<div dir="auto">Sure your config doesn't have strange character in it , eg from a cut and paste operation... Safari, for example, can do horrible things like that when cutting and pasting from web pages. We ran a moonshot course in the surfnet offices a couple of years back and browser cut and paste caused a couple of issues<div dir="auto"><br></div><div dir="auto">alan</div></div><div class="gmail_extra"><br><div class="gmail_quote">On 16 Aug 2017 5:42 pm, <<a href="mailto:shibboleth655@lewenberg.com">shibboleth655@lewenberg.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
<br>
On 8/11/2017 10:58 AM, Brian Moon wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Not sure why it never tries again, but the URL for that metadata should be <a href="https://idp.stanford.edu/Stanford-idps.xml" rel="noreferrer" target="_blank">https://idp.stanford.edu/Stanf<wbr>ord-idps.xml</a> (unless you had intentionally appended characters to it to force it to fail to prove that the refresh was not working).<br>
</blockquote>
<br>
Those extra characters were from the log message whose complete text is<br>
<br>
[<a href="http://org.opensaml.saml.metadata.re">org.opensaml.saml.metadata.re</a><wbr>solver.impl.AbstractReloadingM<wbr>etadataResolver:294] - Metadata Resolver FileBackedHTTPMetadataResolver spdb-metadata-legacy: Error occurred while attempting to refresh metadata from '<a href="https://spdb.stanford.edu/spmetadata/metadata-legacy.xml'" rel="noreferrer" target="_blank">https://spdb.stanford.edu/spm<wbr>etadata/metadata-legacy.xml&#<wbr>39</a>;<br>
<br>
<br>
I guess the logger converted the single quote to as entity name.<br>
<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
<br>
Brian Moon<br>
Senior System Administrator, Enterprise Systems<br>
Elections & Bylaws Committee Co-Chair, Staff Senate 2017-2018<br>
Santa Clara University<br>
<a href="mailto:bmoon@scu.edu" target="_blank">bmoon@scu.edu</a> <mailto:<a href="mailto:bmoon@scu.edu" target="_blank">bmoon@scu.edu</a>> | <a href="tel:%28408%29%20554-4830" value="+14085544830" target="_blank">(408) 554-4830</a> <tel:<a href="tel:4085544830" value="+14085544830" target="_blank">4085544830</a>><br>
<br>
On Fri, Aug 11, 2017 at 10:46 AM, <<a href="mailto:shibboleth655@lewenberg.com" target="_blank">shibboleth655@lewenberg.com</a> <mailto:<a href="mailto:shibboleth655@lewenberg.com" target="_blank">shibboleth655@lewenber<wbr>g.com</a>>> wrote:<br>
<br>
We are seeing an odd problem with downloading metadata.<br>
<br>
Here is the sequence of events.<br>
<br>
1. The Shibboleth IdP service has trouble downloading the metadata<br>
at the URL "<a href="https://idp.stanford.edu/Stanford-idps.xml'" rel="noreferrer" target="_blank">https://idp.stanford.edu/Stan<wbr>ford-idps.xml'</a><br>
<<a href="https://idp.stanford.edu/Stanford-idps.xml'" rel="noreferrer" target="_blank">https://idp.stanford.edu/Stan<wbr>ford-idps.xml'</a>>;".<br>
<br>
2. It then promises to try again in about 22 minutes.<br>
<br>
3. However, there is *never* again a log entry indicating that<br>
Shibboleth IdP attempted to download the metadata at that URL. It is<br>
as if the IdP service stops trying.<br>
<br>
4. This is a big problem as now our metadata is getting more and<br>
more stale.<br>
<br>
<br>
Here are the relevant logs below:<br>
<br>
2017-07-27 11:50:00,314 - INFO [<a href="http://org.opensaml.saml.metadata.re" rel="noreferrer" target="_blank">org.opensaml.saml.metadata.re</a><br>
<<a href="http://org.opensaml.saml.metadata.re" rel="noreferrer" target="_blank">http://org.opensaml.saml.meta<wbr>data.re</a>>solver.impl.AbstractRe<wbr>loadingMetadataResolver:465]<br>
