<div dir="ltr">Good Afternoon Everyone.<div><br></div><div>I'm following shibs (IdP) and google docs in order to integrated these two apps. It's working, but I'm worry about what the logs shows (entry 17:16:26.930 second line):</div>
<div><br></div><div><br></div><div><div>17:16:25.775 - DEBUG [org.apache.commons.httpclient.HttpMethodBase:1024] - Resorting to protocol version default close connection policy</div><div>17:16:25.776 - DEBUG [org.apache.commons.httpclient.HttpMethodBase:1028] - Should NOT close connection, using HTTP/1.1</div>
<div>17:16:25.777 - TRACE [org.apache.commons.httpclient.HttpConnection:874] - enter HttpConnection.isResponseAvailable()</div><div>17:16:25.778 - TRACE [org.apache.commons.httpclient.HttpConnection:1174] - enter HttpConnection.releaseConnection()</div>
<div>17:16:25.779 - DEBUG [org.apache.commons.httpclient.HttpConnection:1178] - Releasing connection back to connection manager.</div><div>17:16:25.780 - TRACE [org.apache.commons.httpclient.MultiThreadedHttpConnectionManager:630] - enter HttpConnectionManager.releaseConnection(HttpConnection)</div>
<div>17:16:25.780 - DEBUG [org.apache.commons.httpclient.MultiThreadedHttpConnectionManager:979] - Freeing connection, hostConfig=HostConfiguration[host=<a href="http://localhost:8080">http://localhost:8080</a>]</div><div>
17:16:25.781 - TRACE [org.apache.commons.httpclient.MultiThreadedHttpConnectionManager:805] - enter HttpConnectionManager.ConnectionPool.getHostPool(HostConfiguration)</div><div>17:16:25.782 - DEBUG [org.apache.commons.httpclient.util.IdleConnectionHandler:76] - Adding connection at: 1383171385782</div>
<div>17:16:25.783 - DEBUG [org.apache.commons.httpclient.MultiThreadedHttpConnectionManager:961] - Notifying no-one, there are no waiting threads</div><div>17:16:26.921 - TRACE [edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter:109] - Attempting to retrieve IdP session cookie.</div>
<div>17:16:26.925 - TRACE [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:335] - Looking up LoginContext with key 3a6e8e4b-6074-49a6-b953-897396ca501b from StorageService parition: loginContexts</div><div>
17:16:26.925 - TRACE [edu.internet2.middleware.shibboleth.idp.util.HttpServletHelper:341] - Retrieved LoginContext with key 3a6e8e4b-6074-49a6-b953-897396ca501b from StorageService parition: loginContexts</div><div>17:16:26.928 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: <a href="http://google.com/a/mygoogledomain.com">google.com/a/mygoogledomain.com</a></div>
<div>17:16:26.929 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:518] - Searching for entity descriptor with an entity ID of <a href="http://google.com/a/mygoogledomain.com">google.com/a/mygoogledomain.com</a></div>
<div>17:16:26.930 - TRACE [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:531] - Metadata root is an entity descriptor, checking if it's the one we're looking for.</div><div>17:16:26.930 - TRACE [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:538] - Found entity descriptor for entity with ID <a href="http://google.com/a/mygoogledomain.com">google.com/a/mygoogledomain.com</a> but it is no longer valid, skipping it.</div>
<div>17:16:26.931 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID <a href="http://google.com/a/mygoogledomain.com">google.com/a/mygoogledomain.com</a></div>
<div>17:16:26.932 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: <a href="http://google.com/a/mygoogledomain.com">google.com/a/mygoogledomain.com</a></div>
<div>17:16:26.933 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:518] - Searching for entity descriptor with an entity ID of <a href="http://google.com/a/mygoogledomain.com">google.com/a/mygoogledomain.com</a></div>
<div>17:16:26.934 - TRACE [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:531] - Metadata root is an entity descriptor, checking if it's the one we're looking for.</div><div>17:16:26.934 - TRACE [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:538] - Found entity descriptor for entity with ID <a href="http://google.com/a/mygoogledomain.com">google.com/a/mygoogledomain.com</a> but it is no longer valid, skipping it.</div>
<div>17:16:26.935 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:167] - Metadata document does not contain an EntityDescriptor with the ID <a href="http://google.com/a/mygoogledomain.com">google.com/a/mygoogledomain.com</a></div>
<div>17:16:26.936 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:253] - Checking child metadata provider for entity descriptor with entity ID: <a href="http://google.com/a/mygoogledomain.com">google.com/a/mygoogledomain.com</a></div>
