Remote attribute-filter.xml not updating after upgrading to IdP v2.4.4

[Markus Frei]

Christopher, it seems that the file 
https://rr.aai.switch.ch/switchaai/unil.ch/attribute-filter.xml is 
relatively new: CreationDate: 2015-09-01 15:58:20 CEST

A guess: maybe it was unavailabe during your update?


---
Markus Frei, H-Net AG


On Die, Sep 1, 2015 at 3:55 , Christopher Greiner 
<christopher.greiner at unil.ch> wrote:
> I've recently upgraded one of our IdP v2.4.2 boxes to v2.4.4.
> 
> Since the update, I'm seeing the following in the logs:
> 
> 
> 2015-09-01 15:47:26,612 - DEBUG
> [edu.internet2.middleware.shibboleth.common.config.BaseReloadableService:136]
> - - Initializing shibboleth.AttributeFilterEngine service with
> resources:
> [https://rr.aai.switch.ch/switchaai/unil.ch/attribute-filter.xml,
> /var/lib/shibboleth-idp/conf/local-attribute-filter.xml]
> 2015-09-01 15:47:26,612 - DEBUG
> [org.opensaml.util.resource.ResourceChangeWatcher:115] - - Watching
> resource:
> https://rr.aai.switch.ch/switchaai/unil.ch/attribute-filter.xml, 
> polling
> frequency: 3600000ms, max retry attempts: 128
> 2015-09-01 15:47:27,030 - WARN
> [org.opensaml.util.resource.FileBackedHttpResource:129] - - HTTP
> resource
> 'https://rr.aai.switch.ch/switchaai/unil.ch/attribute-filter.xml' was
> inaccessible for exists(), trying backing file
> '/var/lib/shibboleth-idp/conf/attribute-filter.xml'
> 2015-09-01 15:47:27,134 - WARN
> [org.opensaml.util.resource.FileBackedHttpResource:171] - - HTTP
> resource
> 'https://rr.aai.switch.ch/switchaai/unil.ch/attribute-filter.xml' was
> inaccessible for getLastModifiedTime(), trying backing file
> '/var/lib/shibboleth-idp/conf/attribute-filter.xml'
> 2015-09-01 15:47:27,141 - DEBUG
> [org.opensaml.util.resource.ResourceChangeWatcher:115] - - Watching
> resource: /var/lib/shibboleth-idp/conf/local-attribute-filter.xml,
> polling frequency: 3600000ms, max retry attempts: 128
> 2015-09-01 15:47:27,178 - WARN
> [org.opensaml.util.resource.FileBackedHttpResource:129] - - HTTP
> resource
> 'https://rr.aai.switch.ch/switchaai/unil.ch/attribute-filter.xml' was
> inaccessible for exists(), trying backing file
> '/var/lib/shibboleth-idp/conf/attribute-filter.xml'
> 2015-09-01 15:47:27,212 - WARN
> [org.opensaml.util.resource.FileBackedHttpResource:154] - - HTTP
> resource
> 'https://rr.aai.switch.ch/switchaai/unil.ch/attribute-filter.xml' was
> inaccessible for getInputStream(), trying backing file
> '/var/lib/shibboleth-idp/conf/attribute-filter.xml'
> 
> 
> File permissions are unchanged from v2.4.2 where it was working as
> expected. I can curl the remote file without issue. SELinux is running
> and has been running since we installed this IdP in late 2011 without
> issue. Turning it off has no effect. I've tried upgrading to v2.4.3,
> attribute-filter.xml is updated as expect. It seems the issue is only
> present with the latest version.
> 
> In the release notes I see the following:
> [SIDP-624] - IdP stopping metadata retrieval - (Issue Reopened)
> 
> Could this be linked even if it's not metadata?
> 
> Restarting tomcat has no effect, the file still isn't updated.
> 
> Our setup:
> RHEL 6.7
> 1.7.0_85-mockbuild_2015_07_13_05_49-b00
> Apache Tomcat/6.0.24
> Apache/2.2.15
> --
> To unsubscribe from this list send an email to 
> users-unsubscribe at shibboleth.net