shibd not starting, shibsp::ListenerException

Evelthon Prodromou prodromou.evelthon at ucy.ac.cy
Thu Nov 2 12:33:28 UTC 2023 

Hello all,


Need help with shibd service not starting (results of _journalctl -xe  
below)_.

System details:

  * CentOS7, latest updates
  * shibboleth SP 3.4.1
  * SELinux in permissive mode.

Sock file is not created and everything fails after that.

I went through shibd.log but I cannot find any reference to the cause of 
the error (Contents of shibd.logger below).

I've also checked the following folders and confirmed they are owned by 
shibd:

  * /run/shibboleth
  * /var/log/shibboleth
  * /var/cache/shibboleth


Could someone point me to the right direction?


-- Evelthon


_Results of/journalctl -xe/ after a failed /systemctl start 
shibd.service/ attempt_

Nov 01 13:36:12 domain.com shibboleth[11407]: ERROR Shibboleth.Listener 
[11407] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:12 domain.com shibboleth[11407]: WARN Shibboleth.Listener 
[11407] shib_check_user [default]: cannot connect socket (17)...
Nov 01 13:36:12 domain.com shibboleth[11407]: CRIT Shibboleth.Listener 
[11407] shib_check_user [default]: socket server unavailable, failing
Nov 01 13:36:12 domain.com shibboleth[11407]: ERROR Shibboleth.Apache 
[11407] shib_check_user: Cannot connect to shibd process, a site 
administrator should be notified that this web server has malfunctioned.
Nov 01 13:36:12 domain.com shibboleth[11160]: ERROR Shibboleth.Listener 
[11160] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:12 domain.com shibboleth[11160]: WARN Shibboleth.Listener 
[11160] shib_check_user [default]: cannot connect socket (17)...retrying
Nov 01 13:36:13 domain.com shibboleth[11794]: ERROR Shibboleth.Listener 
[11794] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:13 domain.com shibboleth[11794]: WARN Shibboleth.Listener 
[11794] shib_check_user [default]: cannot connect socket (17)...
Nov 01 13:36:13 domain.com shibboleth[11794]: CRIT Shibboleth.Listener 
[11794] shib_check_user [default]: socket server unavailable, failing
Nov 01 13:36:13 domain.com shibboleth[11794]: ERROR Shibboleth.Apache 
[11794] shib_check_user: Cannot connect to shibd process, a site 
administrator should be notified that this web server has malfunctioned.
Nov 01 13:36:13 domain.com shibboleth[9772]: ERROR Shibboleth.Listener 
[9772] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:13 domain.com shibboleth[9772]: WARN Shibboleth.Listener 
[9772] shib_check_user [default]: cannot connect socket (17)...retrying
Nov 01 13:36:13 domain.com shibboleth[11982]: ERROR Shibboleth.Listener 
[11982] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:13 domain.com shibboleth[11982]: WARN Shibboleth.Listener 
[11982] shib_check_user [default]: cannot connect socket (17)...
Nov 01 13:36:13 domain.com shibboleth[11982]: CRIT Shibboleth.Listener 
[11982] shib_check_user [default]: socket server unavailable, failing
Nov 01 13:36:13 domain.com shibboleth[11982]: ERROR Shibboleth.Apache 
[11982] shib_check_user: Cannot connect to shibd process, a site 
administrator should be notified that this web server has malfunctioned.
Nov 01 13:36:13 domain.com shibboleth[12238]: ERROR Shibboleth.Listener 
[12238] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:13 domain.com shibboleth[12238]: WARN Shibboleth.Listener 
[12238] shib_check_user [default]: cannot connect socket (17)...retrying
Nov 01 13:36:13 domain.com shibboleth[11157]: ERROR Shibboleth.Listener 
[11157] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:13 domain.com shibboleth[11157]: WARN Shibboleth.Listener 
[11157] shib_check_user [default]: cannot connect socket (17)...retrying
Nov 01 13:36:14 domain.com shibboleth[12078]: ERROR Shibboleth.Listener 
[12078] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:14 domain.com shibboleth[12078]: WARN Shibboleth.Listener 
[12078] shib_check_user [default]: cannot connect socket (17)...
Nov 01 13:36:14 domain.com shibboleth[12078]: CRIT Shibboleth.Listener 
[12078] shib_check_user [default]: socket server unavailable, failing
Nov 01 13:36:14 domain.com shibboleth[12078]: ERROR Shibboleth.Apache 
[12078] shib_check_user: Cannot connect to shibd process, a site 
administrator should be notified that this web server has malfunctioned.
