<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html;
      charset=windows-1252">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <p>Thats midnight eastern right?  I suppose thats OK..the test
      should only take a few minutes.<br>
    </p>
    <br>
    <div class="moz-cite-prefix">On 4/26/2018 2:35 PM, Klingenstein,
      Nate wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:CY4PR01MB328586766F1B7EFED94EAB5CDE8E0@CY4PR01MB3285.prod.exchangelabs.com">
      <meta http-equiv="Content-Type" content="text/html;
        charset=windows-1252">
      <style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
      <div id="divtagdefaultwrapper"
style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;"
        dir="ltr">
        <p style="margin-top:0;margin-bottom:0">Goodness if I know at
          this point.  If 8:00 PDT isn't too late for you, let's do it.</p>
        <p style="margin-top:0;margin-bottom:0"><br>
        </p>
        <p style="margin-top:0;margin-bottom:0">I rule out no
          possibility here other than a fix being released for 2. ;D</p>
      </div>
      <hr style="display:inline-block;width:98%" tabindex="-1">
      <div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt"
          face="Calibri, sans-serif" color="#000000"><b>From:</b> Bobby
          Lawrence <a class="moz-txt-link-rfc2396E" href="mailto:robertl@jlab.org"><robertl@jlab.org></a><br>
          <b>Sent:</b> Thursday, April 26, 2018 11:33:32 AM<br>
          <b>To:</b> Klingenstein, Nate<br>
          <b>Cc:</b> <a class="moz-txt-link-abbreviated" href="mailto:users@shibboleth.net">users@shibboleth.net</a><br>
          <b>Subject:</b> Re: TestShib metadata issues?</font>
        <div> </div>
      </div>
      <div style="background-color:#FFFFFF">
        <p>Thats fine...I can wait until after hours.  When would that
          be for you?</p>
        <p>I think it would be helpful as I've decompiled much of IdP
          v2.3/4 Java classes and there are tons of debug statements in
          the opensaml library that would help to diagnose many of these
          types of issues. 
          <br>
        </p>
        <p>Again - my SP works with other Shib IdPs at my site so there
          is either something amiss w/ the TestShib IdP or a difference
          between its config and what local ones (although most of that
          are the defaults).<br>
        </p>
        <p><br>
        </p>
        <br>
        <div class="x_moz-cite-prefix">On 4/26/2018 2:29 PM,
          Klingenstein, Nate wrote:<br>
        </div>
        <blockquote type="cite">
          <style type="text/css" style="display:none">
<!--
p
        {margin-top:0;
        margin-bottom:0}
-->
</style>
          <div id="x_divtagdefaultwrapper" dir="ltr"
            style="font-size:12pt; color:#000000;
            font-family:Calibri,Helvetica,sans-serif">
            <p style="margin-top:0; margin-bottom:0">I'm not sure.  It's
              under pretty extraordinary load.  I can obviously do it,
              but I'm not sure what the ramiifcations will be, nor am I
              sure that what you discover will be what you want to know,
              since most of the providers out there don't run this
              decrepit 2.x install.</p>
            <p style="margin-top:0; margin-bottom:0"><br>
            </p>
            <p style="margin-top:0; margin-bottom:0">But if it'd really
              help you out, we can definitely find a way.  Just
              something a little off-hours in case I do something
              hideously dumb.</p>
          </div>
          <hr tabindex="-1" style="display:inline-block; width:98%">
          <div id="x_divRplyFwdMsg" dir="ltr"><font
              style="font-size:11pt" face="Calibri, sans-serif"
              color="#000000"><b>From:</b> Bobby Lawrence
              <a class="x_moz-txt-link-rfc2396E"
                href="mailto:robertl@jlab.org" moz-do-not-send="true"><robertl@jlab.org></a><br>
              <b>Sent:</b> Thursday, April 26, 2018 11:16:28 AM<br>
              <b>To:</b> Klingenstein, Nate<br>
              <b>Cc:</b> <a class="x_moz-txt-link-abbreviated"
                href="mailto:users@shibboleth.net"
                moz-do-not-send="true">
                users@shibboleth.net</a><br>
              <b>Subject:</b> Re: TestShib metadata issues?</font>
            <div> </div>
          </div>
          <div style="background-color:#FFFFFF">
            <p>Nate - is it possible to set the "org.opensaml" logger to
              DEBUG on the TestShib IdP?  At least temporarily while I
              debug my issue?<br>
            </p>
            <br>
            <div class="x_x_moz-cite-prefix">On 4/26/2018 12:56 PM,
              Klingenstein, Nate wrote:<br>
            </div>
            <blockquote type="cite">
              <style type="text/css" style="display:none">
<!--
p
        {margin-top:0;
        margin-bottom:0}
-->
</style>
              <div id="x_x_divtagdefaultwrapper" dir="ltr"
                style="font-size:12pt; color:#000000;
                font-family:Calibri,Helvetica,sans-serif">
                <p style="margin-top:0; margin-bottom:0">The upgrade to
                  3 is stalled because Kevin is a vastly more competent
