TestShib metadata issues?

Thu Apr 26 14:44:26 EDT 2018

(and I think it'd be 11:00, unless I've been over here too long)

________________________________
From: Bobby Lawrence <robertl at jlab.org>
Sent: Thursday, April 26, 2018 11:36:40 AM
To: Klingenstein, Nate
Cc: users at shibboleth.net
Subject: Re: TestShib metadata issues?

Thats midnight eastern right?  I suppose thats OK..the test should only take a few minutes.

On 4/26/2018 2:35 PM, Klingenstein, Nate wrote:

Goodness if I know at this point.  If 8:00 PDT isn't too late for you, let's do it.

I rule out no possibility here other than a fix being released for 2. ;D

________________________________
From: Bobby Lawrence <robertl at jlab.org><mailto:robertl at jlab.org>
Sent: Thursday, April 26, 2018 11:33:32 AM
To: Klingenstein, Nate
Cc: users at shibboleth.net<mailto:users at shibboleth.net>
Subject: Re: TestShib metadata issues?

Thats fine...I can wait until after hours.  When would that be for you?

I think it would be helpful as I've decompiled much of IdP v2.3/4 Java classes and there are tons of debug statements in the opensaml library that would help to diagnose many of these types of issues.

Again - my SP works with other Shib IdPs at my site so there is either something amiss w/ the TestShib IdP or a difference between its config and what local ones (although most of that are the defaults).

On 4/26/2018 2:29 PM, Klingenstein, Nate wrote:

I'm not sure.  It's under pretty extraordinary load.  I can obviously do it, but I'm not sure what the ramiifcations will be, nor am I sure that what you discover will be what you want to know, since most of the providers out there don't run this decrepit 2.x install.

But if it'd really help you out, we can definitely find a way.  Just something a little off-hours in case I do something hideously dumb.

________________________________
From: Bobby Lawrence <robertl at jlab.org><mailto:robertl at jlab.org>
Sent: Thursday, April 26, 2018 11:16:28 AM
To: Klingenstein, Nate
Cc: users at shibboleth.net<mailto:users at shibboleth.net>
Subject: Re: TestShib metadata issues?

Nate - is it possible to set the "org.opensaml" logger to DEBUG on the TestShib IdP?  At least temporarily while I debug my issue?

On 4/26/2018 12:56 PM, Klingenstein, Nate wrote:

The upgrade to 3 is stalled because Kevin is a vastly more competent sysadmin than I am and he hasn't had time to do his thing.

I would've been slapping up versions just like I always did.  We're in a better place.

________________________________
From: users <users-bounces at shibboleth.net><mailto:users-bounces at shibboleth.net> on behalf of Bobby Lawrence <robertl at jlab.org><mailto:robertl at jlab.org>
Sent: Thursday, April 26, 2018 7:22:30 AM
To: users at shibboleth.net<mailto:users at shibboleth.net>
Subject: Re: TestShib metadata issues?

So it seems that the SP side of this is good to go now, but I'm still having an issue on the IdP side.  I'm not sure what it is yet but my SP works with the exact same config with other IdPs at my site.  One of them is shibboleth idp 3.3 and one is 2.3.8 (which I'm in the process of retiring).  I do see that TestShib is running 2.4.  Seems odd to me that this test environment is almost a full version behind, but oh well..maybe a TestShib 3 will pop up sometime lol.

Anyway - is it at all possible to change the TestShib IdP process log config and set the "org.opensaml" logger to DEBUG?

On 4/25/2018 7:22 PM, Nate Klingenstein wrote:
I cleared out two uploads that were bad, but they had been there for some time, and it looked like the aggregator was skipping them.  The SP logs appear like it was loading metadata happily without incident except for a one-minute hiccup at 9:20 EDT with no obvious cause.

I'm able to look up your IdP now and the metadata file is loading without incident.  I was talking with Kevin, but he stepped away right before it worked, so I don't think he did anything.  I don't know an invocation URL for the SP, but I suspect it'll work.

Thanks for letting us know promptly, please let me know if it doesn't work for you, and I blame tommyknockers.

--
Bobby Lawrence (robertl at jlab.org<mailto:robertl at jlab.org>)
Jefferson Lab MIS
757-269-5818

--
Bobby Lawrence (robertl at jlab.org<mailto:robertl at jlab.org>)
Jefferson Lab MIS
757-269-5818

--
Bobby Lawrence (robertl at jlab.org<mailto:robertl at jlab.org>)
Jefferson Lab MIS
757-269-5818

--
Bobby Lawrence (robertl at jlab.org<mailto:robertl at jlab.org>)
Jefferson Lab MIS
757-269-5818
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180426/3aabe8da/attachment.html>