Nov 01 13:36:14 domain.com shibboleth[11160]: ERROR Shibboleth.Listener 
[11160] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:14 domain.com shibboleth[11160]: WARN Shibboleth.Listener 
[11160] shib_check_user [default]: cannot connect socket (17)...retrying
Nov 01 13:36:15 domain.com shibboleth[11715]: ERROR Shibboleth.Listener 
[11715] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:15 domain.com shibboleth[11715]: WARN Shibboleth.Listener 
[11715] shib_check_user [default]: cannot connect socket (17)...retrying
Nov 01 13:36:15 domain.com shibboleth[11614]: ERROR Shibboleth.Listener 
[11614] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:15 domain.com shibboleth[11614]: WARN Shibboleth.Listener 
[11614] shib_check_user [default]: cannot connect socket (17)...
Nov 01 13:36:15 domain.com shibboleth[11614]: CRIT Shibboleth.Listener 
[11614] shib_check_user [default]: socket server unavailable, failing
Nov 01 13:36:15 domain.com shibboleth[11614]: ERROR Shibboleth.Apache 
[11614] shib_check_user: Cannot connect to shibd process, a site 
administrator should be notified that this web server has malfunctioned.
Nov 01 13:36:15 domain.com shibboleth[12238]: ERROR Shibboleth.Listener 
[12238] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:15 domain.com shibboleth[12238]: WARN Shibboleth.Listener 
[12238] shib_check_user [default]: cannot connect socket (17)...retrying
Nov 01 13:36:15 domain.com shibboleth[12229]: ERROR Shibboleth.Listener 
[12229] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:15 domain.com shibboleth[12229]: WARN Shibboleth.Listener 
[12229] shib_check_user [default]: cannot connect socket (17)...retrying
Nov 01 13:36:15 domain.com shibboleth[12232]: ERROR Shibboleth.Listener 
[12232] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:15 domain.com shibboleth[12232]: WARN Shibboleth.Listener 
[12232] shib_check_user [default]: cannot connect socket (17)...retrying
Nov 01 13:36:17 domain.com shibboleth[9772]: ERROR Shibboleth.Listener 
[9772] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:17 domain.com shibboleth[9772]: WARN Shibboleth.Listener 
[9772] shib_check_user [default]: cannot connect socket (17)...
Nov 01 13:36:17 domain.com shibboleth[9772]: CRIT Shibboleth.Listener 
[9772] shib_check_user [default]: socket server unavailable, failing
Nov 01 13:36:17 domain.com shibboleth[9772]: ERROR Shibboleth.Apache 
[9772] shib_check_user: Cannot connect to shibd process, a site 
administrator should be notified that this web server has malfunctioned.
Nov 01 13:36:17 domain.com shibboleth[11715]: ERROR Shibboleth.Listener 
[11715] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:17 domain.com shibboleth[11715]: WARN Shibboleth.Listener 
[11715] shib_check_user [default]: cannot connect socket (17)...retrying
Nov 01 13:36:17 domain.com shibboleth[12229]: ERROR Shibboleth.Listener 
[12229] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:17 domain.com shibboleth[12229]: WARN Shibboleth.Listener 
[12229] shib_check_user [default]: cannot connect socket (17)...retrying
Nov 01 13:36:17 domain.com shibboleth[12232]: ERROR Shibboleth.Listener 
[12232] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:17 domain.com shibboleth[12232]: WARN Shibboleth.Listener 
[12232] shib_check_user [default]: cannot connect socket (17)...retrying
Nov 01 13:36:17 domain.com shibboleth[11157]: ERROR Shibboleth.Listener 
[11157] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:17 domain.com shibboleth[11157]: WARN Shibboleth.Listener 
[11157] shib_check_user [default]: cannot connect socket (17)...
Nov 01 13:36:17 domain.com shibboleth[11157]: CRIT Shibboleth.Listener 
[11157] shib_check_user [default]: socket server unavailable, failing
Nov 01 13:36:17 domain.com shibboleth[11157]: ERROR Shibboleth.Apache 
[11157] shib_check_user: Cannot connect to shibd process, a site 
administrator should be notified that this web server has malfunctioned.
Nov 01 13:36:18 domain.com shibboleth[12233]: ERROR Shibboleth.Listener 
[12233] shib_check_user [default]: failed socket call (connect), result 
(2): No such file or directory
Nov 01 13:36:18 domain.com shibboleth[12233]: WARN Shibboleth.Listener 
[12233] shib_check_user [default]: cannot connect socket (17)...retrying

