Shibboleth IdP fails to download metadata then never tries again

[shibboleth655 at lewenberg.com]

On 8/11/2017 10:58 AM, Brian Moon wrote:
> Not sure why it never tries again, but the URL for that metadata should 
> be https://idp.stanford.edu/Stanford-idps.xml (unless you had 
> intentionally appended characters to it to force it to fail to prove 
> that the refresh was not working).

Those extra characters were from the log message whose complete text is

[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:294] 
- Metadata Resolver FileBackedHTTPMetadataResolver spdb-metadata-legacy: 
Error occurred while attempting to refresh metadata from 
'https://spdb.stanford.edu/spmetadata/metadata-legacy.xml'


I guess the logger converted the single quote to as entity name.


> 
> 
> Brian Moon
> Senior System Administrator, Enterprise Systems
> Elections & Bylaws Committee Co-Chair, Staff Senate 2017-2018
> Santa Clara University
> bmoon at scu.edu <mailto:bmoon at scu.edu> | (408) 554-4830 <tel:4085544830>
> 
> On Fri, Aug 11, 2017 at 10:46 AM, <shibboleth655 at lewenberg.com 
> <mailto:shibboleth655 at lewenberg.com>> wrote:
> 
>     We are seeing an odd problem with downloading metadata.
> 
>     Here is the sequence of events.
> 
>     1. The Shibboleth IdP service has trouble downloading the metadata
>     at the URL "https://idp.stanford.edu/Stanford-idps.xml&#39
>     <https://idp.stanford.edu/Stanford-idps.xml&#39>;".
> 
>     2. It then promises to try again in about 22 minutes.
> 
>     3. However, there is *never* again a log entry indicating that
>     Shibboleth IdP attempted to download the metadata at that URL. It is
>     as if the IdP service stops trying.
> 
>     4. This is a big problem as now our metadata is getting more and
>     more stale.
> 
> 
>     Here are the relevant logs below:
> 
>     2017-07-27 11:50:00,314 - INFO [org.opensaml.saml.metadata.re
>     <http://org.opensaml.saml.metadata.re>solver.impl.AbstractReloadingMetadataResolver:465]
>     - Metadata Resolver FileBackedHTTPMetadataResolver stanford-idps:
>     New metadata successfully loaded for
>     'https://idp.stanford.edu/Stanford-idps.xml&#39
>     <https://idp.stanford.edu/Stanford-idps.xml&#39>;
>     2017-07-27 11:50:00,314 - INFO [org.opensaml.saml.metadata.re
>     <http://org.opensaml.saml.metadata.re>solver.impl.AbstractReloadingMetadataResolver:306]
>     - Metadata Resolver FileBackedHTTPMetadataResolver stanford-idps:
>     Next refresh cycle for metadata provider
>     'https://idp.stanford.edu/Stanford-idps.xml&#39
>     <https://idp.stanford.edu/Stanford-idps.xml&#39>; will occur on
>     '2017-07-27T19:12:30.272Z' ('2017-07-27T12:12:30.272-07:00' local time)
>     2017-07-27 12:21:35,186 - ERROR [org.opensaml.saml.metadata.re
>     <http://org.opensaml.saml.metadata.re>solver.impl.HTTPMetadataResolver:313]
>     - Metadata Resolver FileBackedHTTPMetadataResolver stanford-idps:
>     Error retrieving metadata from
>     https://idp.stanford.edu/Stanford-idps.xml
>     <https://idp.stanford.edu/Stanford-idps.xml>
>     2017-07-27 12:21:35,194 - INFO [org.opensaml.saml.metadata.re
>     <http://org.opensaml.saml.metadata.re>solver.impl.AbstractReloadingMetadataResolver:306]
>     - Metadata Resolver FileBackedHTTPMetadataResolver stanford-idps:
>     Next refresh cycle for metadata provider
>     'https://idp.stanford.edu/Stanford-idps.xml&#39
>     <https://idp.stanford.edu/Stanford-idps.xml&#39>; will occur on
>     '2017-07-27T19:37:24.448Z' ('2017-07-27T12:37:24.448-07:00' local time)
> 
>     (After this point, there is NEVER again a mention of
>     https://idp.stanford.edu/Stanford-idps.xml&#39
>     <https://idp.stanford.edu/Stanford-idps.xml&#39> in any of the logs.)
> 
> 
>     We are running Shibboleth IdP version 3.3.1 with tomcat8 on a Debian
>     server.
> 
> 
>     -- 
>     To unsubscribe from this list send an email to
>     users-unsubscribe at shibboleth.net
>     <mailto:users-unsubscribe at shibboleth.net>
> 
> 
> 
>