<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
code
{mso-style-priority:99;
font-family:"Courier New";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">I’m trying to setup a shared session db on my redhat linux shib 2.5.4 SP and am running into some issues. I’m using these config additions to the shibboleth2.xml file and wasn’t sure of the placement so I put them after the <sessions lifetime>
section.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"><!-- The OutOfProcess section contains properties affecting the shibd daemon. --></span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"><OutOfProcess logger="shibd.logger"></span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"> <Extensions></span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"> <Library path="odbc-store.so"</span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333">
</span><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">fatal="true"/></span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"> </Extensions></span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"></OutOfProcess></span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"><!-- This set of components stores sessions and other persistent data in an ODBC database. --></span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"><StorageService type="ODBC"</span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333">
</span><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">id="db"</span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333">
</span><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">cleanupInterval="900"</span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333">
</span><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">isolationLevel="REPEATABLE_READ"></span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"> <ConnectionString></span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"> DRIVER=MySQL64;SERVER=myapp-db.ucsf.edu;USER=dbuser;PASSWORD=password;DATABASE=shibboleth</span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"> </ConnectionString></span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"></StorageService></span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"><SessionCache type="StorageService"</span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333">
</span><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">StorageService="db"</span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333">
</span><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">cacheAssertions="false"</span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"> cacheTimeout="3600"</span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333">
</span><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">inprocTimeout="900"</span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333">
</span><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">cleanupInterval="900"/></span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"><ReplayCache StorageService="db"/></span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"><ArtifactMap StorageService="db"</span><span style="font-size:10.5pt;font-family:"Arial",sans-serif;color:#333333">
</span><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">artifactTTL="180"/><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">The result is when running shibd check I get the following errors and am wondering what I may be missing or if changes need to be made for the version im running as
this example was a few years old from https://wiki.library.ucsf.edu/display/IAM/Configure+Shib+SP+on+a+Load+Balancing+Cluster .<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">Shibd check error below.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">[root@zapidpaw1 shibboleth]# /usr/sbin/shibd -t<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 39, column 37, message: no declaration found for element 'OutOfProcess'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 39, column 37, message: attribute 'logger' is not declared for element 'OutOfProcess'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 47, column 95, message: no declaration found for element 'StorageService'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 47, column 95, message: attribute 'type' is not declared for element 'StorageService'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 47, column 95, message: attribute 'id' is not declared for element 'StorageService'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 47, column 95, message: attribute 'cleanupInterval' is not declared for element 'StorageService'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 47, column 95, message: attribute 'isolationLevel' is not declared for element 'StorageService'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 53, column 78, message: no declaration found for element 'SessionCache'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 53, column 78, message: attribute 'type' is not declared for element 'SessionCache'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 53, column 78, message: attribute 'StorageService' is not declared for element 'SessionCache'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 53, column 78, message: attribute 'cacheAssertions' is not declared for element 'SessionCache'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 53, column 78, message: attribute 'cacheTimeout' is not declared for element 'SessionCache'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 53, column 78, message: attribute 'inprocTimeout' is not declared for element 'SessionCache'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 53, column 78, message: attribute 'cleanupInterval' is not declared for element 'SessionCache'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 54, column 35, message: no declaration found for element 'ReplayCache'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 54, column 35, message: attribute 'StorageService' is not declared for element 'ReplayCache'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 55, column 53, message: no declaration found for element 'ArtifactMap'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 55, column 53, message: attribute 'StorageService' is not declared for element 'ArtifactMap'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 55, column 53, message: attribute 'artifactTTL' is not declared for element 'ArtifactMap'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR XMLTooling.ParserPool : error on line 82, column 20, message: element 'OutOfProcess' is not allowed for content model '(SSO?,Logout?,NameIDMgmt?,(SessionInitiator|LogoutInitiator|AssertionConsumerService|ArtifactResolutionService|SingleLogoutService|ManageNameIDService|Handler))'<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 ERROR Shibboleth.Config : error while loading resource (/etc/shibboleth/shibboleth2.xml): XML error(s) during parsing, check log for specifics<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">2015-08-25 16:23:08 FATAL Shibboleth.Config : caught exception while loading configuration: XML error(s) during parsing, check log for specifics<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">configuration is invalid, check console for specific problems<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">[root@zapidpaw1 shibboleth]#<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">Thanks for your assistance,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333">Bill<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#333333"><o:p> </o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">William Ewing, Senior Information Security Analyst<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">CISSP, MCSE, MCITP-EA, CCNA/CCDA<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">UT System – Office of Information Security & Compliance<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">210 West 6th Street<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New"">Austin, Texas 78701-3035
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">Phone: (512)499-4575<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">email:
<a href="mailto:bewing@utsystem.edu"><span style="color:blue">bewing@utsystem.edu</span></a></span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>