No MetadataProvider available

[John Westwood]

Hello

We are running Shibboleth SP 2.4.3 in SLES 11 . Shibboleth was working fine
until we had a hardware fault. This was fixed and the server was restarted,
but now when trying to authenticate the following error occurs:

shibsp::ConfigurationException

shibsp::ConfigurationException at (https:// ... )

No MetadataProvider available.


I had a look in the log file and it revealed the following when Shibboleth
was restarted:


2013-05-10 07:56:32 ERROR XMLTooling.ParserPool : fatal error on line 0,
column 0, message: An exception occurred! Type:NetAccessorException,
Message:Could not connect to the socket for URL '
http://metadata.ukfederation.org.uk/ukfederation-metadata.xml'
2013-05-10 07:56:33 ERROR OpenSAML.MetadataProvider.XML : error while
loading resource (
http://metadata.ukfederation.org.uk/ukfederation-metadata.xml): XML
error(s) during parsing, check log for specifics
2013-05-10 07:56:33 WARN OpenSAML.MetadataProvider.XML : adjusted reload
interval to 600 seconds
2013-05-10 07:56:33 INFO OpenSAML.MetadataProvider.XML : using local backup
of remote resource
2013-05-10 07:56:33 ERROR XMLTooling.ParserPool : fatal error on line 0,
column 0, message: An exception occurred! Type:RuntimeException,
Message:The primary document entity could not be opened.
Id=/var/run/shibboleth/ukfederation-metadata.xml
2013-05-10 07:56:33 ERROR OpenSAML.MetadataProvider.XML : error while
loading resource (/var/run/shibboleth/ukfederation-metadata.xml): XML
error(s) during parsing, check log for specifics
2013-05-10 07:56:33 CRIT Shibboleth.Application : error initializing
MetadataProvider: XML error(s) during parsing, check log for specifics


Taking the first error above and researching on the mailing list leads me
to believe the problem is in the MetadataProvider block of the
Shibboleth2.xml configuration:


<MetadataProvider type="XML" uri="
http://metadata.ukfederation.org.uk/ukfederation-metadata.xml"
             backingFilePath="ukfederation-metadata.xml"
reloadInterval="14400">
           <MetadataFilter type="RequireValidUntil"
maxValidityInterval="2592000"/>
           <MetadataFilter type="Signature" certificate="ukfederation.pem"/>

        <TransportOption provider="CURL" option="10004">
wwwcache.port.ac.uk:81</TransportOption>
     </MetadataProvider>


Would I be right in thinking the problem is something to do with
TransportOption? I don't know why we are using a HTTP proxy, the address is
for accessing the University's Intranet from an external location. Maybe I
could try commenting out this line and restarted Shibboleth / Apache?

Any help greatly appreciated.

John
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130605/947142f3/attachment.html