TestShib metadata issues?

[Bobby Lawrence]

Thats midnight eastern right?  I suppose thats OK..the test should only 
take a few minutes.


On 4/26/2018 2:35 PM, Klingenstein, Nate wrote:
>
> Goodness if I know at this point.  If 8:00 PDT isn't too late for you, 
> let's do it.
>
>
> I rule out no possibility here other than a fix being released for 2. ;D
>
> ------------------------------------------------------------------------
> *From:* Bobby Lawrence <robertl at jlab.org>
> *Sent:* Thursday, April 26, 2018 11:33:32 AM
> *To:* Klingenstein, Nate
> *Cc:* users at shibboleth.net
> *Subject:* Re: TestShib metadata issues?
>
> Thats fine...I can wait until after hours.  When would that be for you?
>
> I think it would be helpful as I've decompiled much of IdP v2.3/4 Java 
> classes and there are tons of debug statements in the opensaml library 
> that would help to diagnose many of these types of issues.
>
> Again - my SP works with other Shib IdPs at my site so there is either 
> something amiss w/ the TestShib IdP or a difference between its config 
> and what local ones (although most of that are the defaults).
>
>
>
> On 4/26/2018 2:29 PM, Klingenstein, Nate wrote:
>>
>> I'm not sure.  It's under pretty extraordinary load.  I can obviously 
>> do it, but I'm not sure what the ramiifcations will be, nor am I sure 
>> that what you discover will be what you want to know, since most of 
>> the providers out there don't run this decrepit 2.x install.
>>
>>
>> But if it'd really help you out, we can definitely find a way.  Just 
>> something a little off-hours in case I do something hideously dumb.
>>
>> ------------------------------------------------------------------------
>> *From:* Bobby Lawrence <robertl at jlab.org> <mailto:robertl at jlab.org>
>> *Sent:* Thursday, April 26, 2018 11:16:28 AM
>> *To:* Klingenstein, Nate
>> *Cc:* users at shibboleth.net <mailto:users at shibboleth.net>
>> *Subject:* Re: TestShib metadata issues?
>>
>> Nate - is it possible to set the "org.opensaml" logger to DEBUG on 
>> the TestShib IdP?  At least temporarily while I debug my issue?
>>
>>
>> On 4/26/2018 12:56 PM, Klingenstein, Nate wrote:
>>>
>>> The upgrade to 3 is stalled because Kevin is a vastly more competent 
>>> sysadmin than I am and he hasn't had time to do his thing.
>>>
>>>
>>> I would've been slapping up versions just like I always did.  We're 
>>> in a better place.
>>>
>>> ------------------------------------------------------------------------
>>> *From:* users <users-bounces at shibboleth.net> 
>>> <mailto:users-bounces at shibboleth.net> on behalf of Bobby Lawrence 
>>> <robertl at jlab.org> <mailto:robertl at jlab.org>
>>> *Sent:* Thursday, April 26, 2018 7:22:30 AM
>>> *To:* users at shibboleth.net <mailto:users at shibboleth.net>
>>> *Subject:* Re: TestShib metadata issues?
>>>
>>> So it seems that the SP side of this is good to go now, but I'm 
>>> still having an issue on the IdP side. I'm not sure what it is yet 
>>> but my SP works with the exact same config with other IdPs at my 
>>> site.  One of them is shibboleth idp 3.3 and one is 2.3.8 (which I'm 
>>> in the process of retiring).  I do see that TestShib is running 
>>> 2.4.  Seems odd to me that this test environment is almost a full 
>>> version behind, but oh well..maybe a TestShib 3 will pop up sometime 
>>> lol.
>>>
>>> Anyway - is it at all possible to change the TestShib IdP process 
>>> log config and set the "org.opensaml" logger to DEBUG?
>>>
>>>
>>> On 4/25/2018 7:22 PM, Nate Klingenstein wrote:
>>>> I cleared out two uploads that were bad, but they had been there 
>>>> for some time, and it looked like the aggregator was skipping 
>>>> them.  The SP logs appear like it was loading metadata happily 
>>>> without incident except for a one-minute hiccup at 9:20 EDT with no 
>>>> obvious cause.
>>>>
>>>> I'm able to look up your IdP now and the metadata file is loading 
>>>> without incident.  I was talking with Kevin, but he stepped away 
>>>> right before it worked, so I don't think he did anything.  I don't 
>>>> know an invocation URL for the SP, but I suspect it'll work.
>>>>
>>>> Thanks for letting us know promptly, please let me know if it 
>>>> doesn't work for you, and I blame tommyknockers.
>>>>
>>>>
>>>
>>> -- 
>>> Bobby Lawrence (robertl at jlab.org <mailto:robertl at jlab.org>)
>>> Jefferson Lab MIS
>>> 757-269-5818
>>>
>>>
>>
>> -- 
>> Bobby Lawrence (robertl at jlab.org <mailto:robertl at jlab.org>)
>> Jefferson Lab MIS
>> 757-269-5818
>
> -- 
> Bobby Lawrence (robertl at jlab.org <mailto:robertl at jlab.org>)
> Jefferson Lab MIS
> 757-269-5818

-- 
Bobby Lawrence (robertl at jlab.org)
Jefferson Lab MIS
757-269-5818

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180426/951a66a8/attachment.html>