 2610:20:6f15:15::27 offset -28803.710997 sec
[root at testshib2 ndk]# service ntpd start
Starting ntpd:                                             [  OK  ]

Please try now.  Thank you for informing us promptly.  I'll check out the chkconfig.

On Dec 27, 2013, at 9:58 AM, Adam Conley <aconley at ratex.com<mailto:aconley at ratex.com>>
 wrote:


Hello,

I hope someone here can help with something I am seeing trying to test using the idp.testshib.org<http://idp.testshib.org> server.  The following is a snippet from the IdP log:

19:47:36.110 - WARN [org.opensaml.common.binding.security.IssueInstantRule:108] - Message was expired: message issue time was '2013-12-27T16:47:31.000Z', message expired at: '2013-12-27T16:53:31.000Z', current time: '2013-12-27T19:47:36.109-05:00'

I am in the east coast, and the time when the request was sent was 11:47am, or 16:47 UTC.  I believe the idp.testshib.org<http://idp.testshib.org> server is in the same time zone (using a web-based geolocation service), but the time it has is 19:47 (Eastern), which is 8 hours fast.  This was working as of a few days ago, so I am not sure what changed.  The logs also show another SP was also having problems, so this doesn't seem specific to my SP metadata.  Can anyone have a look at the server configuration, or does anyone have any suggestions, besides setting my clock forward 8 hours to hide the error?

Thanks,

Adam

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131227/34ed13de/attachment-0001.html