<div dir="ltr"><div><div><div><div><div><div><div><div><div><div><div><div>Hi. I&#39;m still relatively new to Shibboleth SW. I could succesfully set up some IdP and SP&#39;s (with their optional EDS&#39;s) and a CDS. So far, so good. But I noticed a some errors in my catalina.out, that I didn&#39;t notice before (since the servers where up and running). The error is the following:<br><br>&quot;SEVERE: Error initializing endpoint java.net.BindException: Address already in use &lt;null&gt;:8443&quot;<br><br></div>(The original in spanish is: &quot;GRAVE: Error inicializando punto final (endpoint) java.net.BindException: La dirección ya se está usando &lt;null&gt;:8443&quot;)<br><br></div>And it it in every IdP I configured. The basic set up of my IdP machines (either virtual or real) is:<br></div><div>- 64 bit architecture, 1 GB RAM minimun, 32 GB HD minimun<br></div>- Ubuntu Server 14.04.1<br></div>- Apache 2.4.7<br></div>- Tomcat 6.0.39<br></div>- Oracle Java 1.7.0_67<br></div>- OpenLDAP 2.4.31<br></div><div>- Shibboleth IdP 2.4.1<br></div><div><br></div>I&#39;m using the recommended library &quot;tomcat6-dta-ssl-1.0.0.jar&quot; for SOAP endpoints.<br><br></div>Some interesting bits of the confguration files:<br><br></div>/etc/tomcat6/server.xml<br><br><span style="font-family:courier new,monospace">    &lt;Connector port=&quot;8080&quot; protocol=&quot;HTTP/1.1&quot; <br>               connectionTimeout=&quot;20000&quot; <br>               URIEncoding=&quot;UTF-8&quot;<br>               redirectPort=&quot;8443&quot; /&gt;<br><br>    &lt;Connector port=&quot;8443&quot; protocol=&quot;org.apache.coyote.http11.Http11Protocol&quot;<br>               sslImplementationName=&quot;edu.internet2.middleware.security.tomcat6$<br>               scheme=&quot;https&quot; SSLEnabled=&quot;true&quot; clientAuth=&quot;want&quot;<br>               keystoreFile=&quot;/opt/shibboleth-idp/credentials/idp.jks&quot;<br>               keystorePass=&quot;changeit&quot; /&gt;<br><br>    &lt;Connector port=&quot;8009&quot; address=&quot;127.0.0.1&quot; enableLookups=&quot;false&quot;<br>               redirectPort=&quot;8443&quot; protocol=&quot;AJP/1.3&quot;<br>               tomcatAthentication=&quot;false&quot; /&gt;</span><br><br></div>/etc/apache2/sites-enabled/idp.conf             <br><br><span style="font-family:courier new,monospace">Listen 443<br>&lt;VirtualHost _default_:443&gt;<br>        ServerName      <a href="http://ubuntu-workstation.inictel-uni.edu.pe:433">ubuntu-workstation.inictel-uni.edu.pe:433</a><br>        ServerAdmin     <a href="mailto:cmunive@inictel-uni.edu.pe">cmunive@inictel-uni.edu.pe</a><br><br>        ErrorLog        ${APACHE_LOG_DIR}/idp_443_error.log<br>        TransferLog     ${APACHE_LOG_DIR}/idp_443_transfer.log<br>        CustomLog       ${APACHE_LOG_DIR}/idp_443_custom.log combined<br>        LogLevel        warn<br><br>        SSLEngine       on<br>        SSLOptions      -StdEnvVars +ExportCertData<br><br>        SSLCertificateFile      /etc/apache2/ssl/apache.crt<br>        SSLCertificateKeyFile   /etc/apache2/ssl/apache.key<br><br>        ProxyRequests   Off<br><br>        &lt;Proxy ajp://localhost:8009&gt;<br>                Allow from all<br>        &lt;/Proxy&gt;<br><br>        ProxyPass /idp ajp://localhost:8009/idp retry=5<br><br>        &lt;Files ~ &quot;\.(cgi|shtml|phtml|php3?)$&quot;&gt;<br>                SSLOptions +StdEnvVars<br>        &lt;/Files&gt;<br><br>        &lt;Directory &quot;/var/www/cgi-bin&quot;&gt;<br>                SSLOptions +StdEnvVars<br>        &lt;/Directory&gt;<br><br>        SetEnvIf User-Agent &quot;.*MSIE.*&quot; \<br>                nokeepalive ssl-unclean-shutdown \<br>                downgrade-1.0 force-response-1.0<br>&lt;/VirtualHost&gt;<br>Listen 8443<br>&lt;VirtualHost _default_:8443&gt;<br>        ServerName      <a href="http://ubuntu-workstation.inictel-uni.edu.pe:8443">ubuntu-workstation.inictel-uni.edu.pe:8443</a><br>        ServerAdmin     <a href="mailto:cmunive@inictel-uni.edu.pe">cmunive@inictel-uni.edu.pe</a><br><br>        SSLEngine       on<br>        SSLOptions      -StdEnvVars +ExportCertData<br><br>        SSLCertificateFile      /opt/shibboleth-idp/credentials/idp.crt<br>        SSLCertificateKeyFile   /opt/shibboleth-idp/credentials/idp.key<br><br>        ErrorLog        ${APACHE_LOG_DIR}/idp_8443_error.log<br>        TransferLog     ${APACHE_LOG_DIR}/idp_8443_transfer.log<br>        CustomLog       ${APACHE_LOG_DIR}/idp_8443_custom.log combined<br>        LogLevel        warn<br><br>        ProxyPass /idp ajp://localhost:8009/idp retry=2<br>        ProxyPassReverse /idp ajp://localhost:8009/idp<br><br>        &lt;Files ~ &quot;\.(cgi|shtml|phtml|php3?)$&quot;&gt;<br>                SSLOptions +StdEnvVars<br>        &lt;/Files&gt;<br><br>        &lt;Directory &quot;/var/www/cgi-bin&quot;&gt;<br>                SSLOptions +StdEnvVars<br>        &lt;/Directory&gt;<br><br>        SetEnvIf User-Agent &quot;.*MSIE.*&quot; \<br>                nokeepalive ssl-unclean-shutdown \<br>                downgrade-1.0 force-response-1.0<br>&lt;/VirtualHost&gt;</span><br><br></div>Like I said, it&#39;s not a problem that prevents the normal procedures; I can log in to secured resources from those IdP&#39;s... but those errors shouldn&#39;t be there; I probably missed something while configuring those machines.<br><br>Please, help me. If you guys need any other info, I&#39;ll try to post it as soon as I can. Thanks in advance.<br></div>