Unable to locate metadata

Julien Cochennec julien.cochennec at ac-orleans-tours.fr
Wed Sep 23 14:31:13 UTC 2020


Oh, and BTW, is there any additional info/debug I can get in any log files?

Those messages seems to be written by shibd, when I look into shibd.log 
in the docker container, I see those messages, and also this.

I'd like to have more details about the unlocated metadata.

[root at cc401110ee9b /]# tail /var/log/shibboleth/shibd.log
2020-09-23 12:54:55 ERROR OpenSSL : error code: 33558530 in bss_file.c, 
line 402
2020-09-23 12:54:55 ERROR OpenSSL : error data: 
fopen('/run/secrets/sp_key','r')
2020-09-23 12:54:55 ERROR OpenSSL : error code: 537346050 in bss_file.c, 
line 404
2020-09-23 12:54:55 CRIT Shibboleth.Application : error building 
CredentialResolver: Unable to load private key from file 
(/run/secrets/sp_key).
2020-09-23 12:54:55 DEBUG Shibboleth.ServiceProvider : registered 
remoted message endpoint (default::getHeaders::Application)
2020-09-23 12:54:55 INFO Shibboleth.Listener : listener service starting
2020-09-23 12:54:55 INFO XMLTooling.StorageService : cleanup thread 
started...running every 900 seconds
2020-09-23 12:54:55 DEBUG OpenSAML.MetadataProvider.XML : reload thread 
started...running when signaled
2020-09-23 12:54:55 DEBUG Shibboleth.AttributeFilter : reload thread 
started...running when signaled
2020-09-23 13:36:11 WARN Shibboleth.SessionInitiator.SAML2 [1] 
[default]: unable to locate metadata for provider 
(http://idp.docker.localhost/idp/shibboleth)

Le 23/09/2020 à 14:56, Julien Cochennec a écrit :
>
> Yes! Thank you.
>
> I removed the validUntil attribute, entirely, without replacing it. Is 
> it legal?
>
> I still get this error afterwards :
>
> shib_sp_container     | httpd-error [Wed Sep 23 12:52:07.660717 2020] 
> [mod_shib:error] [pid 46:tid [client 172.19.0.6:59308] Unable to 
> locate metadata for identity provider 
> (http://idp.docker.localhost/idp/shibboleth)
> shib_sp_container     | httpd-combined 172.19.0.6 - - 
> [23/Sep/2020:12:52:07 +0000] "GET /secure HTTP/1.1" 500 1185 "-" 
> "Mozilla/5.0 (X11; Linux x86_64; rv:82.0) Gecko/20100101 Firefox/82.0"
>
> Any other error I would have missed?
>
>
> Le 23/09/2020 à 12:24, Alan Buxey via users a écrit :
>> hi,
>>
>> would suggest looking at logs or running in higher debug mode..... as 
>> i think with
>> "validUntil="2020-07-02T09:04:27.274Z" the server wont be loading in 
>> that IDP, its expired.
>>
>> alan
>>
>>
> -- 
> Julien Cochennec
> Pôle de compétences - gestion des identités
>
>ljulien.cochennec at ac-orleans-tours.fr
> Tél 02 38 83 48 88
>
> DSI - Rectorat d'Orléans-Tours
> 10 Rue Molière
> 45000 Orléans
> www.ac-orleans-tours.fr
>
-- 
Julien Cochennec
Pôle de compétences - gestion des identités

Mél julien.cochennec at ac-orleans-tours.fr
Tél 02 38 83 48 88

DSI - Rectorat d'Orléans-Tours
10 Rue Molière
45000 Orléans
www.ac-orleans-tours.fr

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200923/60c70904/attachment.htm>


More information about the users mailing list