<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
Starting Saturday, some scripts we’re working with to do some SAML validation working with <a href="http://sp.testshib.org" class="">sp.testshib.org</a> started to fail. They were definitely working on Friday.
<div class=""><br class="">
</div>
<div class="">The reported error is </div>
<div class=""><br class="">
</div>
<div class=""></div>
<blockquote type="cite" class="">
<div class="">Unable to locate metadata for identity provider (<a href="https://devidp.ornl.gov/idp" class="">https://devidp.ornl.gov/idp</a>)</div>
</blockquote>
<div class=""><br class="">
</div>
<div class="">And the lines out of the <a href="http://testshib.org" class="">testshib.org</a> logs are consistent with that:</div>
<div class=""><br class="">
</div>
<div class="">
<div class=""></div>
<blockquote type="cite" class="">
<div class="">2016-09-19 08:37:51 INFO Shibboleth.Listener : registered remoted message endpoint (testshib-reg/SAML/Artifact)</div>
<div class="">2016-09-19 08:37:51 INFO Shibboleth.Listener : registered remoted message endpoint (testshib-reg::getHeaders::Application)</div>
<div class="">2016-09-19 08:37:51 INFO Shibboleth.AttributeFilter : reload thread finished</div>
<div class="">2016-09-19 08:37:51 INFO Shibboleth.AttributeExtractor.XML : reload thread finished</div>
<div class="">2016-09-19 08:37:51 INFO OpenSAML.MetadataProvider.XML : reload thread finished</div>
<div class="">2016-09-19 08:37:51 INFO Shibboleth.SecurityPolicyProvider.XML : reload thread finished</div>
<div class="">2016-09-19 08:38:05 DEBUG Shibboleth.Listener [4830]: dispatching message (default/TestShib::run::SAML2SI)</div>
<div class="">2016-09-19 08:38:05 WARN Shibboleth.SessionInitiator.SAML2 [4830]: unable to locate metadata for provider (<a href="https://devidp.ornl.gov/idp" class="">https://devidp.ornl.gov/idp</a>)</div>
<div class="">2016-09-19 08:38:18 INFO Shibboleth.Listener [4828]: detected socket closure, shutting down worker thread</div>
<div class="">2016-09-19 08:38:31 DEBUG Shibboleth.Listener [4830]: dispatching message (default/TestShib::run::SAML2SI)</div>
<div class="">2016-09-19 08:38:31 WARN Shibboleth.SessionInitiator.SAML2 [4830]: unable to locate metadata for provider (<a href="https://devidp.ornl.gov/idp" class="">https://devidp.ornl.gov/idp</a>)</div>
<div class=""><br class="">
</div>
</blockquote>
<div class=""><br class="">
</div>
<div class="">However, I’ve uploaded metadata twice this morning and I get successful loads:</div>
<div class=""><br class="">
</div>
<div class=""></div>
<blockquote type="cite" class="">
<div class="">REGISTER<br class="">
Your metadata was uploaded successfully. Please proceed to configuration and testing.<br class="">
<br class="">
Your metadata filename is ornl-devextidp-testshib.xml. Please keep this filename so you can overwrite your metadata file in the event you need to update your entry.<br class="">
<br class="">
Your complete metadata is below. You don't need to understand the entire file, but it's helpful to recognize your entityID in the first element below, as well as your provider's certificate. The Shibboleth wiki can help you learn about metadata.<br class="">
<br class="">
<br class="">
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" ID="akHskGZ4k2AuTz3dfWtTkU2q4jf" cacheDuration="PT1440M" entityID="<a href="https://devidp.ornl.gov/idp" class="">https://devidp.ornl.gov/idp</a>"><br class="">
<ds:Signature xmlns:ds="<a href="http://www.w3.org/2000/09/xmldsig#" class="">http://www.w3.org/2000/09/xmldsig#</a>"><br class="">
<ds:SignedInfo><br class="">
</div>
</blockquote>
<div class=""><br class="">
</div>
<div class="">I copied and pasted the IdP entity ID from the registration success page into <a href="http://sp.testshib.org" class="">sp.testshib.org</a> and I’m still getting this error. I actually have four different IdP’s, and they’re all giving me this
same problem, despite having uploaded new metadata. </div>
<div class=""><br class="">
</div>
<div class="">Is there a problem on <a href="http://sp.testshib.org" class="">sp.testshib.org</a> or am I doing something stupid. FWIW, I’m not running Shib as the IdP — I’m running Ping Federate (8.1). But we’ve been running that for years and have not made
any changes on our end in the past few days, so I’m at a loss for why stuff is now breaking. We do use testshib pretty regularly as part of some routine monitoring and validation. Hopefully that’s not causing any problems.</div>
<div class=""><br class="">
</div>
<div class="">Thanks. </div>
<div class="">
<div class="" style="font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; widows: 2; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div class="" style="font-variant-ligatures: normal; font-variant-position: normal; font-variant-numeric: normal; font-variant-alternates: normal; font-variant-east-asian: normal; line-height: normal; text-align: -webkit-auto; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
</div>
</div>
</div>
</div>
<div class="">
<div style="color: rgb(0, 0, 0); font-variant: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-variant: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class=""><br class="">
================================================<br class="">
Bruce E. Wilson (<a href="mailto:wilsonbe@ornl.gov" class="">wilsonbe@ornl.gov</a>)<br class="">
Information Technology Services Division<br class="">
Oak Ridge National Laboratory<br class="">
<br class="">
</div>
</div>
</div>
</div>
<br class="">
</body>
</html>