<div dir="ltr"><div><div><div><div><div><div><div>Hi,<br><br></div>Bizarre question. It was reported to me that I had a production shibboleth IdP problem. Nothing changed with config on my end but I saw that it failed even against <a href="http://sp.testshib.org">sp.testshib.org</a>. My non-prod Shib IdP was still working fine.<br><br></div>I looked into it and the metadata files that were configured to download via a URL looked "odd". In fact they looked more like my IdP metadata file (e.g. my entityID).<br><br></div>Looking through the logs there were some errors about downloading metadata files -- which actually makes sense as I believe there was a campus network connectivity issue. The log said it would fallback to using the previously downloaded versions, which should have been fine. But somehow it looks to have overwrote the metadata files with the IdP metadata.<br><br></div>We run Shib IdP 2.4.1 within Tomcat. Restarting Tomcat refreshed the metadata files and everything is working again.<br><br></div>Any suggestions/insight?<br><br></div>Thanks,<br></div>Ian<br><div><div><div><br><div><br><div><div><div><div><div>-- <br><div class="gmail_signature">Ian Rifkin '04, MS '09<br>Software Systems Manager<br>Library and Technology Services (LTS)<br>Brandeis University<br><br><a href="http://go.brandeis.edu/u:irifkin" target="_blank">http://go.brandeis.edu/u:irifkin</a></div>
</div></div></div></div></div></div></div></div></div></div>