status.sh Connection refused && Jetty errors

Cristian Pastramagiu cristian.pastramagiu at consulteer.com
Fri Dec 8 07:48:53 EST 2017


Hi all

 

I have an issue with starting/using a Shibboleth  - in regards of a
deployment on a Ubuntu16 / Jetty 9.x 

Despite apparently everything being ok:

 

2017-12-08 13:15:19 INFO XMLTooling.SecurityHelper : loading private key
from file (/etc/shibboleth/sp-key.pem)

2017-12-08 13:15:19 INFO XMLTooling.SecurityHelper : loading certificate(s)
from file (/etc/shibboleth/sp-cert.pem)

2017-12-08 13:15:19 INFO Shibboleth.Listener : registered remoted message
endpoint (default::getHeaders::Application)

2017-12-08 13:15:19 INFO Shibboleth.Listener : listener service starting

2017-12-08 13:15:19 INFO Shibboleth.AttributeFilter : reload thread
started...running when signaled

 

 

root at idp:/opt/shibboleth-idp/bin# shibd -t

2017-12-08 13:21:16 DEBUG Shibboleth.Config : shibboleth 2.5.3 library
initialization started

2017-12-08 13:21:16 DEBUG OpenSAML.Config : library initialization started

2017-12-08 13:21:16 DEBUG XMLTooling.Config : library initialization started

2017-12-08 13:21:16 DEBUG XMLTooling.Config : libcurl 7.47.0 initialization
complete

2017-12-08 13:21:16 DEBUG XMLTooling.Config : Xerces 3.1.2 initialization
complete

2017-12-08 13:21:16 DEBUG XMLTooling.Config : XML-Security 1.7.3
initialization complete

2017-12-08 13:21:16 INFO XMLTooling.Config : xmltooling 1.5.6 library
initialization complete

2017-12-08 13:21:16 INFO OpenSAML.Config : opensaml 2.5.5 library
initialization complete

[..] 

2017-12-08 13:21:16 INFO Shibboleth.AttributeFilter : reload thread
started...running when signaled

2017-12-08 13:21:16 DEBUG XMLTooling.SecurityHelper : key encoding format
for (/etc/shibboleth/sp-key.pem) dynamically resolved as (PEM)

2017-12-08 13:21:16 INFO XMLTooling.SecurityHelper : loading certificate(s)
from file (/etc/shibboleth/sp-cert.pem)

2017-12-08 13:21:16 INFO Shibboleth.Listener : registered remoted message
endpoint (default::getHeaders::Application)

overall configuration is loadable, check console for non-fatal problems

2017-12-08 13:21:16 INFO Shibboleth.Config : shibboleth 2.5.3 library
shutting down

2017-12-08 13:21:16 INFO Shibboleth.Config : reload thread finished

 

root at idp:/opt/shibboleth-idp/bin# ./status.sh

(http://localhost/idp/status) Connection refused (Connection refused)

 

 

On another side: when looking for idp.my.server:8080 (with a Jetty started
in debug mode)  I get 

In browser:

Error 404 - Not Found.

 

No context on this server matched or handled this request.

Contexts known to this server are:

/idp --->
o.e.j.w.WebAppContext at 1ce92674{/idp,[file:///tmp/jetty-0.0.0.0-8080-idp.war-
_idp-any-5795040276901592588.dir/webinf/
<mailto:o.e.j.w.WebAppContext at 1ce92674%7b/idp,%5bfile:///tmp/jetty-0.0.0.0-8
080-idp.war-_idp-any-5795040276901592588.dir/webinf/> ,
jar:file:///opt/shibboleth-idp/war/idp.war!/],UNAVAILABLE}{/opt/shibboleth-i
dp/war/idp.war}

Powered by Jetty:// 9.4.6.v20170531

 

 

And in logs:

2017-12-08 12:45:06.662:DBUG:oeja.ServletContainerInitializersStarter:main:
Calling ServletContainerInitializer
org.eclipse.jetty.websocket.server.NativeWebSocketServletContainerInitialize
r

2017-12-08 12:45:06.681:WARN:oeja.ServletContainerInitializersStarter:main:

java.lang.NullPointerException

        at
org.eclipse.jetty.websocket.server.WebSocketServerFactory.toString(WebSocket
ServerFactory.java:641)

        at java.lang.String.valueOf(String.java:2994)

        at org.eclipse.jetty.util.log.StdErrLog.format(StdErrLog.java:552)

[.]

2017-12-08 12:45:06.699:WARN:oejw.WebAppContext:main: Failed startup of
context
<mailto:o.e.j.w.WebAppContext at 1ce92674%7b/idp,%5bfile:///tmp/jetty-0.0.0.0-8
080-idp.war-_idp-any-5795040276901592588.dir/webinf/>
o.e.j.w.WebAppContext at 1ce92674{/idp,[file:///tmp/jetty-0.0.0.0-8080-idp.war-
_idp-any-5795040276901592588.dir/webinf/,
jar:file:///opt/shibboleth-idp/war/idp.war!/],UNAVAILABLE}{/opt/shibboleth-i
dp/war/idp.war}

java.lang.RuntimeException: java.lang.NullPointerException

        at
org.eclipse.jetty.annotations.ServletContainerInitializersStarter.doStart(Se
rvletContainerInitializersStarter.java:68)

        at
org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.j
ava:68)

 

 

File is there:

root at idp:/opt/shibboleth-idp/war# ls -ltrh

total 38M

-rw-r--r-- 1 idp idp 38M Dec  8 12:33 idp.war

 

Permissions also:

drwxr-xr-x 10 idp  idp    4.0K Dec  8 12:28 jetty

drwxr-xr-x 17 idp  idp    4.0K Dec  8 12:33 shibboleth-idp

 

 

On another machine - more or less identical - this is not manifesting.

 

root at ubuntu-1gb-fra1-01:/opt/shibboleth-idp# ./bin/status.sh

( <http://localhost/idp/status> http://localhost/idp/status)
<http://localhost/idp/status> http://localhost/idp/status

 

 

What could be the reasons? 

 

Thanks in advance,

Cristian 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171208/f68e42c3/attachment.html>


More information about the users mailing list