sp.testshib.org reports unable to find metadata, but I've reloaded with success more than once today

[Wilson, Bruce E.]

Starting Saturday, some scripts we’re working with to do some SAML validation working with sp.testshib.org<http://sp.testshib.org> started to fail.  They were definitely working on Friday.

The reported error is

Unable to locate metadata for identity provider (https://devidp.ornl.gov/idp)

And the lines out of the testshib.org<http://testshib.org> logs are consistent with that:

2016-09-19 08:37:51 INFO Shibboleth.Listener : registered remoted message endpoint (testshib-reg/SAML/Artifact)
2016-09-19 08:37:51 INFO Shibboleth.Listener : registered remoted message endpoint (testshib-reg::getHeaders::Application)
2016-09-19 08:37:51 INFO Shibboleth.AttributeFilter : reload thread finished
2016-09-19 08:37:51 INFO Shibboleth.AttributeExtractor.XML : reload thread finished
2016-09-19 08:37:51 INFO OpenSAML.MetadataProvider.XML : reload thread finished
2016-09-19 08:37:51 INFO Shibboleth.SecurityPolicyProvider.XML : reload thread finished
2016-09-19 08:38:05 DEBUG Shibboleth.Listener [4830]: dispatching message (default/TestShib::run::SAML2SI)
2016-09-19 08:38:05 WARN Shibboleth.SessionInitiator.SAML2 [4830]: unable to locate metadata for provider (https://devidp.ornl.gov/idp)
2016-09-19 08:38:18 INFO Shibboleth.Listener [4828]: detected socket closure, shutting down worker thread
2016-09-19 08:38:31 DEBUG Shibboleth.Listener [4830]: dispatching message (default/TestShib::run::SAML2SI)
2016-09-19 08:38:31 WARN Shibboleth.SessionInitiator.SAML2 [4830]: unable to locate metadata for provider (https://devidp.ornl.gov/idp)


However, I’ve uploaded metadata twice this morning and I get successful loads:

REGISTER
Your metadata was uploaded successfully. Please proceed to configuration and testing.

Your metadata filename is ornl-devextidp-testshib.xml. Please keep this filename so you can overwrite your metadata file in the event you need to update your entry.

Your complete metadata is below. You don't need to understand the entire file, but it's helpful to recognize your entityID in the first element below, as well as your provider's certificate. The Shibboleth wiki can help you learn about metadata.


<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="akHskGZ4k2AuTz3dfWtTkU2q4jf" cacheDuration="PT1440M" entityID="https://devidp.ornl.gov/idp">
  <ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
    <ds:SignedInfo>

I copied and pasted the IdP entity ID from the registration success page into sp.testshib.org<http://sp.testshib.org> and I’m still getting this error.  I actually have four different IdP’s, and they’re all giving me this same problem, despite having uploaded new metadata.

Is there a problem on sp.testshib.org<http://sp.testshib.org> or am I doing something stupid.  FWIW, I’m not running Shib as the IdP — I’m running Ping Federate (8.1).  But we’ve been running that for years and have not made any changes on our end in the past few days, so I’m at a loss for why stuff is now breaking.  We do use testshib pretty regularly as part of some routine monitoring and validation.  Hopefully that’s not causing any problems.

Thanks.

================================================
Bruce E. Wilson (wilsonbe at ornl.gov<mailto:wilsonbe at ornl.gov>)
Information Technology Services Division
Oak Ridge National Laboratory


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160919/db52f98d/attachment.html>