Service provider unable to load private key from file

[Cantor, Scott]

On 9/17/13 10:01 AM, "Peter Schober" <peter.schober at univie.ac.at> wrote:

>* Brian Reindel <brian at reindel.com> [2013-09-17 15:55]:
>> /var/run/shibboleth
>> drwxr-xr-x. 2 root      root      4096 Sep 17 09:41 shibboleth
>[...]
>> These were created as a part of the installation, so we haven't changed
>>them.
>
>If that were true no SP install could ever work: Without being able to
>create the socket in /var/run/shibboleth the software won't start nor
>work (and strace would have shown that, as Scott also suggested),

Yes, that is a sure sign this is not a clean or original installation, it
was created by an older version, and apparently the init script was never
run to start up shibd, because that script has a chown in it:

 # Handle transition from root to non-root packages.
	chown -R $SHIBD_USER:$SHIBD_USER /var/run/shibboleth 2>/dev/null || :

I don't know what's going on here, but something is just totally off or
we're not at all understanding what you're doing to actually run this.

-- Scott