<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p style="margin-top:0;margin-bottom:0">Goodness if I know at this point. If 8:00 PDT isn't too late for you, let's do it.</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">I rule out no possibility here other than a fix being released for 2. ;D</p>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Bobby Lawrence <robertl@jlab.org><br>
<b>Sent:</b> Thursday, April 26, 2018 11:33:32 AM<br>
<b>To:</b> Klingenstein, Nate<br>
<b>Cc:</b> users@shibboleth.net<br>
<b>Subject:</b> Re: TestShib metadata issues?</font>
<div> </div>
</div>
<div style="background-color:#FFFFFF">
<p>Thats fine...I can wait until after hours. When would that be for you?</p>
<p>I think it would be helpful as I've decompiled much of IdP v2.3/4 Java classes and there are tons of debug statements in the opensaml library that would help to diagnose many of these types of issues.
<br>
</p>
<p>Again - my SP works with other Shib IdPs at my site so there is either something amiss w/ the TestShib IdP or a difference between its config and what local ones (although most of that are the defaults).<br>
</p>
<p><br>
</p>
<br>
<div class="x_moz-cite-prefix">On 4/26/2018 2:29 PM, Klingenstein, Nate wrote:<br>
</div>
<blockquote type="cite"><style type="text/css" style="display:none">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div id="x_divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<p style="margin-top:0; margin-bottom:0">I'm not sure. It's under pretty extraordinary load. I can obviously do it, but I'm not sure what the ramiifcations will be, nor am I sure that what you discover will be what you want to know, since most of the providers
out there don't run this decrepit 2.x install.</p>
<p style="margin-top:0; margin-bottom:0"><br>
</p>
<p style="margin-top:0; margin-bottom:0">But if it'd really help you out, we can definitely find a way. Just something a little off-hours in case I do something hideously dumb.</p>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Bobby Lawrence
<a class="x_moz-txt-link-rfc2396E" href="mailto:robertl@jlab.org"><robertl@jlab.org></a><br>
<b>Sent:</b> Thursday, April 26, 2018 11:16:28 AM<br>
<b>To:</b> Klingenstein, Nate<br>
<b>Cc:</b> <a class="x_moz-txt-link-abbreviated" href="mailto:users@shibboleth.net">
users@shibboleth.net</a><br>
<b>Subject:</b> Re: TestShib metadata issues?</font>
<div> </div>
</div>
<div style="background-color:#FFFFFF">
<p>Nate - is it possible to set the "org.opensaml" logger to DEBUG on the TestShib IdP? At least temporarily while I debug my issue?<br>
</p>
<br>
<div class="x_x_moz-cite-prefix">On 4/26/2018 12:56 PM, Klingenstein, Nate wrote:<br>
</div>
<blockquote type="cite"><style type="text/css" style="display:none">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div id="x_x_divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<p style="margin-top:0; margin-bottom:0">The upgrade to 3 is stalled because Kevin is a vastly more competent sysadmin than I am and he hasn't had time to do his thing.</p>
<p style="margin-top:0; margin-bottom:0"><br>
</p>
<p style="margin-top:0; margin-bottom:0">I would've been slapping up versions just like I always did. We're in a better place.</p>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> users
<a class="x_x_moz-txt-link-rfc2396E" href="mailto:users-bounces@shibboleth.net"><users-bounces@shibboleth.net></a> on behalf of Bobby Lawrence
<a class="x_x_moz-txt-link-rfc2396E" href="mailto:robertl@jlab.org"><robertl@jlab.org></a><br>
<b>Sent:</b> Thursday, April 26, 2018 7:22:30 AM<br>
<b>To:</b> <a class="x_x_moz-txt-link-abbreviated" href="mailto:users@shibboleth.net">
users@shibboleth.net</a><br>
<b>Subject:</b> Re: TestShib metadata issues?</font>
<div> </div>
</div>
<div style="background-color:#FFFFFF">
<p>So it seems that the SP side of this is good to go now, but I'm still having an issue on the IdP side. I'm not sure what it is yet but my SP works with the exact same config with other IdPs at my site. One of them is shibboleth idp 3.3 and one is 2.3.8
(which I'm in the process of retiring). I do see that TestShib is running 2.4. Seems odd to me that this test environment is almost a full version behind, but oh well..maybe a TestShib 3 will pop up sometime lol.
<br>
</p>
<p>Anyway - is it at all possible to change the TestShib IdP process log config and set the "org.opensaml" logger to DEBUG?
<br>
</p>
<br>
<div class="x_x_x_moz-cite-prefix">On 4/25/2018 7:22 PM, Nate Klingenstein wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div class="x_x_x_gmail_extra">I cleared out two uploads that were bad, but they had been there for some time, and it looked like the aggregator was skipping them. The SP logs appear like it was loading metadata happily without incident except for a one-minute
hiccup at 9:20 EDT with no obvious cause.</div>
<div class="x_x_x_gmail_extra"><br>
</div>
<div class="x_x_x_gmail_extra">I'm able to look up your IdP now and the metadata file is loading without incident. I was talking with Kevin, but he stepped away right before it worked, so I don't think he did anything. I don't know an invocation URL for the
SP, but I suspect it'll work.</div>
<div class="x_x_x_gmail_extra"><br>
</div>
<div class="x_x_x_gmail_extra">Thanks for letting us know promptly, please let me know if it doesn't work for you, and I blame tommyknockers.</div>
</div>
<br>
<fieldset class="x_x_x_mimeAttachmentHeader"></fieldset> <br>
</blockquote>
<br>
<pre class="x_x_x_moz-signature" cols="72">--
Bobby Lawrence (<a class="x_x_x_moz-txt-link-abbreviated" href="mailto:robertl@jlab.org">robertl@jlab.org</a>)
Jefferson Lab MIS
757-269-5818</pre>
</div>
<br>
<fieldset class="x_x_mimeAttachmentHeader"></fieldset> <br>
</blockquote>
<br>
<pre class="x_x_moz-signature" cols="72">--
Bobby Lawrence (<a class="x_x_moz-txt-link-abbreviated" href="mailto:robertl@jlab.org">robertl@jlab.org</a>)
Jefferson Lab MIS
757-269-5818</pre>
</div>
</blockquote>
<br>
<pre class="x_moz-signature" cols="72">--
Bobby Lawrence (<a class="x_moz-txt-link-abbreviated" href="mailto:robertl@jlab.org">robertl@jlab.org</a>)
Jefferson Lab MIS
757-269-5818</pre>
</div>
</body>
</html>