<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
line-height:12.0pt;
mso-line-height-rule:exactly;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma",sans-serif;
color:black;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
line-height:12.0pt;
mso-line-height-rule:exactly;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
line-height:12.0pt;
mso-line-height-rule:exactly;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
line-height:12.0pt;
mso-line-height-rule:exactly;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast
{mso-style-priority:34;
mso-style-type:export-only;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
mso-add-space:auto;
line-height:12.0pt;
mso-line-height-rule:exactly;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
color:black;}
span.EmailStyle151
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle161
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle171
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle181
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle191
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:#1F497D;}
span.EmailStyle20
{mso-style-type:personal-compose;
font-family:"Times New Roman",serif;
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma",sans-serif;
color:black;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
.MsoPapDefault
{mso-style-type:export-only;
line-height:12.0pt;
mso-line-height-rule:exactly;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif;color:windowtext">Please bear with me since I usually only work on SPs, and not IdPs.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif;color:windowtext">So, I’ve installed and begun configuring Shibboleth IDP3 on a CentOS 7 box in our local datacenter. I’m pretty much following the training material (which was still v2
when I went a couple of years ago) @ <a href="https://spaces.internet2.edu/pages/viewpage.action?pageId=49841792">
https://spaces.internet2.edu/pages/viewpage.action?pageId=49841792</a> to get ‘started’ and then tweak the config for prod use afterwards (SSL, resolvers, etc.). I’m stuck on trying to load the metadata from InCommon. I’ve placed in my metadata-providers.xml
file the exact config found at <a href="https://spaces.internet2.edu/display/InCFederation/Shibboleth+Metadata+Config">
https://spaces.internet2.edu/display/InCFederation/Shibboleth+Metadata+Config</a> related to Shibboleth 3.2.0 (and later). It’s not pulling the metadata and I’m seeing this in the idp-process.log:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif;color:windowtext"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:windowtext">2016-06-28 10:12:46,573 - ERROR [net.shibboleth.utilities.java.support.service.AbstractReloadableService:181] - Service 'shibboleth.MetadataResolverService': Initial load failed<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:windowtext">net.shibboleth.utilities.java.support.service.ServiceException: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 5 in XML document from file [/opt/shibboleth-idp/conf/metadata-providers.xml]
is invalid; nested exception is org.xml.sax.SAXParseException; lineNumber: 5; columnNumber: 120; The prefix "xsi" for attribute "xsi:type" associated with an element type "MetadataProvider" is not bound.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:windowtext"> at net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:334)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:windowtext">Caused by: org.springframework.beans.factory.xml.XmlBeanDefinitionStoreException: Line 5 in XML document from file [/opt/shibboleth-idp/conf/metadata-providers.xml] is invalid; nested exception
is org.xml.sax.SAXParseException; lineNumber: 5; columnNumber: 120; The prefix "xsi" for attribute "xsi:type" associated with an element type "MetadataProvider" is not bound.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:windowtext"> at org.springframework.beans.factory.xml.XmlBeanDefinitionReader.doLoadBeanDefinitions(XmlBeanDefinitionReader.java:399)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:windowtext">Caused by: org.xml.sax.SAXParseException: The prefix "xsi" for attribute "xsi:type" associated with an element type "MetadataProvider" is not bound.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:windowtext"> at com.sun.org.apache.xerces.internal.util.ErrorHandlerWrapper.createSAXParseException(ErrorHandlerWrapper.java:203)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;color:windowtext">2016-06-28 10:12:46,574 - ERROR [net.shibboleth.utilities.java.support.service.AbstractReloadableService:185] - Service 'shibboleth.MetadataResolverService': No further attempts will be made
to reload<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif;color:windowtext"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif;color:windowtext">I appreciate any insight on this issue. I’m using java 1.8 (albeit openjdk rather than Oracle), and have increased the heap size for JVM. That doesn’t seem to matter here
since it is complaining about xsi:type inside of the MetadataProvider elements.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif;color:windowtext"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif;color:windowtext">Thanks in advance.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif;color:windowtext"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif;color:windowtext">Cheers!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif;color:windowtext">-Izz<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Times New Roman",serif;color:windowtext"><o:p> </o:p></span></p>
<p class="MsoNormal" style="line-height:normal"><b><span style="font-size:14.0pt;font-family:"Verdana",sans-serif;color:#0090CA">Izz Noland<o:p></o:p></span></b></p>
<p class="MsoNormal" style="line-height:normal"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#6D6E70">Sr. Systems Engineer<o:p></o:p></span></b></p>
<p class="MsoNormal" style="line-height:normal"><a href="https://www.wepanow.com/"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#6D6E70;text-decoration:none"><img border="0" width="141" height="47" id="Picture_x0020_1" src="cid:image001.png@01D1D126.9C8F8970" alt="wepa_logo-solid"></span></b></a><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#6D6E70"><o:p></o:p></span></b></p>
<p class="MsoNormal" style="line-height:normal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:windowtext"><img border="0" width="17" height="14" id="Picture_x0020_2" src="cid:image002.gif@01D1D126.9C8F8970" alt="email-icons_03"><a href="mailto:izz.noland@wepanow.com"><span style="color:#0563C1">izz.noland@wepanow.com</span></a><o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:normal"><b><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#0090CA"><img border="0" width="17" height="14" id="Picture_x0020_4" src="cid:image003.gif@01D1D126.9C8F8970" alt="email-icons_06"></span></b><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#6D6E70">Toll
Free 800.675.7639<o:p></o:p></span></p>
<p class="MsoNormal" style="line-height:normal"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#6D6E70"><img border="0" width="17" height="14" id="Picture_x0020_5" src="cid:image004.gif@01D1D126.9C8F8970" alt="email-icons_05">100 Gilbert
Drive </span><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#6E6F61">|
</span><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:#6D6E70">Alabaster, Alabama 35007<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>