Expired message warning - how to track where from

[Lipscomb, Gary]

Answering my own question

- set logging to DEBUG for opensaml --> gives entityID
- check /var/httpd/access_log - match timestamps and gives server IP

Now to work out why?

Regards
Gary

> -----Original Message-----
> From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Lipscomb,
> Gary
> Sent: Tuesday, 18 July 2017 3:41 PM
> To: Shib Users <users at shibboleth.net>
> Subject: Expired message warning - how to track where from
> 
> Hi list,
> 
> We are continuously get an expired message warning in the id-process.log
> [1].
> 
> The message time is consistent for all warnings
>                              message time was '2017-06-08T03:08:50.000Z'
> 
> How does one go about tracking where this is coming from? Is there extra
> logging that could be turned on?
> It's is happening on both our servers in the pool. The time between
> messages is not consistent.
> 
> Regards
> 
> Gary
> 
> 
> [1] idp-process.log
> 
> 2017-07-18 15:17:50,474 - WARN
> [org.opensaml.saml.common.binding.security.impl.MessageLifetimeSecurity
> Handler:152] - Message Handler:  Message was expired: message time was
> '2017-06-08T03:08:50.000Z', message expired at: '2017-06-08T03:14:50.000Z',
> current time: '2017-07-18T05:17:50.474Z'
> 2017-07-18 15:17:50,476 - WARN
> [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:202] -
> Profile Action WebFlowMessageHandlerAdaptor: Exception handling
> message
> org.opensaml.messaging.handler.MessageHandlerException: Message was
> rejected due to issue instant expiration
>         at
> org.opensaml.saml.common.binding.security.impl.MessageLifetimeSecurity
> Handler.doInvoke(MessageLifetimeSecurityHandler.java:155)
> 2017-07-18 15:17:50,477 - WARN
> [org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event
> occurred while processing the request: MessageExpired
> 
> 
> 2017-07-18 15:25:50,474 - WARN
> [org.opensaml.saml.common.binding.security.impl.MessageLifetimeSecurity
> Handler:152] - Message Handler:  Message was expired: message time was
> '2017-06-08T03:08:50.000Z', message expired at: '2017-06-08T03:14:50.000Z',
> current time: '2017-07-18T05:25:50.474Z'
> 2017-07-18 15:25:50,475 - WARN
> [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:202] -
> Profile Action WebFlowMessageHandlerAdaptor: Exception handling
> message
> org.opensaml.messaging.handler.MessageHandlerException: Message was
> rejected due to issue instant expiration
>         at
> org.opensaml.saml.common.binding.security.impl.MessageLifetimeSecurity
> Handler.doInvoke(MessageLifetimeSecurityHandler.java:155)
> 2017-07-18 15:25:50,475 - WARN
> [org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event
> occurred while processing the request: MessageExpired
> 
> 
> 2017-07-18 15:27:50,475 - WARN
> [org.opensaml.saml.common.binding.security.impl.MessageLifetimeSecurity
> Handler:152] - Message Handler:  Message was expired: message time was
> '2017-06-08T03:08:50.000Z', message expired at: '2017-06-08T03:14:50.000Z',
> current time: '2017-07-18T05:27:50.475Z'
> 2017-07-18 15:27:50,476 - WARN
> [net.shibboleth.idp.profile.impl.WebFlowMessageHandlerAdaptor:202] -
> Profile Action WebFlowMessageHandlerAdaptor: Exception handling
> message
> org.opensaml.messaging.handler.MessageHandlerException: Message was
> rejected due to issue instant expiration
>         at
> org.opensaml.saml.common.binding.security.impl.MessageLifetimeSecurity
> Handler.doInvoke(MessageLifetimeSecurityHandler.java:155)
> 2017-07-18 15:27:50,477 - WARN
> [org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event
> occurred while processing the request: MessageExpired
> 
> |   ALBURY-WODONGA   |   BATHURST   |   CANBERRA   |   DUBBO   |
> GOULBURN   |   MELBOURNE   |   ORANGE   |   PORT MACQUARIE   |   SYDNEY
> |   WAGGA WAGGA   |
> 
> LEGAL NOTICE
> This email (and any attachment) is confidential and is intended for the use of
> the addressee(s) only. If you are not the intended recipient of this email, you
> must not copy, distribute, take any action in reliance on it or disclose it to
> anyone. Any confidentiality is not waived or lost by reason of mistaken
> delivery. Email should be checked for viruses and defects before opening.
> Charles Sturt University (CSU) does not accept liability for viruses or any
> consequence which arise as a result of this email transmission. Email
> communications with CSU may be subject to automated email filtering, which
> could result in the delay or deletion of a legitimate email before it is read at
> CSU. The views expressed in this email are not necessarily those of CSU.
> Charles Sturt University in Australia The Grange Chancellery, Panorama
> Avenue, Bathurst NSW Australia 2795 (ABN: 83 878 708 551; CRICOS Provider
> Number: 00005F (National)). TEQSA Provider Number: PV12018 Consider the
> environment before printing this email.
> --
> To unsubscribe from this list send an email to users-
> unsubscribe at shibboleth.net