SP Metadata Not Loading

[Cantor, Scott]

On 7/29/15, 6:09 PM, "users on behalf of Joel Levin" <users-bounces at shibboleth.net on behalf of joel.aaron.levin at gmail.com> wrote:



>
>This morning I deleted the metadata backing file in path below - however when I restarted the shibd daemon, the IdP's metadata does not appear in the backing file location or in 'var/cache/shibboleth'.

The backing file location is only var/cache/shibboleth if you allow it to be by not pointing it somewhere else.

>The shibd logs did not show any errors - only that the metadata was loaded.

Well, I can't see that being possible if it can't write the file unless it's out of disk space or something.

><MetadataProvider type="XML"
>                          url="https://example.comidp/shibboleth"
>                          backingFilePath="/etc/shibboleth/example-metadata.xml"
>                          reloadInterval="60" />

An absolute path is exactly that, absolute. You're telling it to write to a location it's got little chance of being able to write to, at least on Linux. That's not where backing files should be going. And it should be logging that failure. I don't know offhand what it does if it can't create the backup.

There's no way that could have worked unless the SP was old, certainly pre-2.5, and shibd was running as root.

-- Scott