v2->v3 upgrade, localhost status redirect

[Michael A Grady]

> On Jul 29, 2016, at 8:35 PM, Klingenstein, Nate <nklingenstein at calstate.edu> wrote:
> 
> Baron,
> 
> The scripts in $IDP_HOME/bin/ that the IdP uses to interact with itself go over web queries to localhost, so if status.sh redirects, I would expect any of them to do that.  We've deferred adding the shell script stuff directly to the IdP Installfest material because we don't want to make attendees fiddle with JVM trust or keystores.
> 
> My guess is that your browser is chasing the redirect.  I'd look at a browser trace to see what's going on.  You might try a curl -Lv instead of a telnet as a secondary sanity check.
> 
> The more inexplicable part is that why you didn't encounter the same on the other host.  That borders on "physically impossible".  There are all kinds of reasons why it could be happening; my first hunch would be the "secure" flag(which I still don't really understand) that servlet containers use and differences in the servlet container configuration rather than the IdP configuration proper, but web.xml and the IdP could still easily be implicated.
> 
> Not an answer, but hopefully more to go on,
> Nate.

On Linux, I  find it easiest to have my CLI commands just use curl:

curl -s -k 'https://localhost/idp/status'

curl -s -k 'https://localhost/idp/profile/admin/reload-service?id=shibboleth.AttributeFilterService'
curl -s -k 'https://localhost/idp/profile/admin/reload-service?id=shibboleth.AttributeResolverService'
curl -s -k 'https://localhost/idp/profile/admin/reload-service?id=shibboleth.MetadataResolverService'
curl -s -k 'https://localhost/idp/profile/admin/reload-service?id=shibboleth.RelyingPartyResolverService'
curl -s -k 'https://localhost/idp/profile/admin/reload-service?id=shibboleth.LoggingService'
curl -s -k 'https://localhost/idp/profile/admin/reload-metadata?id=your.MetadataProvider.id'

curl -s -k 'https://localhost/idp/profile/admin/resolvertest?requester=SPentityID&&principal=UserID


--
Michael A. Grady
IAM Architect, Unicon, Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://shibboleth.net/pipermail/users/attachments/20160729/714c2232/attachment.sig>