systemctl status Shibboleth

Lohr, Donald lohrda at jmu.edu
Mon May 11 16:25:53 UTC 2020


The "systemctl -l status Shibboleth" returns:


Shibboleth.service - Shibboleth Identity Provider
    Loaded: loaded (/etc/systemd/system/Shibboleth.service; enabled; 
vendor preset: disabled)
    Active: active (running) since Thu 2020-05-07 08:54:46 EDT; 4 days ago
  Main PID: 1654 (java)
    CGroup: /system.slice/Shibboleth.service
            ├─1654 /etc/alternatives/java -Djetty.host=0.0.0.0 
-Didp.home=/opt/shibboleth-idp -Djava.io.tmpdir=/opt/jetty/shib-base/tmp 
-jar /opt/jetty/start.jar jetty.home=/opt/jetty 
jetty.base=/opt/jetty/shib-base
            └─1761 
/usr/lib/jvm/java-11-openjdk-11.0.7.10-4.el7_8.x86_64/bin/java -Xmx1500m 
-XX:MaxPermSize=128m -Djava.io.tmpdir=tmp -Djetty.home=/opt/jetty 
-Djetty.base=/opt/jetty/shib-base -Djava.io.tmpdir=tmp 
-Didp.home=/opt/shibboleth-idp -cp 
/opt/jetty-distribution-9.3.24.v20180605/lib/apache-jsp/org.eclipse.jdt.core.compiler.ecj-4.4.2.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/apache-jsp/org.eclipse.jetty.apache-jsp-9.3.24.v20180605.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/apache-jsp/org.mortbay.jasper.apache-el-8.0.33.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/apache-jsp/org.mortbay.jasper.apache-jsp-8.0.33.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/apache-jstl/org.apache.taglibs.taglibs-standard-impl-1.2.5.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/apache-jstl/org.apache.taglibs.taglibs-standard-spec-1.2.5.jar:/opt/jetty-distribution-9.3.24.v20180605/shib-base/lib/ext/mysql-connector-java.jar:/opt/jetty-distribution-9.3.24.v20180605/shib-base/lib/logging/jcl-over-slf4j-1.7.21.jar:/opt/jetty-distribution-9.3.24.v20180605/shib-base/lib/logging/logback-access-1.1.7.jar:/opt/jetty-distribution-9.3.24.v20180605/shib-base/lib/logging/logback-classic-1.1.7.jar:/opt/jetty-distribution-9.3.24.v20180605/shib-base/lib/logging/logback-core-1.1.7.jar:/opt/jetty-distribution-9.3.24.v20180605/shib-base/resources:/opt/jetty-distribution-9.3.24.v20180605/lib/servlet-api-3.1.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/jetty-schemas-3.1.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/jetty-http-9.3.24.v20180605.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/jetty-server-9.3.24.v20180605.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/jetty-xml-9.3.24.v20180605.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/jetty-util-9.3.24.v20180605.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/jetty-io-9.3.24.v20180605.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/jetty-jndi-9.3.24.v20180605.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/jndi/javax.mail.glassfish-1.4.1.v201005082020.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/jndi/javax.transaction-api-1.2.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/jetty-security-9.3.24.v20180605.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/jetty-servlet-9.3.24.v20180605.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/jetty-servlets-9.3.24.v20180605.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/jetty-webapp-9.3.24.v20180605.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/jetty-deploy-9.3.24.v20180605.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/jetty-plus-9.3.24.v20180605.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/jetty-annotations-9.3.24.v20180605.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/annotations/asm-6.0.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/annotations/asm-commons-6.0.jar:/opt/jetty-distribution-9.3.24.v20180605/lib/annotations/javax.annotation-api-1.2.jar 
org.eclipse.jetty.xml.XmlConfiguration 
/opt/jetty-distribution-9.3.24.v20180605/shib-base/tmp/start_4805215927952382306.properties 
/opt/jetty-distribution-9.3.24.v20180605/etc/jetty-logging.xml 
/opt/jetty-distribution-9.3.24.v20180605/etc/jetty.xml 
/opt/jetty-distribution-9.3.24.v20180605/etc/jetty-http.xml 
/opt/jetty-distribution-9.3.24.v20180605/shib-base/etc/jetty-requestlog.xml 
/opt/jetty-distribution-9.3.24.v20180605/etc/jetty-ssl.xml 
/opt/jetty-distribution-9.3.24.v20180605/shib-base/etc/jetty-ssl-context.xml 
/opt/jetty-distribution-9.3.24.v20180605/etc/jetty-https.xml 
/opt/jetty-distribution-9.3.24.v20180605/etc/jetty-deploy.xml 
/opt/jetty-distribution-9.3.24.v20180605/etc/jetty-plus.xml 
/opt/jetty-distribution-9.3.24.v20180605/etc/jetty-annotations.xml


Not sure what all it means however.

