opensaml::FatalProfileException

[Cantor, Scott]

> The /idp/status page comes back fine, but what is also strange is that no IDP
> log files are being written, despite the logging level set t trace in the
> /conf/logging.xml file.

Well, until you fix that, nothing else really matters.

The error generally means you configured authentication improperly, using RemoteUser with no mechanism in place to supply it, that kind of thing.

> I'm at a bit of a loss as to what to try next. The IDP is
> on a Linux RHEL7 box and I'm using apache with Tomcat, and using AJP to
> proxy. The Tomcat user is running the Tomcat service and has full access to
> the /shibboleth-idp/logs directory.

I don't know of any way to get the IdP to start up and do that much without logging.

-- Scott