                  sysadmin than I am and he hasn't had time to do his
                  thing.</p>
                <p style="margin-top:0; margin-bottom:0"><br>
                </p>
                <p style="margin-top:0; margin-bottom:0">I would've been
                  slapping up versions just like I always did.  We're in
                  a better place.</p>
              </div>
              <hr tabindex="-1" style="display:inline-block; width:98%">
              <div id="x_x_divRplyFwdMsg" dir="ltr"><font
                  style="font-size:11pt" face="Calibri, sans-serif"
                  color="#000000"><b>From:</b> users
                  <a class="x_x_moz-txt-link-rfc2396E"
                    href="mailto:users-bounces@shibboleth.net"
                    moz-do-not-send="true"><users-bounces@shibboleth.net></a>
                  on behalf of Bobby Lawrence
                  <a class="x_x_moz-txt-link-rfc2396E"
                    href="mailto:robertl@jlab.org"
                    moz-do-not-send="true"><robertl@jlab.org></a><br>
                  <b>Sent:</b> Thursday, April 26, 2018 7:22:30 AM<br>
                  <b>To:</b> <a class="x_x_moz-txt-link-abbreviated"
                    href="mailto:users@shibboleth.net"
                    moz-do-not-send="true">
                    users@shibboleth.net</a><br>
                  <b>Subject:</b> Re: TestShib metadata issues?</font>
                <div> </div>
              </div>
              <div style="background-color:#FFFFFF">
                <p>So it seems that the SP side of this is good to go
                  now, but I'm still having an issue on the IdP side. 
                  I'm not sure what it is yet but my SP works with the
                  exact same config with other IdPs at my site.  One of
                  them is shibboleth idp 3.3 and one is 2.3.8 (which I'm
                  in the process of retiring).  I do see that TestShib
                  is running 2.4.  Seems odd to me that this test
                  environment is almost a full version behind, but oh
                  well..maybe a TestShib 3 will pop up sometime lol. 
                  <br>
                </p>
                <p>Anyway - is it at all possible to change the TestShib
                  IdP process log config and set the "org.opensaml"
                  logger to DEBUG?
                  <br>
                </p>
                <br>
                <div class="x_x_x_moz-cite-prefix">On 4/25/2018 7:22 PM,
                  Nate Klingenstein wrote:<br>
                </div>
                <blockquote type="cite">
                  <div dir="ltr">
                    <div class="x_x_x_gmail_extra">I cleared out two
                      uploads that were bad, but they had been there for
                      some time, and it looked like the aggregator was
                      skipping them.  The SP logs appear like it was
                      loading metadata happily without incident except
                      for a one-minute hiccup at 9:20 EDT with no
                      obvious cause.</div>
                    <div class="x_x_x_gmail_extra"><br>
                    </div>
                    <div class="x_x_x_gmail_extra">I'm able to look up
                      your IdP now and the metadata file is loading
                      without incident.  I was talking with Kevin, but
                      he stepped away right before it worked, so I don't
                      think he did anything.  I don't know an invocation
                      URL for the SP, but I suspect it'll work.</div>
                    <div class="x_x_x_gmail_extra"><br>
                    </div>
                    <div class="x_x_x_gmail_extra">Thanks for letting us
                      know promptly, please let me know if it doesn't
                      work for you, and I blame tommyknockers.</div>
                  </div>
                  <br>
                  <fieldset class="x_x_x_mimeAttachmentHeader"></fieldset>
                  <br>
                </blockquote>
                <br>
                <pre class="x_x_x_moz-signature" cols="72">-- 
Bobby Lawrence (<a class="x_x_x_moz-txt-link-abbreviated" href="mailto:robertl@jlab.org" moz-do-not-send="true">robertl@jlab.org</a>)
Jefferson Lab MIS
757-269-5818</pre>
              </div>
              <br>
              <fieldset class="x_x_mimeAttachmentHeader"></fieldset>
              <br>
            </blockquote>
            <br>
            <pre class="x_x_moz-signature" cols="72">-- 
Bobby Lawrence (<a class="x_x_moz-txt-link-abbreviated" href="mailto:robertl@jlab.org" moz-do-not-send="true">robertl@jlab.org</a>)
Jefferson Lab MIS
757-269-5818</pre>
          </div>
        </blockquote>
        <br>
        <pre class="x_moz-signature" cols="72">-- 
Bobby Lawrence (<a class="x_moz-txt-link-abbreviated" href="mailto:robertl@jlab.org" moz-do-not-send="true">robertl@jlab.org</a>)
Jefferson Lab MIS
757-269-5818</pre>
      </div>
    </blockquote>
    <br>
    <pre class="moz-signature" cols="72">-- 
Bobby Lawrence (<a class="moz-txt-link-abbreviated" href="mailto:robertl@jlab.org">robertl@jlab.org</a>)
Jefferson Lab MIS
757-269-5818</pre>
  </body>
</html>