Fwd: shibd 3 crashes on start ApplicationOverride related

cneberg cneberg at gmail.com
Wed Jul 18 14:19:39 EDT 2018


The updated shibboleth 3 SP shibd crashes on start

I’ve tried this on a few different versions of redhat with a fresh
install and upgrading an older SP I can reproduce the crash on all of
them.

For reference here are some configs of my test system

Linux blah.example.com 2.6.32-573.3.1.el6.x86_64 #1 SMP Mon Aug 10
09:44:54 EDT 2015 x86_64 x86_64 x86_64 GNU/Linux

Red Hat Enterprise Linux Workstation release 6.10 (Santiago)

 rpm -qa | grep shibboleth

shibboleth-3.0.0-1.1.el6.x86_64

I just more than one Application override in the Application defaults section

…

<ApplicationOverride id="q1"  entityID="https://test1.example.com/shibboleth"/>

<ApplicationOverride id="q2"  entityID="https://test2.example.com/shibboleth"/>

</ApplicationDefaults>

Then I start the process

su -s /bin/bash shibd

/usr/sbin/shibd -tF

2018-07-18 11:49:56 CRIT XMLTooling.Config : libcurl lacks
OpenSSL-specific options, this will greatly limit functionality

2018-07-18 11:49:56 WARN Shibboleth.Application : insecure cookieProps
setting, set to "https" for SSL/TLS-only usage

2018-07-18 11:49:56 WARN Shibboleth.Application : handlerSSL should be
enabled for SSL/TLS-enabled web sites

2018-07-18 11:49:56 ERROR OpenSAML.MetadataProvider.Chaining : error
building MetadataProvider: XML configuration resource missing url/path
attributes and has no inline content

2018-07-18 11:49:56 ERROR OpenSAML.MetadataProvider.Chaining : error
building MetadataProvider: XML configuration resource missing url/path
attributes and has no inline content

2018-07-18 11:49:56 ERROR OpenSAML.MetadataProvider.Chaining : error
building MetadataProvider: XML configuration resource missing url/path
attributes and has no inline content

terminate called after throwing an instance of 'shibsp::ConfigurationException*'

Aborted (core dumped)

I don’t think the ERROR’s and CRIT are related because they exist even
when I can get it start.  If I remove the overrides it starts.

Thanks,
Christopher


More information about the users mailing list