shibboleth-embedded-ds, shibd, and json cache file name

[Paul Fardy]

On Aug 12, 2019, at 11:27 PM, Paul Fardy <paul.fardy at utoronto.ca> wrote:
> 
> My understanding is that mod_shib (.../Shibboleth.sso/DiscoFeed) doesn't know the file name and doesn't need to know the name. mod_shib asks shibd and shibd maintains the cache.

I guess that's wrong. The cache file is owned by root and the error is logged by httpd and not shibd. And the is created, I believe, as a response to an HTTP request for /Shibboleth.sso/DiscoFeed.

... but it seems that the file is removed when I shut down shibd. Curious.

Still, httpd is looking for the wrong file:
> [Tue Aug 13 00:15:06.479675 2019] [mod_shib:error] [pid 7795] [client 142.150.249.114:50336] error while processing request:Unable to access cached feed in (/var/cache/shibboleth//64656661756c7468747470733a2f2f73702e696470782e75746f72617574682e75746f726f6e746f2e63612f73686962626f6c657468_ff655912.json).

I presumable the OS error is ENOFILE.

64656661756c7468747470733a2f2f73702e696470782e75746f72617574682e75746f726f6e746f2e63612f73686962626f6c657468_574b4360.json
vs
64656661756c7468747470733a2f2f73702e6964707a2e75746f72617574682e75746f726f6e746f2e63612f73686962626f6c657468_574b4360.json

Paul
-- 
Paul Fardy, Shib Admin, Info Security, ITS
University of Toronto