Shibboleth IdP fails to download metadata then never tries again

[Brian Moon]

Not sure why it never tries again, but the URL for that metadata should be
https://idp.stanford.edu/Stanford-idps.xml (unless you had intentionally
appended characters to it to force it to fail to prove that the refresh was
not working).


Brian Moon
Senior System Administrator, Enterprise Systems
Elections & Bylaws Committee Co-Chair, Staff Senate 2017-2018
Santa Clara University
bmoon at scu.edu | (408) 554-4830 <4085544830>

On Fri, Aug 11, 2017 at 10:46 AM, <shibboleth655 at lewenberg.com> wrote:

> We are seeing an odd problem with downloading metadata.
>
> Here is the sequence of events.
>
> 1. The Shibboleth IdP service has trouble downloading the metadata at the
> URL "https://idp.stanford.edu/Stanford-idps.xml'".
>
> 2. It then promises to try again in about 22 minutes.
>
> 3. However, there is *never* again a log entry indicating that Shibboleth
> IdP attempted to download the metadata at that URL. It is as if the IdP
> service stops trying.
>
> 4. This is a big problem as now our metadata is getting more and more
> stale.
>
>
> Here are the relevant logs below:
>
> 2017-07-27 11:50:00,314 - INFO [org.opensaml.saml.metadata.re
> solver.impl.AbstractReloadingMetadataResolver:465] - Metadata Resolver
> FileBackedHTTPMetadataResolver stanford-idps: New metadata successfully
> loaded for 'https://idp.stanford.edu/Stanford-idps.xml'
> 2017-07-27 11:50:00,314 - INFO [org.opensaml.saml.metadata.re
> solver.impl.AbstractReloadingMetadataResolver:306] - Metadata Resolver
> FileBackedHTTPMetadataResolver stanford-idps: Next refresh cycle for
> metadata provider 'https://idp.stanford.edu/Stanford-idps.xml' will
> occur on '2017-07-27T19:12:30.272Z' ('2017-07-27T12:12:30.272-07:00'
> local time)
> 2017-07-27 12:21:35,186 - ERROR [org.opensaml.saml.metadata.re
> solver.impl.HTTPMetadataResolver:313] - Metadata Resolver
> FileBackedHTTPMetadataResolver stanford-idps: Error retrieving metadata
> from https://idp.stanford.edu/Stanford-idps.xml
> 2017-07-27 12:21:35,194 - INFO [org.opensaml.saml.metadata.re
> solver.impl.AbstractReloadingMetadataResolver:306] - Metadata Resolver
> FileBackedHTTPMetadataResolver stanford-idps: Next refresh cycle for
> metadata provider 'https://idp.stanford.edu/Stanford-idps.xml' will
> occur on '2017-07-27T19:37:24.448Z' ('2017-07-27T12:37:24.448-07:00'
> local time)
>
> (After this point, there is NEVER again a mention of
> https://idp.stanford.edu/Stanford-idps.xml&#39 in any of the logs.)
>
>
> We are running Shibboleth IdP version 3.3.1 with tomcat8 on a Debian
> server.
>
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170811/0445c16f/attachment.html>