Multiple Duo OIDC

[Mark Boyce]

The log entry:
ERROR [net.shibboleth.idp.plugin.authn.duo.impl.HealthCheckDuoOIDCAuthAPI:97] - Profile Action HealthCheckDuoOIDCAuthAPI: Duo API health check failed
net.shibboleth.idp.plugin.authn.duo.DuoClientException: Could not execute Duo HTTP request
        at net.shibboleth.idp.plugin.authn.duo.nimbus.impl.NimbusClient.executeRequest(NimbusClient.java:246)
Caused by: java.net.UnknownHostException: none: Name or service not known
        at java.base/java.net.Inet6AddressImpl.lookupAllHostAddr(Native Method)

I've duplicated everything in duo-oidc.properties to add the new "secureduo" (I didn't like "special")... without success. By changing the entity in duo-oidc-authn.xml I can send to the second instance successfully... 

Thanks,
m.

-----Original Message-----
From: Cantor, Scott <cantor.2 at osu.edu> 
Sent: Friday, August 5, 2022 2:54 PM
To: Shib Users <users at shibboleth.net>
Cc: Mark Boyce <Mark.Boyce at ucop.edu>
Subject: Re: Multiple Duo OIDC

CAUTION: EXTERNAL EMAIL

On 8/5/22, 3:51 PM, "users on behalf of Mark Boyce via users" <users-bounces at shibboleth.net on behalf of users at shibboleth.net> wrote:

> All good except my second instance is failing the health check… any 
> assistance/thoughts would be appreciated…

I guess that would depend on the error but there isn't much else to assume but that your integration settings for that one are wrong. Using properties for this gets very ugly very fast and is extremely error prone.

-- Scott