Error loading metadata file

[Lipscomb, Gary]

Hi Scott,

Looks as if it's not loading the metadata since I've "tampered" with it.

2017-06-05 13:58:24,214 - ERROR [org.opensaml.saml.security.impl.SAMLSignatureProfileValidator:188] - Reference URI '#aaf20170605013503' did not point to SignableSAMLObject with ID 'aaf'
2017-06-05 13:58:24,226 - ERROR [org.opensaml.saml.metadata.resolver.filter.impl.SignatureValidationFilter:449] - Signature on metadata entry 'https://md.test.aaf.edu.au/aaf-test-metadata.xml' failed signature pre-validation
2017-06-05 13:58:24,236 - WARN [org.opensaml.saml.metadata.resolver.filter.impl.SignatureValidationFilter:251] - Saw fatal error validating metadata signature(s), metadata will be filtered out
org.opensaml.saml.metadata.resolver.filter.FilterException: Metadata instance signature failed signature pre-validation
        at org.opensaml.saml.metadata.resolver.filter.impl.SignatureValidationFilter.performPreValidation(SignatureValidationFilter.java:450)
Caused by: org.opensaml.xmlsec.signature.support.SignatureException: Reference URI did not point to parent ID
        at org.opensaml.saml.security.impl.SAMLSignatureProfileValidator.validateReferenceURI(SAMLSignatureProfileValidator.java:189)
2017-06-05 13:58:24,238 - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractBatchMetadataResolver:285] - Metadata Resolver FileBackedHTTPMetadataResolver FederationMetadata: Metadata filtering process produced a null document, resulting in an empty data set
2017-06-05 13:58:24,306 - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:465] - Metadata Resolver FileBackedHTTPMetadataResolver FederationMetadata: New metadata successfully loaded for 'https://md.test.aaf.edu.au/aaf-testt-metadata.xml'

Regards

Gary

> -----Original Message-----
> From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor,
> Scott
> Sent: Monday, June 5, 2017 13:56
> To: Shib Users <users at shibboleth.net>
> Subject: Re: Error loading metadata file
> 
> On 6/4/17, 11:47 PM, "users on behalf of Lipscomb, Gary" <users-
> bounces at shibboleth.net on behalf of glipscomb at csu.edu.au> wrote:
> 
> > I did a full restart of tomcat and still got the same error.
> 
> When you restart, it loads the backup file first, and then it logs that message
> afterward, so it's confusing but not an error or doing anything unusual.
> 
> I just tested it myself with InCommon and it had knowledge of SPs that could
> only have come from the backup file being loaded. It logged exactly the same
> thing after the 404 from the invalid URL.
> 
> -- Scott
> 
> 
> --
> To unsubscribe from this list send an email to users-
> unsubscribe at shibboleth.net