_
_

_Contents of /shibd.logger/_

# set overall behavior
log4j.rootCategory=DEBUG, shibd_log, warn_log


# fairly verbose for DEBUG, so generally leave at INFO
log4j.category.XMLTooling.XMLObject=INFO
log4j.category.XMLTooling.XMLObjectBuilder=INFO
log4j.category.XMLTooling.KeyInfoResolver=INFO
log4j.category.Shibboleth.IPRange=INFO
log4j.category.Shibboleth.PropertySet=INFO

# raise for low-level tracing of SOAP client HTTP/SSL behavior
log4j.category.XMLTooling.libcurl=INFO

# useful categories to tune independently:
#
# tracing of SAML messages and security policies
log4j.category.OpenSAML.MessageDecoder=DEBUG
log4j.category.OpenSAML.MessageEncoder=DEBUG
log4j.category.OpenSAML.SecurityPolicyRule=DEBUG
log4j.category.XMLTooling.SOAPClient=DEBUG
# interprocess message remoting
log4j.category.Shibboleth.Listener=DEBUG
# mapping of requests to applicationId
log4j.category.Shibboleth.RequestMapper=DEBUG
# high level session cache operations
#log4j.category.Shibboleth.SessionCache=DEBUG
# persistent storage and caching
log4j.category.XMLTooling.StorageService=DEBUG

# logs XML being signed or verified if set to DEBUG
log4j.category.XMLTooling.Signature.Debugger=INFO, sig_log
log4j.additivity.XMLTooling.Signature.Debugger=false
log4j.ownAppenders.XMLTooling.Signature.Debugger=true

# the tran log blocks the "default" appender(s) at runtime
# Level should be left at INFO for this category
log4j.category.Shibboleth-TRANSACTION=INFO, tran_log
log4j.additivity.Shibboleth-TRANSACTION=false
log4j.ownAppenders.Shibboleth-TRANSACTION=true

# uncomment to suppress particular event types
#log4j.category.Shibboleth-TRANSACTION.AuthnRequest=WARN
#log4j.category.Shibboleth-TRANSACTION.Login=WARN
#log4j.category.Shibboleth-TRANSACTION.Logout=WARN

# define the appenders

log4j.appender.shibd_log=org.apache.log4j.RollingFileAppender
log4j.appender.shibd_log.fileName=/var/log/shibboleth/shibd.log
log4j.appender.shibd_log.maxFileSize=1000000
log4j.appender.shibd_log.maxBackupIndex=10
log4j.appender.shibd_log.layout=org.apache.log4j.PatternLayout
log4j.appender.shibd_log.layout.ConversionPattern=%d{%Y-%m-%d %H:%M:%S} 
%p %c %x: %m%n

log4j.appender.warn_log=org.apache.log4j.RollingFileAppender
log4j.appender.warn_log.fileName=/var/log/shibboleth/shibd_warn.log
log4j.appender.warn_log.maxFileSize=1000000
log4j.appender.warn_log.maxBackupIndex=10
log4j.appender.warn_log.layout=org.apache.log4j.PatternLayout
log4j.appender.warn_log.layout.ConversionPattern=%d{%Y-%m-%d %H:%M:%S} 
%p %c %x: %m%n
log4j.appender.warn_log.threshold=WARN

log4j.appender.tran_log=org.apache.log4j.RollingFileAppender
log4j.appender.tran_log.fileName=/var/log/shibboleth/transaction.log
log4j.appender.tran_log.maxFileSize=1000000
log4j.appender.tran_log.maxBackupIndex=20
log4j.appender.tran_log.layout=org.apache.log4j.PatternLayout
log4j.appender.tran_log.layout.ConversionPattern=%d{%Y-%m-%d 
%H:%M:%S}|%c|%m%n

log4j.appender.sig_log=org.apache.log4j.FileAppender
log4j.appender.sig_log.fileName=/var/log/shibboleth/signature.log
log4j.appender.sig_log.layout=org.apache.log4j.PatternLayout
log4j.appender.sig_log.layout.ConversionPattern=%m

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20231102/7faf427f/attachment.htm>

More information about the users mailing list