Thanks,
Don

On 5/8/20 2:49 PM, Christopher Bongaarts wrote:
> I'd start by looking at the Shib IdP log file (idp-process.log) or, if 
> it is not getting to that point, the Jetty log file, to get more 
> information on where it is failing on startup.
>
> You might also get a hint if you use systemctl's suggestion to add 
> "-l" to see the rest of the ellipsized line.
>
> On 5/8/2020 10:13 AM, Lohr, Donald wrote:
>> 1) On one IdP server "systemctl status Shibboleth" returns:
>>
>> Shibboleth.service - Shibboleth Identity Provider
>>    Loaded: loaded (/etc/systemd/system/Shibboleth.service; enabled; 
>> vendor preset: disabled)
>> *Active: **active**(running) since Sun 2020-05-03 03:01:32 EDT; 5 
>> days ago*
>>  Main PID: 827 (java)
>>    CGroup: /system.slice/Shibboleth.service
>>            ├─ 827 /usr/lib/jvm/*jdk-11.0.2*/bin/java 
>> -Djetty.host=0.0.0.0 -Didp.home=/opt/shibboleth-idp 
>> -Djava.io.tmpdir=/opt/jetty/shib-base/tmp -jar /opt/jetty/start.jar 
>> jetty.home=/opt/jetty jetty.base=/opt...
>>            └─1103 /usr/lib/jvm/*jdk-11.0.2*/bin/java -Xmx1500m 
>> -XX:MaxPermSize=128m -Djava.io.tmpdir=tmp -Djetty.home=/opt/jetty 
>> -Djetty.base=/opt/jetty/shib-base -Djava.io.tmpdir=tmp 
>> -Didp.home=/opt/shibboleth...
>>
>> The /java -version/ command on that server reports:
>> openjdk version "*11.0.2*" 2019-01-15
>> OpenJDK Runtime Environment 18.9 (build *11.0.2+9*)
>> OpenJDK 64-Bit Server VM 18.9 (build *11.0.2+9, **mixed mode*)
>>
>> The /whereis java/ command on that server reports:
>> java: /usr/bin/java /usr/lib/java /etc/java /usr/share/java 
>> /usr/lib/jvm/*jdk-11.0.2*/bin/java
>>
>>
>> 2) On another IdP server "systemctl status Shibboleth" returns:
>>
>> Shibboleth.service - Shibboleth Identity Provider
>>    Loaded: loaded (/etc/systemd/system/Shibboleth.service; enabled; 
>> vendor preset: disabled)
>> *Active: active (running) since Thu 2020-05-07 08:54:46 EDT; 1 day 1h 
>> ago*
>>  Main PID: 1654 (java)
>>    CGroup: /system.slice/Shibboleth.service
>>            ├─1654 /etc/alternatives/java -Djetty.host=0.0.0.0 
>> -Didp.home=/opt/shibboleth-idp 
>> -Djava.io.tmpdir=/opt/jetty/shib-base/tmp -jar /opt/jetty/start.jar 
>> jetty.home=/opt/jetty jetty.base=/opt/jetty/shi...
>>            └─1761 
>> /usr/lib/jvm/*java-11-openjdk-11.0.7.10-4.el7_8.x86_64*/bin/java 
>> -Xmx1500m -XX:MaxPermSize=128m -Djava.io.tmpdir=tmp 
>> -Djetty.home=/opt/jetty -Djetty.base=/opt/jetty/shib-base 
>> -Djava.io.tmpdir=...
>>
>> systemd[1]: *Shibboleth.service failed.*
>> systemd[1]: Started Shibboleth Identity Provider.
>> java[1654]: OpenJDK 64-Bit Server VM warning: Ignoring option 
>> MaxPermSize; support was removed in 8.0
>> java[1654]: 2020-05-07 08:54:50.376:INFO::main: Logging initialized 
>> @993ms
>> java[1654]: 2020-05-07 08:54:51.041:INFO::main: Redirecting 
>> stderr/stdout to 
>> /opt/jetty-distribution-9.3.24.v20180605/shib-base/logs/2020_05_07.stderrout.log
>> java[1654]: WARNING: An illegal reflective access operation has occurred
>> java[1654]: WARNING: Illegal reflective access by 
>> org.springframework.beans.BeanUtils 
>> (file:/opt/jetty-distribution-9.3.24.v20180605/shib-base/tmp/jetty-0.0.0.0-80-i...
>> java[1654]: WARNING: Please consider reporting this to the 
>> maintainers of org.springframework.beans.BeanUtils
>> java[1654]: WARNING: Use --illegal-access=warn to enable warnings of 
>> further illegal reflective access operations
>> java[1654]: WARNING: All illegal access operations will be denied in 
>> a future release
>> Hint: Some lines were ellipsized, use -l to show in full.
>>
>> The /java -version/ command on that server reports:
>> openjdk version "*11.0.**7*" 2020-04-14 LTS
>> OpenJDK Runtime Environment 18.9 (build *11.0.7+10*-LTS)
>> OpenJDK 64-Bit Server VM 18.9 (build *11.0.7+10*-LTS, *mixed mode, 
>> sharing*)
>>
>> The /whereis java/ command on that server reports:
>> java: /usr/bin/java /usr/lib/java /etc/java /usr/share/java 
>> /usr/share/man/man1/java.1.gz
>>
>>
>>
>> In my current role, I do not manage the server hardware, OS, or java 
>> flavor/version.  But am seeking help on the "systemd[1]: 
>> *Shibboleth.service failed.*" Error.
>>
>> Thanks again,
>> Don
>>
>> -- 
>> D o n a l d   L o h r
>> I n f o r m a t i o n   S y s t e m s
>> J a m e s   M a d i s o n   U n i v e r s i t y
>> 5 4 0 . 5 6 8 . 3 7 3 0
>>
>
> -- 
> %%  Christopher A. Bongaarts   %%cab at umn.edu           %%
> %%  OIT - Identity Management  %%http://umn.edu/~cab   %%
> %%  University of Minnesota    %%  +1 (612) 625-1809    %%
>

-- 
D o n a l d   L o h r
I n f o r m a t i o n   S y s t e m s
J a m e s   M a d i s o n   U n i v e r s i t y
5 4 0 . 5 6 8 . 3 7 3 0

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200511/e73a0d11/attachment.htm>


More information about the users mailing list