What's wrong in my Shibboleth SP 2.6.0?

[Marco Malavolti]

Hi guys,

I read the new "Metadata Backing File Changes" on 
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPReleaseNotes#NativeSPReleaseNotes-MetadataBackingFileChanges, 
but I continue to have problems with shibd startup... :(

Could you help me, please?


This is my configuration:

*/etc/shibboleth/shibboleth2.xml:*

         <!-- METADATA EDUGAIN -->
         <MetadataProvider type="XML" 
uri="http://www.garr.it/idem-metadata/edugain2idem-metadata-sha256.xml" 
backingFilePath="edugain2idem-metadata-sha256.xml" reloadInterval="7200">
             <MetadataFilter type="RequireValidUntil" 
maxValidityInterval="604800"/>
             <MetadataFilter type="Signature" 
certificate="/etc/shibboleth/idem_signer_2019.pem" *verifyBackup="false"* />
             <MetadataFilter type="EntityRoleWhiteList">
<RetainedRole>md:IDPSSODescriptor</RetainedRole>
<RetainedRole>md:AttributeAuthorityDescriptor</RetainedRole>
             </MetadataFilter>
             <MetadataFilter type="Whitelist">
<Include>https://idp.iuav.it/idp/shibboleth</Include>
<Include>https://idp.it.su.se/idp/shibboleth</Include>
             </MetadataFilter>
         </MetadataProvider>

(*edugain2idem-metadata-sha256.xml* is 27.4 MB)

[root at ftplbtst01 shibboleth]# cat /etc/issue.net
*CentOS release 6.8 (Final)*

[root at ftplbtst01 shibboleth]# shibd -v
*shibboleth 2.6.0*

[root at shibboleth]# service shibd restart ; tail -f 
/var/log/shibboleth/shibd.log
Stopping shibd:                                            [  OK ]
*Starting shibd: [FAILED]*
2017-03-16 09:41:52 INFO OpenSAML.Metadata.Chaining : building 
MetadataProvider of type XML
2017-03-16 09:41:52 INFO OpenSAML.Metadata : building MetadataFilter of 
type RequireValidUntil
2017-03-16 09:41:52 INFO OpenSAML.Metadata : building MetadataFilter of 
type Signature
2017-03-16 09:41:52 INFO XMLTooling.SecurityHelper : loading 
certificate(s) from file (/etc/shibboleth/idem_signer_2019.pem)
2017-03-16 09:41:52 INFO XMLTooling.CredentialResolver.File : no private 
key resolved, usable for verification/trust only
2017-03-16 09:41:52 INFO OpenSAML.Metadata : building MetadataFilter of 
type EntityRoleWhiteList
2017-03-16 09:41:52 INFO OpenSAML.Metadata : building MetadataFilter of 
type Whitelist
2017-03-16 09:41:57 INFO OpenSAML.MetadataProvider.XML : loaded XML 
resource (http://www.garr.it/idem-metadata/edugain2idem-metadata-sha256.xml)
2017-03-16 09:41:59 INFO OpenSAML.Metadata : applying metadata filter 
(RequireValidUntil)
2017-03-16 *09:41:59* INFO OpenSAML.Metadata : applying metadata filter 
(Signature)
2017-03-16 *09:45:27* INFO OpenSAML.Metadata : applying metadata filter 
(EntityRoleWhiteList)

and then the shibd service works again.

Thank you so much!

-- 
Marco Malavolti
Consortium GARR - Servizio IDEM GARR AAI
Via dei Tizii, 6 - I-00185 (ROMA)
CF: 97284570583 - PI:07577141000
Skype: marco.mala

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170316/cda6cef5/attachment.html>