shibboleth samld process going down with open SAML v 3.3.1

Alan Buxey alan.buxey at myunidays.com
Mon Jun 2 16:46:44 UTC 2025


hi,

looks like its probably coincidence rather than the upgrade being the cause
(ie just unfortunate timing)


> 15:38:59.094(06/02) WARN  Shibboleth.DEPRECATION : MetadataGenerator
> handler
>

that handler is now deprecated - as per docs, comment out the
metadatagenerator section


>
>
> 15:38:59.085(06/02) CRIT  OpenSAML.MetadataProvider.Chaining : failure
> initializing MetadataProvider: Metadata instance was invalid at time of
> acquisition.
>

the metadata validity window has expired.


> 15:38:40.351(06/02) ERROR OpenSAML.MetadataProvider.XML : error while
> loading resource (http://shibcontent.com/htdocs/
> federation-metadata.xml): XML er
>
> ror(s) during parsing, check log for specifics
>

check the file that is being collected - looks like it's got errors in it.
maybe it's truncated?


> 15:38:40.361(06/02) INFO  OpenSAML.MetadataProvider.XML : loaded XML
> resource (/elsnfs/shibUpdate/feds/matadata.xml)
>

 this file also appears to have some XML issues (position
of md:AttributeService)

you also seem to be using the old InCommon metadata aggregator feed (
InCommon-metadata-idp-only.xml) which is now deprecated and you need to use
the MDQ service now:
https://spaces.at.internet2.edu/display/MDQ/home

alan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250602/2d2d1b2c/attachment.htm>


More information about the users mailing list