<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=iso-8859-15">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Hi guys,</p>
<p>I read the new "Metadata Backing File Changes" on <a
href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPReleaseNotes#NativeSPReleaseNotes-MetadataBackingFileChanges">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPReleaseNotes#NativeSPReleaseNotes-MetadataBackingFileChanges</a>,
but I continue to have problems with shibd startup... :(</p>
<p>Could you help me, please?</p>
<p><br>
</p>
<p>This is my configuration:</p>
<p><b>/etc/shibboleth/shibboleth2.xml:</b><br>
</p>
<p> <!-- METADATA EDUGAIN --><br>
<MetadataProvider type="XML"
uri=<a class="moz-txt-link-rfc2396E" href="http://www.garr.it/idem-metadata/edugain2idem-metadata-sha256.xml">"http://www.garr.it/idem-metadata/edugain2idem-metadata-sha256.xml"</a>
backingFilePath="edugain2idem-metadata-sha256.xml"
reloadInterval="7200"><br>
<MetadataFilter type="RequireValidUntil"
maxValidityInterval="604800"/><br>
<MetadataFilter type="Signature"
certificate="/etc/shibboleth/idem_signer_2019.pem" <b>verifyBackup="false"</b>
/><br>
<MetadataFilter type="EntityRoleWhiteList"><br>
<RetainedRole>md:IDPSSODescriptor</RetainedRole><br>
<RetainedRole>md:AttributeAuthorityDescriptor</RetainedRole><br>
</MetadataFilter><br>
<MetadataFilter type="Whitelist"><br>
<Include><a class="moz-txt-link-freetext" href="https://idp.iuav.it/idp/shibboleth">https://idp.iuav.it/idp/shibboleth</a></Include><br>
<Include><a class="moz-txt-link-freetext" href="https://idp.it.su.se/idp/shibboleth">https://idp.it.su.se/idp/shibboleth</a></Include><br>
</MetadataFilter><br>
</MetadataProvider><br>
</p>
<p>(<b>edugain2idem-metadata-sha256.xml</b> is 27.4 MB)<br>
</p>
<p>[root@ftplbtst01 shibboleth]# cat /etc/issue.net<br>
<b>CentOS release 6.8 (Final)</b><br>
</p>
<p>[root@ftplbtst01 shibboleth]# shibd -v<br>
<b>shibboleth 2.6.0</b><br>
<br>
[root@shibboleth]# service shibd restart ; tail -f
/var/log/shibboleth/shibd.log<br>
Stopping shibd: [ OK
]<br>
<b>Starting shibd:
[FAILED]</b><br>
2017-03-16 09:41:52 INFO OpenSAML.Metadata.Chaining : building
MetadataProvider of type XML<br>
2017-03-16 09:41:52 INFO OpenSAML.Metadata : building
MetadataFilter of type RequireValidUntil<br>
2017-03-16 09:41:52 INFO OpenSAML.Metadata : building
MetadataFilter of type Signature<br>
2017-03-16 09:41:52 INFO XMLTooling.SecurityHelper : loading
certificate(s) from file (/etc/shibboleth/idem_signer_2019.pem)<br>
2017-03-16 09:41:52 INFO XMLTooling.CredentialResolver.File : no
private key resolved, usable for verification/trust only<br>
2017-03-16 09:41:52 INFO OpenSAML.Metadata : building
MetadataFilter of type EntityRoleWhiteList<br>
2017-03-16 09:41:52 INFO OpenSAML.Metadata : building
MetadataFilter of type Whitelist<br>
2017-03-16 09:41:57 INFO OpenSAML.MetadataProvider.XML : loaded
XML resource
(<a class="moz-txt-link-freetext" href="http://www.garr.it/idem-metadata/edugain2idem-metadata-sha256.xml">http://www.garr.it/idem-metadata/edugain2idem-metadata-sha256.xml</a>)<br>
2017-03-16 09:41:59 INFO OpenSAML.Metadata : applying metadata
filter (RequireValidUntil)<br>
2017-03-16 <b>09:41:59</b> INFO OpenSAML.Metadata : applying
metadata filter (Signature)<br>
2017-03-16 <b>09:45:27</b> INFO OpenSAML.Metadata : applying
metadata filter (EntityRoleWhiteList)<br>
<br>
</p>
and then the shibd service works again.<br>
<br>
Thank you so much!<br>
<br>
<pre class="moz-signature" cols="72">--
Marco Malavolti
Consortium GARR - Servizio IDEM GARR AAI
Via dei Tizii, 6 - I-00185 (ROMA)
CF: 97284570583 - PI:07577141000
Skype: marco.mala</pre>
</body>
</html>