<div>17:16:26.937 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:518] - Searching for entity descriptor with an entity ID of <a href="http://google.com/a/mygoogledomain.com">google.com/a/mygoogledomain.com</a></div>
<div>17:16:26.938 - TRACE [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:522] - Entity descriptor for the ID <a href="http://google.com/a/mygoogledomain.com">google.com/a/mygoogledomain.com</a> was found in index cache, returning</div>
</div><div><div>17:16:34.795 - TRACE [edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter:109] - Attempting to retrieve IdP session cookie.</div><div>17:16:34.796 - TRACE [edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter:109] - Attempting to retrieve IdP session cookie.</div>
<div>17:16:34.796 - TRACE [edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter:109] - Attempting to retrieve IdP session cookie.</div><div>17:16:35.302 - TRACE [edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter:109] - Attempting to retrieve IdP session cookie.</div>
<div>17:16:35.304 - TRACE [edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter:109] - Attempting to retrieve IdP session cookie.</div><div>17:16:35.306 - TRACE [edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter:109] - Attempting to retrieve IdP session cookie.</div>
<div>17:16:56.683 - TRACE [edu.internet2.middleware.shibboleth.idp.session.IdPSessionFilter:109] - Attempting to retrieve IdP session cookie.</div></div><div><br></div><div>I've tried to add the attribute validUntil to my SP metadata but there's no difference:</div>
<div><br></div><div><br></div><div><div><?xml version="1.0" encoding="UTF-8"?></div><div><EntityDescriptor entityID="<a href="http://google.com/a/mygoogledomain.com">google.com/a/mygoogledomain.com</a>" xmlns="urn:oasis:names:tc:SAML:2.0:metadata" validUntil="2014-01-01T00:00:00Z"></div>
<div> <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol"></div><div> <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat></div>
<div> <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="<a href="https://www.google.com/a/mygoogledomain.com/acs">https://www.google.com/a/mygoogledomain.com/acs</a>"/></div>
<div> </SPSSODescriptor></div><div></EntityDescriptor></div></div><div><br></div><div><br></div><div><br></div><div>In my relyingparty I have:</div><div><br></div><div>.....</div><div><br></div><div><div> <rp:RelyingParty id="<a href="http://google.com/a/mygoogledomain.com">google.com/a/mygoogledomain.com</a>" provider="<a href="http://190.85.66.110:10110/idp/shibboleth">http://190.85.66.110:10110/idp/shibboleth</a>" defaultSigningCredentialRef="IdPCredential"></div>
<div> <rp:ProfileConfiguration xsi:type="saml:SAML2SSOProfile" encryptAssertions="never" encryptNameIds="never"/></div><div> </rp:RelyingParty></div></div><div><br></div>
<div>....</div><div><br></div><div><div> <metadata:MetadataProvider id="<a href="http://mygoogledomain.com.id">mygoogledomain.com.id</a>" xsi:type="metadata:FilesystemMetadataProvider" metadataFile="/opt/shibboleth-idp/metadata/mygoogledomaincom-metadata.xml"</div>
<div> requireValidMetadata="false"></div><div> </metadata:MetadataProvider></div></div><div><br></div><div><br></div><div>I really want to eliminate the "Found entity descriptor for entity with ID <a href="http://google.com/a/mygoogledomain.com">google.com/a/mygoogledomain.com</a> but it is no longer valid, skipping it." message is there an attribute that I need to add? </div>
<div><br></div><div>Do I need to change the values of <strong style="font-size:13.333333015441895px;margin-top:0px;margin-bottom:0px;color:rgb(51,51,51);font-family:Arial,Helvetica,FreeSans,sans-serif;line-height:17.33333396911621px">refreshDelayFactor, </strong><strong style="font-size:13.333333015441895px;margin-top:0px;color:rgb(51,51,51);font-family:Arial,Helvetica,FreeSans,sans-serif;line-height:17.33333396911621px">minRefreshDelay and </strong><strong style="font-size:13.333333015441895px;margin-top:0px;color:rgb(51,51,51);font-family:Arial,Helvetica,FreeSans,sans-serif;line-height:17.33333396911621px">maxRefreshDelay </strong><span style="font-size:13.333333015441895px;margin-top:0px;color:rgb(51,51,51);font-family:Arial,Helvetica,FreeSans,sans-serif;line-height:17.33333396911621px">in order for the log to disappear</span><strong style="font-size:13.333333015441895px;margin-top:0px;color:rgb(51,51,51);font-family:Arial,Helvetica,FreeSans,sans-serif;line-height:17.33333396911621px">?</strong></div>
<div><strong style="font-size:13.333333015441895px;margin-top:0px;color:rgb(51,51,51);font-family:Arial,Helvetica,FreeSans,sans-serif;line-height:17.33333396911621px"><br></strong></div><div>Thanks!</div><div><br></div><div>
Best,</div><div><br></div><div>Thomas</div><div><br></div><div><br></div><div><br></div></div>