need help with Shibboleth IDP 3.0 installation

Brent Putman putmanb at georgetown.edu
Mon Jan 12 16:28:58 EST 2015


On 1/12/15 3:18 PM, Hong Ye wrote:
> bash-4.1$ ls -l jdk/jre/lib/ext/
>
>
>>  jre/lib/security/java.security,
>

Yep, those all look fine.  So I'm still baffled.  As Scott suggested, if
the command-line stuff is working ok, then there's something about the
Tomcat environment that is preventing the standard Java Security
provider-based crypto stuff from working the way it should.

As an additional debugging step, can you enable DEBUG logging for:

org.opensaml.xmlsec.algorithm. AlgorithmRegistry

and then restart the IdP?  With that, then fairly early in the IdP start
up process, in the idp-process.log, you should see a lot of output
(several dozen lines I think) from AlgorithmRegistry, on DEBUG, INFO,
maybe WARN or ERROR.  Post here please.  It will be interesting to see
what algorithms it shows as supported at runtime and which not.  That
may give a hint as to what's going on.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150112/b46909b3/attachment-0001.html 


More information about the users mailing list