Remote attribute-filter.xml not updating after upgrading to IdP v2.4.4

[Christopher Greiner]

I've recently upgraded one of our IdP v2.4.2 boxes to v2.4.4.

Since the update, I'm seeing the following in the logs:


2015-09-01 15:47:26,612 - DEBUG
[edu.internet2.middleware.shibboleth.common.config.BaseReloadableService:136]
- - Initializing shibboleth.AttributeFilterEngine service with
resources:
[https://rr.aai.switch.ch/switchaai/unil.ch/attribute-filter.xml,
/var/lib/shibboleth-idp/conf/local-attribute-filter.xml]
2015-09-01 15:47:26,612 - DEBUG
[org.opensaml.util.resource.ResourceChangeWatcher:115] - - Watching
resource:
https://rr.aai.switch.ch/switchaai/unil.ch/attribute-filter.xml, polling
frequency: 3600000ms, max retry attempts: 128
2015-09-01 15:47:27,030 - WARN
[org.opensaml.util.resource.FileBackedHttpResource:129] - - HTTP
resource
'https://rr.aai.switch.ch/switchaai/unil.ch/attribute-filter.xml' was
inaccessible for exists(), trying backing file
'/var/lib/shibboleth-idp/conf/attribute-filter.xml'
2015-09-01 15:47:27,134 - WARN
[org.opensaml.util.resource.FileBackedHttpResource:171] - - HTTP
resource
'https://rr.aai.switch.ch/switchaai/unil.ch/attribute-filter.xml' was
inaccessible for getLastModifiedTime(), trying backing file
'/var/lib/shibboleth-idp/conf/attribute-filter.xml'
2015-09-01 15:47:27,141 - DEBUG
[org.opensaml.util.resource.ResourceChangeWatcher:115] - - Watching
resource: /var/lib/shibboleth-idp/conf/local-attribute-filter.xml,
polling frequency: 3600000ms, max retry attempts: 128
2015-09-01 15:47:27,178 - WARN
[org.opensaml.util.resource.FileBackedHttpResource:129] - - HTTP
resource
'https://rr.aai.switch.ch/switchaai/unil.ch/attribute-filter.xml' was
inaccessible for exists(), trying backing file
'/var/lib/shibboleth-idp/conf/attribute-filter.xml'
2015-09-01 15:47:27,212 - WARN
[org.opensaml.util.resource.FileBackedHttpResource:154] - - HTTP
resource
'https://rr.aai.switch.ch/switchaai/unil.ch/attribute-filter.xml' was
inaccessible for getInputStream(), trying backing file
'/var/lib/shibboleth-idp/conf/attribute-filter.xml'


File permissions are unchanged from v2.4.2 where it was working as
expected. I can curl the remote file without issue. SELinux is running
and has been running since we installed this IdP in late 2011 without
issue. Turning it off has no effect. I've tried upgrading to v2.4.3,
attribute-filter.xml is updated as expect. It seems the issue is only
present with the latest version.

In the release notes I see the following:
[SIDP-624] - IdP stopping metadata retrieval - (Issue Reopened)

Could this be linked even if it's not metadata?

Restarting tomcat has no effect, the file still isn't updated.

Our setup:
RHEL 6.7
1.7.0_85-mockbuild_2015_07_13_05_49-b00
Apache Tomcat/6.0.24
Apache/2.2.15