<html><head><meta http-equiv="Content-Type" content="text/html charset=iso-8859-1"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Mike,<div><br></div><div><div><div><blockquote type="cite"><div style="font-family: arial, helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: transparent; "><div style="background-color: transparent; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"><span class="Apple-tab-span" style="white-space: pre; "> </span><MetadataProvider type="XML" uri="<a href="https://federation.belnet.be/federation-metadata.xml">https://federation.belnet.be/federation-metadata.xml</a>" ></font></div><div style="background-color: transparent; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"> <MetadataFilter type="Signature" verifyName="false" certificate="certificate.federation.belnet.be.pem"/></font></div><div style="background-color: transparent; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"> <MetadataFilter type="RequireValidUntil" maxValidityInterval="7776000"/></font></div><div style="background-color: transparent; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"><span class="Apple-tab-span" style="white-space: pre; "> </span></MetadataProvider><span class="Apple-tab-span" style="white-space: pre; "> </span></font></div><div style="font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal; "><br></div><div style="font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal; ">Shibd -check is happy. I can hit <span class="Apple-style-span" style="font-size: 16px; "><a href="https://federation.belnet.be/federation-metadata.xml">https://federation.belnet.be/federation-metadata.xml</a><span class="Apple-converted-space"> </span>from the server in question. The config files for both machines are identical (I usually do the mods to 1 server and copy Shibboleth2.xml and any dependent files to the other server. When a BellNet customer hits my primary server, everything is fine. If they hit my secondary server they get a 500</span></div></div></blockquote><div><br></div><div>This is the expected error condition when there is no metadata found.</div><br><blockquote type="cite"><div style="font-family: arial, helvetica, sans-serif; font-size: 16px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: transparent; "><div style="font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal; "><span class="Apple-style-span" style="font-size: 16px; ">and the logs show this:</span></div><div style="font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal; "><span class="Apple-style-span" style="font-size: 16px; "><br></span></div><div style="background-color: transparent; "><font class="Apple-style-span" face="arial, helvetica, sans-serif">2012-11-12 06:40:23 WARN Shibboleth.SessionInitiator.SAML2 [66]: unable to locate metadata for provider (urn:mace:kuleuven.be:kulassoc:wenk.be)</font><br></div><div style="font-size: 16px; font-family: 'Times New Roman'; background-color: transparent; font-style: normal; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></div><div style="font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal; "><font class="Apple-style-span" face="arial, helvetica,
sans-serif">Can anyone offer a clue for me here on this? All other feds on the secondary server are working fine. Just this one fails.</font></div></div></blockquote></div><br></div></div><div>A couple obvious checks: is the metadata file in /var/run/shibboleth/? Is the signing certificate in place? Is this the right entityID and is it present in the metadata file? (it doesn't match the SessionInitiator)</div><div><br></div><div>You'll also get more descriptive logging messages during startup. Try touching /etc/shibboleth/shibboleth2.xml and checking the logs for anything more helpful.</div><div><br></div><div>Take care,</div><div>Nate.</div></body></html>