TestShib metadata issues?
Bobby Lawrence
robertl at jlab.org
Thu Apr 26 14:33:32 EDT 2018
Thats fine...I can wait until after hours. When would that be for you?
I think it would be helpful as I've decompiled much of IdP v2.3/4 Java
classes and there are tons of debug statements in the opensaml library
that would help to diagnose many of these types of issues.
Again - my SP works with other Shib IdPs at my site so there is either
something amiss w/ the TestShib IdP or a difference between its config
and what local ones (although most of that are the defaults).
On 4/26/2018 2:29 PM, Klingenstein, Nate wrote:
>
> I'm not sure. It's under pretty extraordinary load. I can obviously
> do it, but I'm not sure what the ramiifcations will be, nor am I sure
> that what you discover will be what you want to know, since most of
> the providers out there don't run this decrepit 2.x install.
>
>
> But if it'd really help you out, we can definitely find a way. Just
> something a little off-hours in case I do something hideously dumb.
>
> ------------------------------------------------------------------------
> *From:* Bobby Lawrence <robertl at jlab.org>
> *Sent:* Thursday, April 26, 2018 11:16:28 AM
> *To:* Klingenstein, Nate
> *Cc:* users at shibboleth.net
> *Subject:* Re: TestShib metadata issues?
>
> Nate - is it possible to set the "org.opensaml" logger to DEBUG on the
> TestShib IdP? At least temporarily while I debug my issue?
>
>
> On 4/26/2018 12:56 PM, Klingenstein, Nate wrote:
>>
>> The upgrade to 3 is stalled because Kevin is a vastly more competent
>> sysadmin than I am and he hasn't had time to do his thing.
>>
>>
>> I would've been slapping up versions just like I always did. We're
>> in a better place.
>>
>> ------------------------------------------------------------------------
>> *From:* users <users-bounces at shibboleth.net>
>> <mailto:users-bounces at shibboleth.net> on behalf of Bobby Lawrence
>> <robertl at jlab.org> <mailto:robertl at jlab.org>
>> *Sent:* Thursday, April 26, 2018 7:22:30 AM
>> *To:* users at shibboleth.net <mailto:users at shibboleth.net>
>> *Subject:* Re: TestShib metadata issues?
>>
>> So it seems that the SP side of this is good to go now, but I'm still
>> having an issue on the IdP side. I'm not sure what it is yet but my
>> SP works with the exact same config with other IdPs at my site. One
>> of them is shibboleth idp 3.3 and one is 2.3.8 (which I'm in the
>> process of retiring). I do see that TestShib is running 2.4. Seems
>> odd to me that this test environment is almost a full version behind,
>> but oh well..maybe a TestShib 3 will pop up sometime lol.
>>
>> Anyway - is it at all possible to change the TestShib IdP process log
>> config and set the "org.opensaml" logger to DEBUG?
>>
>>
>> On 4/25/2018 7:22 PM, Nate Klingenstein wrote:
>>> I cleared out two uploads that were bad, but they had been there for
>>> some time, and it looked like the aggregator was skipping them. The
>>> SP logs appear like it was loading metadata happily without incident
>>> except for a one-minute hiccup at 9:20 EDT with no obvious cause.
>>>
>>> I'm able to look up your IdP now and the metadata file is loading
>>> without incident. I was talking with Kevin, but he stepped away
>>> right before it worked, so I don't think he did anything. I don't
>>> know an invocation URL for the SP, but I suspect it'll work.
>>>
>>> Thanks for letting us know promptly, please let me know if it
>>> doesn't work for you, and I blame tommyknockers.
>>>
>>>
>>
>> --
>> Bobby Lawrence (robertl at jlab.org <mailto:robertl at jlab.org>)
>> Jefferson Lab MIS
>> 757-269-5818
>>
>>
>
> --
> Bobby Lawrence (robertl at jlab.org <mailto:robertl at jlab.org>)
> Jefferson Lab MIS
> 757-269-5818
--
Bobby Lawrence (robertl at jlab.org)
Jefferson Lab MIS
757-269-5818
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180426/39353028/attachment.html>
More information about the users
mailing list