<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title></title>
<style type="text/css">
<!--
body{margin-left:10px;margin-right:10px;margin-top:10px;margin-bottom:10px;}
-->
</style>
</head>
<body marginleft="10" marginright="10" margintop="10" marginbottom="10">
<div align="left" style="text-align:left;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;">Hi everyone,</font></div>
<br />
<div align="left" style="text-align:left;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;">I work at a university and we run a Shib IDP to provide SSO to our users as they use an ever increasing number of off campus hosted web sites.</font></div>
<br />
<div align="left" style="text-align:left;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;">This morning I got a call from our Help Desk telling me that there were Shib SSO errors. Eventually I figured out that the problem was only with the SPs which are part of the InCommon federation. About the time I was coming to this conclusion and finding that I was having a difficult time downloading the HTTP-file-backed metadata file from InCommon, the problem cleared up. I think they fixed it on their end (by switching to a "fall back" server or file).</font></div>
<br />
<div align="left" style="text-align:left;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;">Specifically we started seeing symptoms b/c of this first line in the InCommon metadata file:</font></div>
<br />
<div align="left" style="text-align:left;"><font face="Courier New" size="+0" color="#000000" style="font-family:Courier New;font-size:10pt;color:#000000;"> <Entitiesdescriptor ... </font><font face="Courier New" size="+0" color="#DD0000" style="font-family:Courier New;font-size:10pt;color:#DD0000;">validuntil="2015-02-25t10:00:00z"</font><font face="Courier New" size="+0" color="#000000" style="font-family:Courier New;font-size:10pt;color:#000000;"> ...</font></div>
<br />
<div align="left" style="text-align:left;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;">The error has been in the log file for a while:</font></div>
<div align="left" style="text-align:left;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;"> Error [org.Opensaml.Saml2.Metadata.Provider.Httpmetadataprovider:262] - error retrieving metadata from ...</font></div>
<br />
<div align="left" style="text-align:left;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;">Is there anything I can do to be alerted to this kind of thing?</font></div>
<div align="left" style="text-align:left;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;">I suppose I could have a script grep through the log file every 5 minutes for new errors and send me an email when they're found.</font></div>
<div align="left" style="text-align:left;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;">But is there something more elegant?</font></div>
<div align="left" style="text-align:left;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;">FWIW, this is currently on a Windows server. If there are some nice additional tools we could use on another OS, I'm open to hearing about them.</font></div>
<br />
<div align="left" style="text-align:left;"><font face="Calibri" size="+1" color="#000000" style="font-family:Calibri;font-size:14pt;color:#000000;">--Clayton</font></div>
</body>
</html>