<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; ">I have 2 servers for Shib, load balanced. They are identical IIS7 boxes running 2.3.1 Shib.</div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; "><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal; ">One of the two servers has decided that members of the BellNet federation have no metadata...</div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal; "><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal; ">The config for BellNet is:</div><div
style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal; "><br></div><div style="background-color: transparent; "><div style="background-color: transparent; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"><span class="Apple-tab-span" style="white-space: pre; "> </span><!-- BELNET Federation --></font></div><div style="background-color: transparent; "><span class="Apple-tab-span" style="white-space:pre"><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </font></span></div><div style="background-color: transparent; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"> <SessionInitiator type="Chaining" Location="/Login" isDefault="true" id="Intranet" relayState="cookie" entityID="https://identity.fundp.ac.be/idp/shibboleth"></font></div><div
style="background-color: transparent; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"> <SessionInitiator type="SAML2" acsIndex="1" acsByIndex="false" template="bindingTemplate.html"/></font></div><div style="background-color: transparent; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"> <SessionInitiator type="Shib1" acsIndex="5"/></font></div><div style="background-color: transparent; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"> </SessionInitiator></font></div><div style="background-color: transparent; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></div><div style="background-color: transparent; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"><span
class="Apple-tab-span" style="white-space:pre"> </span> </font></div><div style="background-color: transparent; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"><span class="Apple-tab-span" style="white-space:pre"> </span><MetadataProvider type="XML" uri="https://federation.belnet.be/federation-metadata.xml" ></font></div><div style="background-color: transparent; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"> <MetadataFilter type="Signature" verifyName="false" certificate="certificate.federation.belnet.be.pem"/></font></div><div style="background-color: transparent; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"> <MetadataFilter type="RequireValidUntil" maxValidityInterval="7776000"/></font></div><div style="background-color: transparent; "><font class="Apple-style-span"
face="arial, helvetica, sans-serif"><span class="Apple-tab-span" style="white-space: pre; "> </span></MetadataProvider><span class="Apple-tab-span" style="white-space: pre; "> </span></font></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal; "><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal; ">Shibd -check is happy. I can hit <span class="Apple-style-span" style="font-size: 16px; ">https://federation.belnet.be/federation-metadata.xml from the server in question. The config files for both machines are identical (I usually do the mods to 1 server and copy Shibboleth2.xml and any dependent files to the other server. When a BellNet customer hits my primary server, everything is fine. If they hit my secondary server they
get a 500 and the logs show this:</span></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal; "><span class="Apple-style-span" style="font-size: 16px; "><br></span></div><div style="background-color: transparent; "><font class="Apple-style-span" face="arial, helvetica, sans-serif">2012-11-12 06:40:23 WARN Shibboleth.SessionInitiator.SAML2 [66]: unable to locate metadata for provider (urn:mace:kuleuven.be:kulassoc:wenk.be)</font><br></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: 'Times New Roman'; background-color: transparent; font-style: normal; "><font class="Apple-style-span" face="arial, helvetica, sans-serif"><br></font></div><div style="color: rgb(0, 0, 0); font-size: 16px; font-family: arial, helvetica, sans-serif; background-color: transparent; font-style: normal; "><font class="Apple-style-span" face="arial, helvetica,
sans-serif">Can anyone offer a clue for me here on this? All other feds on the secondary server are working fine. Just this one fails.</font></div></div></div></body></html>