- Metadata Resolver FileBackedHTTPMetadataResolver stanford-idps:<br>
New metadata successfully loaded for<br>
'<a href="https://idp.stanford.edu/Stanford-idps.xml'" rel="noreferrer" target="_blank">https://idp.stanford.edu/Stan<wbr>ford-idps.xml'</a><br>
<<a href="https://idp.stanford.edu/Stanford-idps.xml'" rel="noreferrer" target="_blank">https://idp.stanford.edu/Stan<wbr>ford-idps.xml'</a>>;<br>
2017-07-27 11:50:00,314 - INFO [<a href="http://org.opensaml.saml.metadata.re" rel="noreferrer" target="_blank">org.opensaml.saml.metadata.re</a><br>
<<a href="http://org.opensaml.saml.metadata.re" rel="noreferrer" target="_blank">http://org.opensaml.saml.meta<wbr>data.re</a>>solver.impl.AbstractRe<wbr>loadingMetadataResolver:306]<br>
- Metadata Resolver FileBackedHTTPMetadataResolver stanford-idps:<br>
Next refresh cycle for metadata provider<br>
'<a href="https://idp.stanford.edu/Stanford-idps.xml'" rel="noreferrer" target="_blank">https://idp.stanford.edu/Stan<wbr>ford-idps.xml'</a><br>
<<a href="https://idp.stanford.edu/Stanford-idps.xml'" rel="noreferrer" target="_blank">https://idp.stanford.edu/Stan<wbr>ford-idps.xml'</a>>; will occur on<br>
'2017-07-27T19:12:30.272Z' ('2017-07-27T12:12:30.272-07:0<wbr>0' local time)<br>
2017-07-27 12:21:35,186 - ERROR [<a href="http://org.opensaml.saml.metadata.re" rel="noreferrer" target="_blank">org.opensaml.saml.metadata.re</a><br>
<<a href="http://org.opensaml.saml.metadata.re" rel="noreferrer" target="_blank">http://org.opensaml.saml.meta<wbr>data.re</a>>solver.impl.HTTPMetada<wbr>taResolver:313]<br>
- Metadata Resolver FileBackedHTTPMetadataResolver stanford-idps:<br>
Error retrieving metadata from<br>
<a href="https://idp.stanford.edu/Stanford-idps.xml" rel="noreferrer" target="_blank">https://idp.stanford.edu/Stanf<wbr>ord-idps.xml</a><br>
<<a href="https://idp.stanford.edu/Stanford-idps.xml" rel="noreferrer" target="_blank">https://idp.stanford.edu/Stan<wbr>ford-idps.xml</a>><br>
2017-07-27 12:21:35,194 - INFO [<a href="http://org.opensaml.saml.metadata.re" rel="noreferrer" target="_blank">org.opensaml.saml.metadata.re</a><br>
<<a href="http://org.opensaml.saml.metadata.re" rel="noreferrer" target="_blank">http://org.opensaml.saml.meta<wbr>data.re</a>>solver.impl.AbstractRe<wbr>loadingMetadataResolver:306]<br>
- Metadata Resolver FileBackedHTTPMetadataResolver stanford-idps:<br>
Next refresh cycle for metadata provider<br>
'<a href="https://idp.stanford.edu/Stanford-idps.xml'" rel="noreferrer" target="_blank">https://idp.stanford.edu/Stan<wbr>ford-idps.xml'</a><br>
<<a href="https://idp.stanford.edu/Stanford-idps.xml'" rel="noreferrer" target="_blank">https://idp.stanford.edu/Stan<wbr>ford-idps.xml'</a>>; will occur on<br>
'2017-07-27T19:37:24.448Z' ('2017-07-27T12:37:24.448-07:0<wbr>0' local time)<br>
<br>
(After this point, there is NEVER again a mention of<br>
<a href="https://idp.stanford.edu/Stanford-idps.xml'" rel="noreferrer" target="_blank">https://idp.stanford.edu/Stanf<wbr>ord-idps.xml'</a><br>
<<a href="https://idp.stanford.edu/Stanford-idps.xml'" rel="noreferrer" target="_blank">https://idp.stanford.edu/Stan<wbr>ford-idps.xml'</a>> in any of the logs.)<br>
<br>
<br>
We are running Shibboleth IdP version 3.3.1 with tomcat8 on a Debian<br>
server.<br>
<br>
<br>
-- To unsubscribe from this list send an email to<br>
<a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.n<wbr>et</a><br>
<mailto:<a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shib<wbr>boleth.net</a>><br>
<br>
<br>
<br>
<br>
</blockquote>
<br>
-- <br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.n<wbr>et</a><br>
</blockquote></div></div>