Suddenly all new metadata validation failing

Fri Mar 13 05:06:04 EDT 2020

On Fri, Mar 13, 2020 at 3:37 AM Rod Widdowson <rdw at steadingsoftware.com>
wrote:

> Check your logs (shibd) further up.  I’d guess that  metadata reload
> started to fail
>  a few days ago and you didn’t notice and now it’s all gone out of date...
>

Reloading is happening okay it seems. It's from my IDP server.

2020-03-13 07:40:58,779 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:387] - Service
'shibboleth.MetadataResolverService': Reload complete
2020-03-13 07:44:58,797 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:299]
- Metadata Resolver FilesystemMetadataResolver SiteSP2: Beginning refresh
of metadata from
'/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml'
2020-03-13 07:44:58,797 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:306]
- Metadata Resolver FilesystemMetadataResolver SiteSP2: Processing new
metadata from
'/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml'
2020-03-13 07:44:58,797 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:419]
- Metadata Resolver FilesystemMetadataResolver SiteSP2: Unmarshalling
metadata from
'/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml'
2020-03-13 07:44:58,801 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:462]
- Metadata Resolver FilesystemMetadataResolver SiteSP2: Preprocessing
metadata from
'/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml'
2020-03-13 07:44:58,801 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver:376] -
Metadata Resolver FilesystemMetadataResolver SiteSP2: Applying metadata
filter
2020-03-13 07:44:58,801 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:472]
- Metadata Resolver FilesystemMetadataResolver SiteSP2: Releasing cached
DOM for metadata from
'/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml'
2020-03-13 07:44:58,801 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:476]
- Metadata Resolver FilesystemMetadataResolver SiteSP2: Post-processing
metadata from
'/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml'
2020-03-13 07:44:58,802 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:480]
- Metadata Resolver FilesystemMetadataResolver SiteSP2: Computing
expiration time for metadata from
'/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml'
2020-03-13 07:44:58,802 - DEBUG
[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:485]
- Metadata Resolver FilesystemMetadataResolver SiteSP2: Expiration of
metadata from
'/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml'
will occur at 2020-03-13T11:44:58.797Z
2020-03-13 07:44:58,802 - INFO
[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:504]
- Metadata Resolver FilesystemMetadataResolver SiteSP2: New metadata
successfully loaded for
'/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml'
2020-03-13 07:44:58,802 - INFO
[org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:324]
- Metadata Resolver FilesystemMetadataResolver SiteSP2: Next refresh cycle
for metadata provider
'/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml'
will occur on '2020-03-13T10:44:58.798Z' ('2020-03-13T10:44:58.798Z' local
time)
2020-03-13 07:51:57,634 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:258]
- Service 'shibboleth.AttributeFilterService': Reloading service
configuration
2020-03-13 07:51:57,635 - INFO
[net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317]
- Loading XML bean definitions from file
[/opt/shibboleth-idp/conf/attribute-filter.xml]
2020-03-13 07:51:57,643 - DEBUG
[net.shibboleth.idp.attribute.filter.spring.impl.AttributeFilterPolicyGroupParser:66]
- Parsing attribute filter policy group ShibbolethFilterPolicy
2020-03-13 07:51:57,643 - DEBUG
[net.shibboleth.idp.attribute.filter.spring.BaseFilterParser:169] - Element
'AttributeFilterPolicy' 'id' attribute 'SiteApp1' is mapped to
'/AttributeFilterPolicyGroup:ShibbolethFilterPolicy/AttributeFilterPolicy:SiteApp1'
2020-03-13 07:51:57,644 - DEBUG
[net.shibboleth.idp.attribute.filter.spring.impl.AttributeFilterPolicyParser:84]
