TestShib metadata issues?

[Bobby Lawrence]

Yea - you are correct LOL.  Ok I'll ping you shortly before 11 to make 
sure we are on.  Thanks for your help


On 4/26/2018 2:44 PM, Klingenstein, Nate wrote:
>
> (and I think it'd be 11:00, unless I've been over here too long)
>
> ------------------------------------------------------------------------
> *From:* Bobby Lawrence <robertl at jlab.org>
> *Sent:* Thursday, April 26, 2018 11:36:40 AM
> *To:* Klingenstein, Nate
> *Cc:* users at shibboleth.net
> *Subject:* Re: TestShib metadata issues?
>
> Thats midnight eastern right?  I suppose thats OK..the test should 
> only take a few minutes.
>
>
> On 4/26/2018 2:35 PM, Klingenstein, Nate wrote:
>>
>> Goodness if I know at this point.  If 8:00 PDT isn't too late for 
>> you, let's do it.
>>
>>
>> I rule out no possibility here other than a fix being released for 2. ;D
>>
>> ------------------------------------------------------------------------
>> *From:* Bobby Lawrence <robertl at jlab.org> <mailto:robertl at jlab.org>
>> *Sent:* Thursday, April 26, 2018 11:33:32 AM
>> *To:* Klingenstein, Nate
>> *Cc:* users at shibboleth.net <mailto:users at shibboleth.net>
>> *Subject:* Re: TestShib metadata issues?
>>
>> Thats fine...I can wait until after hours.  When would that be for you?
>>
>> I think it would be helpful as I've decompiled much of IdP v2.3/4 
>> Java classes and there are tons of debug statements in the opensaml 
>> library that would help to diagnose many of these types of issues.
>>
>> Again - my SP works with other Shib IdPs at my site so there is 
>> either something amiss w/ the TestShib IdP or a difference between 
>> its config and what local ones (although most of that are the defaults).
>>
>>
>>
>> On 4/26/2018 2:29 PM, Klingenstein, Nate wrote:
>>>
>>> I'm not sure. It's under pretty extraordinary load.  I can obviously 
>>> do it, but I'm not sure what the ramiifcations will be, nor am I 
>>> sure that what you discover will be what you want to know, since 
>>> most of the providers out there don't run this decrepit 2.x install.
>>>
>>>
>>> But if it'd really help you out, we can definitely find a way. Just 
>>> something a little off-hours in case I do something hideously dumb.
>>>
>>> ------------------------------------------------------------------------
>>> *From:* Bobby Lawrence <robertl at jlab.org> <mailto:robertl at jlab.org>
>>> *Sent:* Thursday, April 26, 2018 11:16:28 AM
>>> *To:* Klingenstein, Nate
>>> *Cc:* users at shibboleth.net <mailto:users at shibboleth.net>
>>> *Subject:* Re: TestShib metadata issues?
>>>
>>> Nate - is it possible to set the "org.opensaml" logger to DEBUG on 
>>> the TestShib IdP?  At least temporarily while I debug my issue?
>>>
>>>
>>> On 4/26/2018 12:56 PM, Klingenstein, Nate wrote:
>>>>
>>>> The upgrade to 3 is stalled because Kevin is a vastly more 
>>>> competent sysadmin than I am and he hasn't had time to do his thing.
>>>>
>>>>
>>>> I would've been slapping up versions just like I always did. We're 
>>>> in a better place.
>>>>
>>>> ------------------------------------------------------------------------
>>>> *From:* users <users-bounces at shibboleth.net> 
>>>> <mailto:users-bounces at shibboleth.net> on behalf of Bobby Lawrence 
>>>> <robertl at jlab.org> <mailto:robertl at jlab.org>
>>>> *Sent:* Thursday, April 26, 2018 7:22:30 AM
>>>> *To:* users at shibboleth.net <mailto:users at shibboleth.net>
>>>> *Subject:* Re: TestShib metadata issues?
>>>>
>>>> So it seems that the SP side of this is good to go now, but I'm 
>>>> still having an issue on the IdP side.  I'm not sure what it is yet 
>>>> but my SP works with the exact same config with other IdPs at my 
>>>> site.  One of them is shibboleth idp 3.3 and one is 2.3.8 (which 
>>>> I'm in the process of retiring). I do see that TestShib is running 
>>>> 2.4.  Seems odd to me that this test environment is almost a full 
>>>> version behind, but oh well..maybe a TestShib 3 will pop up 
>>>> sometime lol.
>>>>
>>>> Anyway - is it at all possible to change the TestShib IdP process 
>>>> log config and set the "org.opensaml" logger to DEBUG?
>>>>
>>>>
>>>> On 4/25/2018 7:22 PM, Nate Klingenstein wrote:
>>>>> I cleared out two uploads that were bad, but they had been there 
>>>>> for some time, and it looked like the aggregator was skipping 
>>>>> them.  The SP logs appear like it was loading metadata happily 
>>>>> without incident except for a one-minute hiccup at 9:20 EDT with 
>>>>> no obvious cause.
>>>>>
>>>>> I'm able to look up your IdP now and the metadata file is loading 
>>>>> without incident.  I was talking with Kevin, but he stepped away 
>>>>> right before it worked, so I don't think he did anything.  I don't 
>>>>> know an invocation URL for the SP, but I suspect it'll work.
>>>>>
>>>>> Thanks for letting us know promptly, please let me know if it 
>>>>> doesn't work for you, and I blame tommyknockers.
>>>>>
>>>>>
>>>>
>>>> -- 
>>>> Bobby Lawrence (robertl at jlab.org <mailto:robertl at jlab.org>)
>>>> Jefferson Lab MIS
>>>> 757-269-5818
>>>>
>>>>
>>>
>>> -- 
>>> Bobby Lawrence (robertl at jlab.org <mailto:robertl at jlab.org>)
>>> Jefferson Lab MIS
>>> 757-269-5818
>>
>> -- 
>> Bobby Lawrence (robertl at jlab.org <mailto:robertl at jlab.org>)
>> Jefferson Lab MIS
>> 757-269-5818
>
> -- 
> Bobby Lawrence (robertl at jlab.org <mailto:robertl at jlab.org>)
> Jefferson Lab MIS
> 757-269-5818

-- 
Bobby Lawrence (robertl at jlab.org)
Jefferson Lab MIS
757-269-5818

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180426/f9e2727e/attachment.html>