Trouble starting shibboleth after upgrade

[Filipozzi, Luca]

Did you run shibd as root rather than sudoing to _shibd?

Does the shibd.sock file have the correct ownership (_shibd:_shibd)?

I'm not running the switch packages, but they still use _shibd.

Here's what the dir/files have as normal permissions/ownership:

root:/var/run/shibboleth# ls -ld .
drwxr-xr-x 2 _shibd root 80 Jun 21 08:20 .
root:/var/run/shibboleth# ls -l *
-rw-r--r-- 1 _shibd _shibd 5 Jun 21 08:20 shibd.pid
srwxrwxrwx 1 _shibd _shibd 0 Jun 21 08:20 shibd.sock


It is probably not advisable to make /var/run/shibboleth world writable.

-- 
Luca Filipozzi, Enterprise Architect
Information Technology | Engage. Envision. Enable.
The University of British Columbia
Desk: +1.604.822.3976
Cell: +1.604.986.8310
Skype: LucaFilipozzi



On 2013-06-24 07:44, "Keith Osborne" <keith at tdrnetworks.com> wrote:

>The switch sources are unofficial packaged debs - currently only 2.4.3
>is available by Debian backports.  To get 2.5.x you are forced into
>experimental packages or using:
>
>https://www.switch.ch/aai/docs/shibboleth/SWITCH/2.5/sp/deployment/?os=deb
>ian
>
>Which has backported 2.5.x debs to install.
>
>root at www:/etc/shibboleth# ls -lrdt /var/run/shibboleth/
>drwxrwxrwx 2 _shibd root 1 Jun 24 12:41 /var/run/shibboleth/
>
>I did a chmod 777 of the folder the moment I thought it might not be
>able to create files in the folder.
>
>Keith
>
>TDR Networks
>[ hosting | e-commerce | custom development | linux | cisco ]
>e: keith at tdrnetworks.com
>t: 02890 286150
>m: 07738 734590
>w: http://www.tdrnetworks.com
>
>On 24/06/2013 15:35, Cantor, Scott wrote:
>> On 6/24/13 10:28 AM, "Keith Osborne" <keith at tdrnetworks.com> wrote:
>>> I have checked /var/run/shibboleth and no files exist from the old
>>> install.
>> I don't support Debian, so there's nothing environmental that I can
>> suggest, since I don't know anything about how you're installing it. On
>> Red Hat, the init script runs shibd as non-root, so there could be
>> permission issues with /var/run/shibboleth
>>
>> But that's not an ENOACCESS error, it's EINVAL. So something's wrong
>>with
>> your install/build or the assumptions wired in about paths, perhaps.
>>
>> I have no idea what you mean by "SWITCH sources". The only *source* code
>> should come from the official location, there's no reason to ever use
>> sources from anybody else.
>>
>> -- Scott
>>
>>
>> --
>> To unsubscribe from this list send an email to
>>users-unsubscribe at shibboleth.net
>
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net