XML validation problem in apache when upgrading SP from v2 to v3

Simon McLeish simon.mcleish at gmail.com
Thu Jan 24 03:37:04 EST 2019


Just to record the final resolution of this problem in case anyone has it
in future. (I ran into it again upgrading a second SP.)

The solution is to make sure to stop and start apache, not to use the
graceful restart option. Graceful does not reload the XML schemas from
/usr/share/xml, which means that if there is a part of the shib config
(such as a RequestMapper) which is loaded by mod_shib, then apache is
trying to validate the XML without the v3 schema. This is not picked up
using either shibd -t or apachectl configtest, as these load the v3 schema
on run time.

So not a bug in Shibboleth, the issue just went away when I fully restarted
apache.

Cheers,
Simon

On Fri, Jan 4, 2019 at 2:33 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> > Actually, the problem went away when I changed <RequestMapper
> > type="XML"> to <RequestMapper type="Native">.
>
> I don't think that's possible, but it would be a bug.
>
> -- Scott
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190124/1e39b5e9/attachment.html>


More information about the users mailing list