<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: times new roman,new york,times,serif; font-size: 12pt; color: #000000'>Hi; I'm new to Shib, and I hope this will turn out to be a stupid question. I've done some google searches on the problem, but without success. <br><br>I am running Shibboleth 2.4.0 with tomcat6 on Ubuntu 14.04. Everything starts up fine until I add the information for InCommon to my relying-party.conf (from https://spaces.internet2.edu/display/InCFederation/Shibboleth+Metadata+Config) - once I enter this and start up, I get this error: <br><br>ERROR [edu.internet2.middleware.shibboleth.common.config.BaseService:188] - Configuration was not loaded for shibboleth.RelyingPartyConfigurationManager service, error creating components. The root cause of this error was: java.lang.NullPointerException: null<br><br>If anyone can point me towards what I've done wrong, I'd appreciate it. Here is metadata section of my relying-party.conf:<br><br> <!-- ========================================== --><br> <!-- Metadata Configuration --><br> <!-- ========================================== --><br> <!-- MetadataProvider the combining other MetadataProviders --><br> <metadata:MetadataProvider id="ShibbolethMetadata" xsi:type="metadata:ChainingMetadataProvider"<br> xmlns="urn:mace:shibboleth:2.0:metadata"><br><br> <!-- Load the IdP's own metadata. This is necessary for artifact support. --><br> <metadata:MetadataProvider id="IdPMD" xsi:type="metadata:FilesystemMetadataProvider"<br> metadataFile="/opt/shibboleth-idp/metadata/idp-metadata.xml"<br> maxRefreshDelay="P1D" /><br><br> <!-- Load the metadata from Haverford --><br> <metadata:MetadataProvider id="URLMD" xsi:type="metadata:FileBackedHTTPMetadataProvider"<br> metadataURL="https://saml-ds.haverford.edu/metadata/trico-federation.xml"<br> backingFile="/opt/shibboleth-idp/metadata/haverford.xml" /><br><br> <!-- Refresh the InCommon production metadata aggregate every hour <br> --><br> <MetadataProvider id="ICMD" xsi:type="FileBackedHTTPMetadataProvider"<br> xmlns="urn:mace:shibboleth:2.0:metadata"<br> metadataURL="http://md.incommon.org/InCommon/InCommon-metadata.xml"<br> backingFile="/opt/shibboleth-idp/metadata/InCommon-metadata.xml"<br> maxRefreshDelay="PT1H"><br><br><br> <!-- Use a chaining filter to allow multiple filters to be added<br> --><br> <MetadataFilter xsi:type="ChainingFilter"><br><br><br> <!--<br> Require a validUntil XML attribute on the EntitiesDescriptor element<br> and make sure its value is no more than 14 days into the future<br> --><br> <MetadataFilter xsi:type="RequiredValidUntil" maxValidityInterval="P14D" /><br><br><br> <!--<br> Require the metadata to be signed and use the trust engine<br> labeled id="ICTrust" to determine its trustworthiness<br> --><br> <MetadataFilter xsi:type="SignatureValidation"<br> trustEngineRef="ICTrust" requireSignedMetadata="true" /><br><br><br> <!-- Consume all SP metadata in the aggregate <br> --><br> <MetadataFilter xsi:type="EntityRoleWhiteList"><br> <RetainedRole>samlmd:SPSSODescriptor</RetainedRole><br> </MetadataFilter><br> <br> </MetadataFilter><br> </MetadataProvider><br><br><br> </metadata:MetadataProvider><br><br><div><span name="x"></span><br>I also have the ICTrust security entry later in the file, exactly as in the InCommon documentation linked above. If there is any more information I can provide, let me know. Thanks in advance.<br><br>Andrew J. Chiarello <br>Network & Systems Engineer<br>Bryn Mawr College <br>610-526-7966 <br>achiarello@brynmawr.edu <span name="x"></span><br></div></div></body></html>