Unable to locate metadata
Julien Cochennec
julien.cochennec at ac-orleans-tours.fr
Wed Sep 23 14:31:13 UTC 2020
Oh, and BTW, is there any additional info/debug I can get in any log files?
Those messages seems to be written by shibd, when I look into shibd.log
in the docker container, I see those messages, and also this.
I'd like to have more details about the unlocated metadata.
[root at cc401110ee9b /]# tail /var/log/shibboleth/shibd.log
2020-09-23 12:54:55 ERROR OpenSSL : error code: 33558530 in bss_file.c,
line 402
2020-09-23 12:54:55 ERROR OpenSSL : error data:
fopen('/run/secrets/sp_key','r')
2020-09-23 12:54:55 ERROR OpenSSL : error code: 537346050 in bss_file.c,
line 404
2020-09-23 12:54:55 CRIT Shibboleth.Application : error building
CredentialResolver: Unable to load private key from file
(/run/secrets/sp_key).
2020-09-23 12:54:55 DEBUG Shibboleth.ServiceProvider : registered
remoted message endpoint (default::getHeaders::Application)
2020-09-23 12:54:55 INFO Shibboleth.Listener : listener service starting
2020-09-23 12:54:55 INFO XMLTooling.StorageService : cleanup thread
started...running every 900 seconds
2020-09-23 12:54:55 DEBUG OpenSAML.MetadataProvider.XML : reload thread
started...running when signaled
2020-09-23 12:54:55 DEBUG Shibboleth.AttributeFilter : reload thread
started...running when signaled
2020-09-23 13:36:11 WARN Shibboleth.SessionInitiator.SAML2 [1]
[default]: unable to locate metadata for provider
(http://idp.docker.localhost/idp/shibboleth)
Le 23/09/2020 à 14:56, Julien Cochennec a écrit :
>
> Yes! Thank you.
>
> I removed the validUntil attribute, entirely, without replacing it. Is
> it legal?
>
> I still get this error afterwards :
>
> shib_sp_container | httpd-error [Wed Sep 23 12:52:07.660717 2020]
> [mod_shib:error] [pid 46:tid [client 172.19.0.6:59308] Unable to
> locate metadata for identity provider
> (http://idp.docker.localhost/idp/shibboleth)
> shib_sp_container | httpd-combined 172.19.0.6 - -
> [23/Sep/2020:12:52:07 +0000] "GET /secure HTTP/1.1" 500 1185 "-"
> "Mozilla/5.0 (X11; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0"
>
> Any other error I would have missed?
>
>
> Le 23/09/2020 à 12:24, Alan Buxey via users a écrit :
>> hi,
>>
>> would suggest looking at logs or running in higher debug mode..... as
>> i think with
>> "validUntil="2020-07-02T09:04:27.274Z" the server wont be loading in
>> that IDP, its expired.
>>
>> alan
>>
>>
> --
> Julien Cochennec
> Pôle de compétences - gestion des identités
>
> Méljulien.cochennec at ac-orleans-tours.fr
> Tél 02 38 83 48 88
>
> DSI - Rectorat d'Orléans-Tours
> 10 Rue Molière
> 45000 Orléans
> www.ac-orleans-tours.fr
>
--
Julien Cochennec
Pôle de compétences - gestion des identités
Mél julien.cochennec at ac-orleans-tours.fr
Tél 02 38 83 48 88
DSI - Rectorat d'Orléans-Tours
10 Rue Molière
45000 Orléans
www.ac-orleans-tours.fr
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200923/60c70904/attachment.htm>
More information about the users
mailing list