- Parsing configuration for attribute filter policy: SiteApp1
2020-03-13 07:51:57,644 - DEBUG
[net.shibboleth.idp.attribute.filter.spring.impl.AttributeRuleParser:97] -
permitValueRules [Generic bean: class
[net.shibboleth.idp.attribute.filter.Matcher$1]; scope=prototype;
abstract=false; lazyInit=false; autowireMode=0; dependencyCheck=0;
autowireCandidate=true; primary=false; factoryBeanName=null;
factoryMethodName=null; initMethodName=null; destroyMethodName=null]
2020-03-13 07:51:57,644 - DEBUG
[net.shibboleth.idp.attribute.filter.spring.impl.AttributeRuleParser:97] -
permitValueRules [Generic bean: class
[net.shibboleth.idp.attribute.filter.Matcher$1]; scope=prototype;
abstract=false; lazyInit=false; autowireMode=0; dependencyCheck=0;
autowireCandidate=true; primary=false; factoryBeanName=null;
factoryMethodName=null; initMethodName=null; destroyMethodName=null]
2020-03-13 07:51:57,645 - DEBUG
[net.shibboleth.idp.attribute.filter.spring.impl.AttributeRuleParser:97] -
permitValueRules [Generic bean: class
[net.shibboleth.idp.attribute.filter.Matcher$1]; scope=prototype;
abstract=false; lazyInit=false; autowireMode=0; dependencyCheck=0;
autowireCandidate=true; primary=false; factoryBeanName=null;
factoryMethodName=null; initMethodName=null; destroyMethodName=null]
2020-03-13 07:51:57,645 - DEBUG
[net.shibboleth.idp.attribute.filter.spring.BaseFilterParser:169] - Element
'AttributeFilterPolicy' 'id' attribute 'SiteApp2' is mapped to
'/AttributeFilterPolicyGroup:ShibbolethFilterPolicy/AttributeFilterPolicy:SiteApp2'
2020-03-13 07:51:57,645 - DEBUG
[net.shibboleth.idp.attribute.filter.spring.impl.AttributeFilterPolicyParser:84]
- Parsing configuration for attribute filter policy: SiteApp2
2020-03-13 07:51:57,645 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:583]
- Refreshing ApplicationContext:shibboleth.AttributeFilterService: startup
date [Fri Mar 13 07:51:57 UTC 2020]; parent: Root WebApplicationContext
2020-03-13 07:51:57,662 - DEBUG
[net.shibboleth.idp.attribute.filter.spring.impl.AttributeFilterServiceStrategy:54]
- Creating Attribute Filter ShibbolethAttributeFilter with  2 Policies
2020-03-13 07:51:57,663 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:380] - Service
'shibboleth.AttributeFilterService': Completed reload and swapped in latest
configuration for service 'shibboleth.AttributeFilterService'
2020-03-13 07:51:57,663 - INFO
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:984]
- Closing ApplicationContext:shibboleth.AttributeFilterService: startup
date [Fri Mar 13 07:36:57 UTC 2020]; parent: Root WebApplicationContext
2020-03-13 07:51:57,664 - INFO
[net.shibboleth.ext.spring.service.ReloadableSpringService:387] - Service
'shibboleth.AttributeFilterService': Reload complete
2020-03-13 07:51:58,096 - INFO
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:258]
- Service 'shibboleth.AttributeResolverService': Reloading service
configuration

>
> Sent from my iPad
>
> On 13 Mar 2020, at 07:47, Zico <mailzico at gmail.com> wrote:
>
> 
> Hello,
>
> I am observing this for last two days. My 3.x Shibboleth IDP can't perform
> validation for any new SP. Here 'new SP' doesn't mean... brand new SP but
> also it's happening with "any metadata".
> Like, I removed currently active one lately and prepared a new trust
> relationship with that SP metadata; which is also failing now.
>
> From error I see these:
>
>
>
>
>
>
> *src-resolve: Cannot resolve the name
> 'resolver:BasePrincipalConnectorType' to a(n) 'type definition'
> component. Error of schema creating Warning: cannot validate metadata.
> Check internet connetion ans www.w3.org <http://www.w3.org>
> availability. Warning: Error of schema creating Warning: src-resolve:
> Cannot resolve the name 'resolver:BasePrincipalConnectorType' to a(n) 'type
> definition' component      *
>
> --
> Best,
> Zico
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net

-- 
Best,
Zico
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200313/6a051fd8/attachment.html>