TestShib metadata issues?

Bobby Lawrence robertl at jlab.org
Thu Apr 26 14:33:32 EDT 2018


Thats fine...I can wait until after hours.  When would that be for you?

I think it would be helpful as I've decompiled much of IdP v2.3/4 Java 
classes and there are tons of debug statements in the opensaml library 
that would help to diagnose many of these types of issues.

Again - my SP works with other Shib IdPs at my site so there is either 
something amiss w/ the TestShib IdP or a difference between its config 
and what local ones (although most of that are the defaults).



On 4/26/2018 2:29 PM, Klingenstein, Nate wrote:
>
> I'm not sure.  It's under pretty extraordinary load.  I can obviously 
> do it, but I'm not sure what the ramiifcations will be, nor am I sure 
> that what you discover will be what you want to know, since most of 
> the providers out there don't run this decrepit 2.x install.
>
>
> But if it'd really help you out, we can definitely find a way.  Just 
> something a little off-hours in case I do something hideously dumb.
>
> ------------------------------------------------------------------------
> *From:* Bobby Lawrence <robertl at jlab.org>
> *Sent:* Thursday, April 26, 2018 11:16:28 AM
> *To:* Klingenstein, Nate
> *Cc:* users at shibboleth.net
> *Subject:* Re: TestShib metadata issues?
>
> Nate - is it possible to set the "org.opensaml" logger to DEBUG on the 
> TestShib IdP?  At least temporarily while I debug my issue?
>
>
> On 4/26/2018 12:56 PM, Klingenstein, Nate wrote:
>>
>> The upgrade to 3 is stalled because Kevin is a vastly more competent 
>> sysadmin than I am and he hasn't had time to do his thing.
>>
>>
>> I would've been slapping up versions just like I always did.  We're 
>> in a better place.
>>
>> ------------------------------------------------------------------------
>> *From:* users <users-bounces at shibboleth.net> 
>> <mailto:users-bounces at shibboleth.net> on behalf of Bobby Lawrence 
>> <robertl at jlab.org> <mailto:robertl at jlab.org>
>> *Sent:* Thursday, April 26, 2018 7:22:30 AM
>> *To:* users at shibboleth.net <mailto:users at shibboleth.net>
>> *Subject:* Re: TestShib metadata issues?
>>
>> So it seems that the SP side of this is good to go now, but I'm still 
>> having an issue on the IdP side.  I'm not sure what it is yet but my 
>> SP works with the exact same config with other IdPs at my site.  One 
>> of them is shibboleth idp 3.3 and one is 2.3.8 (which I'm in the 
>> process of retiring).  I do see that TestShib is running 2.4.  Seems 
>> odd to me that this test environment is almost a full version behind, 
>> but oh well..maybe a TestShib 3 will pop up sometime lol.
>>
>> Anyway - is it at all possible to change the TestShib IdP process log 
>> config and set the "org.opensaml" logger to DEBUG?
>>
>>
>> On 4/25/2018 7:22 PM, Nate Klingenstein wrote:
>>> I cleared out two uploads that were bad, but they had been there for 
>>> some time, and it looked like the aggregator was skipping them. The 
>>> SP logs appear like it was loading metadata happily without incident 
>>> except for a one-minute hiccup at 9:20 EDT with no obvious cause.
>>>
>>> I'm able to look up your IdP now and the metadata file is loading 
>>> without incident.  I was talking with Kevin, but he stepped away 
>>> right before it worked, so I don't think he did anything.  I don't 
>>> know an invocation URL for the SP, but I suspect it'll work.
>>>
>>> Thanks for letting us know promptly, please let me know if it 
>>> doesn't work for you, and I blame tommyknockers.
>>>
>>>
>>
>> -- 
>> Bobby Lawrence (robertl at jlab.org <mailto:robertl at jlab.org>)
>> Jefferson Lab MIS
>> 757-269-5818
>>
>>
>
> -- 
> Bobby Lawrence (robertl at jlab.org <mailto:robertl at jlab.org>)
> Jefferson Lab MIS
> 757-269-5818

-- 
Bobby Lawrence (robertl at jlab.org)
Jefferson Lab MIS
757-269-5818

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180426/39353028/attachment.html>


More information about the users mailing list