[EXT] Newbie IDP installation question

[Yeargan, Yancey]

I would check the Tomcat logs  first. See if the Shibboleth application (war file) is even loading successfully. There may be a dependency that got missed or something else preventing the Shibboleth IDP from loading.

After you get Tomcat to load the application, then proceed with the following.


When starting out with the Shibboleth Identity Provider, I found it immensely helpful to increase the logging to debug level. I suggest starting with the following while learning ...

In file /opt/shibboleth-idp/conf/idp.properties, add the following …
idp.loglevel.idp=DEBUG

.. then check /opt/shibboleth-idp/idp-process.log for details. It's a bit overwhelming at first, but you'll grow accustomed to it over time.



Once the IDP is running, you may still get an access denied response when attempting to access the status page. The status page is restricted by IP address, and defaults to localhost only.

In file /opt/shibboleth-idp/conf/access-control.xml, check/update the following lines and add the IP network [in CIDR format] of the machine on which the web browser is running.

<entry key="AccessByIPAddress">
    <bean parent="shibboleth.IPRangeAccessControl"
        p:allowedRanges="#{ { '127.0.0.1/32' , '::1/128' } }" />
</entry>


Yancey Yeargan
IT Manager
IT Shared Services
________________________________
UNIVERSITY OF NORTH TEXAS SYSTEM
Office: 940.369.7521


On Dec 31, 2019, at 12:50 PM, Sriram Karra <skarra at asynk.io<mailto:skarra at asynk.io>> wrote:

I am trying to install IDP on a Linux box (on GCP). Tomcat is up and running, and I have deployed the idp.war file.

I was trying to do a status of the installation, and was expecting to see something like this: https://wiki.shibboleth.net/confluence/display/IDP30/Status<https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fdisplay%2FIDP30%2FStatus&data=02%7C01%7CYancey.Yeargan%40untsystem.edu%7Cf2da131c990f4dafc48308d78e2265ad%7C70de199207c6480fa318a1afcba03983%7C0%7C1%7C637134150708334172&sdata=pidvC0zBpFPpe9erbKU6Z5KjqZJs4Zb7mc06Iy%2Ft4yg%3D&reserved=0>, but I am not getting any reasonable output, or even errors. See output below. Any pointers in how to debug this further?

skarra at idp-shiboleth:/opt/shibboleth-idp$ sudo  -E ./bin/status.sh
(http://35.226.11.37:8080/idp/status<https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2F35.226.11.37%3A8080%2Fidp%2Fstatus&data=02%7C01%7CYancey.Yeargan%40untsystem.edu%7Cf2da131c990f4dafc48308d78e2265ad%7C70de199207c6480fa318a1afcba03983%7C0%7C1%7C637134150708334172&sdata=u5IAISg%2B%2FC6dktAuZFHJ78umhBCA%2BXDoKC2%2FKTPKe%2FI%3D&reserved=0>) http://35.226.11.37:8080/idp/status<https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2F35.226.11.37%3A8080%2Fidp%2Fstatus&data=02%7C01%7CYancey.Yeargan%40untsystem.edu%7Cf2da131c990f4dafc48308d78e2265ad%7C70de199207c6480fa318a1afcba03983%7C0%7C1%7C637134150708344163&sdata=1Hr61OOiz5LykWSM3b2Sz3Z6cM93qghdEj3brSxtRS8%3D&reserved=0>
--
For Consortium Member technical support, see https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=02%7C01%7CYancey.Yeargan%40untsystem.edu%7Cf2da131c990f4dafc48308d78e2265ad%7C70de199207c6480fa318a1afcba03983%7C0%7C0%7C637134150708364161&sdata=Z%2B%2BRfWvflEW%2FLNuLZkQiRRw0uEwIyCeAlIVK6Ce0RmA%3D&reserved=0
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200101/2783e672/attachment.html>