SP Cert expiration log

[vadud3 at gmail.com]

On Wed, Jul 7, 2021 at 4:19 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 7/7/21, 4:14 PM, "users on behalf of vadud3 at gmail.com" <
> users-bounces at shibboleth.net on behalf of vadud3 at gmail.com> wrote:
>
> >    I am still learning and trying to understand the log.
>
> That's fine, you just didn't include any context, only stated a
> presumption that happens to be untrue.
>
> > When the certificate expired I saw this in the shibd.log.
> >    2021-07-01 20:23:11 WARN Shibboleth.SSO.SAML2 [35519] [default]:
> error processing incoming assertion:
> > SAML response reported an IdP error.
> >
> >   So looks like it is not related to certificate expiration as one
> possible factor.
>
> It means exactly what it says, nothing more. The status code in the SAML
> response wasn't success. Appropriately configuring the transaction log will
> include the status code(s) from the message if desired, apart from just
> tracing it with more log detail.
>

I do have transaction log as well. What should I be looking for in the log
to indicate an issue? Also this is current config for transaction log

log4j.appender.tran_log=org.apache.log4j.RollingFileAppender
log4j.appender.tran_log.fileName=/var/log/shibboleth/transaction.log
log4j.appender.tran_log.maxFileSize=1000000
log4j.appender.tran_log.maxBackupIndex=20
log4j.appender.tran_log.layout=org.apache.log4j.PatternLayout
log4j.appender.tran_log.layout.ConversionPattern=%d{%Y-%m-%d
%H:%M:%S}|%c|%m%n

Thanks,
Asif


>
> -- Scott
>
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>


-- 
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210707/ba6ab9e7/attachment.htm>