<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html;
      charset=windows-1252">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <p>Yea - you are correct LOL.  Ok I'll ping you shortly before 11 to
      make sure we are on.  Thanks for your help<br>
    </p>
    <br>
    <div class="moz-cite-prefix">On 4/26/2018 2:44 PM, Klingenstein,
      Nate wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:CY4PR01MB3285FAFCCE9E291147843FF1DE8E0@CY4PR01MB3285.prod.exchangelabs.com">
      <meta http-equiv="Content-Type" content="text/html;
        charset=windows-1252">
      <style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
      <div id="divtagdefaultwrapper"
style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;"
        dir="ltr">
        <p style="margin-top:0;margin-bottom:0">(and I think it'd be
          11:00, unless I've been over here too long)</p>
      </div>
      <hr style="display:inline-block;width:98%" tabindex="-1">
      <div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt"
          face="Calibri, sans-serif" color="#000000"><b>From:</b> Bobby
          Lawrence <a class="moz-txt-link-rfc2396E" href="mailto:robertl@jlab.org"><robertl@jlab.org></a><br>
          <b>Sent:</b> Thursday, April 26, 2018 11:36:40 AM<br>
          <b>To:</b> Klingenstein, Nate<br>
          <b>Cc:</b> <a class="moz-txt-link-abbreviated" href="mailto:users@shibboleth.net">users@shibboleth.net</a><br>
          <b>Subject:</b> Re: TestShib metadata issues?</font>
        <div> </div>
      </div>
      <div style="background-color:#FFFFFF">
        <p>Thats midnight eastern right?  I suppose thats OK..the test
          should only take a few minutes.<br>
        </p>
        <br>
        <div class="x_moz-cite-prefix">On 4/26/2018 2:35 PM,
          Klingenstein, Nate wrote:<br>
        </div>
        <blockquote type="cite">
          <style type="text/css" style="display:none">
<!--
p
        {margin-top:0;
        margin-bottom:0}
-->
</style>
          <div id="x_divtagdefaultwrapper" dir="ltr"
            style="font-size:12pt; color:#000000;
            font-family:Calibri,Helvetica,sans-serif">
            <p style="margin-top:0; margin-bottom:0">Goodness if I know
              at this point.  If 8:00 PDT isn't too late for you, let's
              do it.</p>
            <p style="margin-top:0; margin-bottom:0"><br>
            </p>
            <p style="margin-top:0; margin-bottom:0">I rule out no
              possibility here other than a fix being released for 2. ;D</p>
          </div>
          <hr tabindex="-1" style="display:inline-block; width:98%">
          <div id="x_divRplyFwdMsg" dir="ltr"><font
              style="font-size:11pt" face="Calibri, sans-serif"
              color="#000000"><b>From:</b> Bobby Lawrence
              <a class="x_moz-txt-link-rfc2396E"
                href="mailto:robertl@jlab.org" moz-do-not-send="true"><robertl@jlab.org></a><br>
              <b>Sent:</b> Thursday, April 26, 2018 11:33:32 AM<br>
              <b>To:</b> Klingenstein, Nate<br>
              <b>Cc:</b> <a class="x_moz-txt-link-abbreviated"
                href="mailto:users@shibboleth.net"
                moz-do-not-send="true">
                users@shibboleth.net</a><br>
              <b>Subject:</b> Re: TestShib metadata issues?</font>
            <div> </div>
          </div>
          <div style="background-color:#FFFFFF">
            <p>Thats fine...I can wait until after hours.  When would
              that be for you?</p>
            <p>I think it would be helpful as I've decompiled much of
              IdP v2.3/4 Java classes and there are tons of debug
              statements in the opensaml library that would help to
              diagnose many of these types of issues. 
              <br>
            </p>
            <p>Again - my SP works with other Shib IdPs at my site so
              there is either something amiss w/ the TestShib IdP or a
              difference between its config and what local ones
              (although most of that are the defaults).<br>
            </p>
            <p><br>
            </p>
            <br>
            <div class="x_x_moz-cite-prefix">On 4/26/2018 2:29 PM,
              Klingenstein, Nate wrote:<br>
            </div>
            <blockquote type="cite">
              <style type="text/css" style="display:none">
<!--
p
        {margin-top:0;
        margin-bottom:0}
-->
</style>
              <div id="x_x_divtagdefaultwrapper" dir="ltr"
                style="font-size:12pt; color:#000000;
                font-family:Calibri,Helvetica,sans-serif">
                <p style="margin-top:0; margin-bottom:0">I'm not sure. 
                  It's under pretty extraordinary load.  I can obviously
                  do it, but I'm not sure what the ramiifcations will
                  be, nor am I sure that what you discover will be what
                  you want to know, since most of the providers out
                  there don't run this decrepit 2.x install.</p>
                <p style="margin-top:0; margin-bottom:0"><br>
                </p>
                <p style="margin-top:0; margin-bottom:0">But if it'd
                  really help you out, we can definitely find a way. 
                  Just something a little off-hours in case I do
                  something hideously dumb.</p>
              </div>
              <hr tabindex="-1" style="display:inline-block; width:98%">
              <div id="x_x_divRplyFwdMsg" dir="ltr"><font
                  style="font-size:11pt" face="Calibri, sans-serif"
                  color="#000000"><b>From:</b> Bobby Lawrence
                  <a class="x_x_moz-txt-link-rfc2396E"
                    href="mailto:robertl@jlab.org"
                    moz-do-not-send="true"><robertl@jlab.org></a><br>
                  <b>Sent:</b> Thursday, April 26, 2018 11:16:28 AM<br>
                  <b>To:</b> Klingenstein, Nate<br>
                  <b>Cc:</b> <a class="x_x_moz-txt-link-abbreviated"
                    href="mailto:users@shibboleth.net"
                    moz-do-not-send="true">
                    users@shibboleth.net</a><br>
                  <b>Subject:</b> Re: TestShib metadata issues?</font>
                <div> </div>
              </div>
              <div style="background-color:#FFFFFF">
                <p>Nate - is it possible to set the "org.opensaml"
                  logger to DEBUG on the TestShib IdP?  At least
                  temporarily while I debug my issue?<br>
                </p>
                <br>
                <div class="x_x_x_moz-cite-prefix">On 4/26/2018 12:56
                  PM, Klingenstein, Nate wrote:<br>
                </div>
                <blockquote type="cite">
                  <style type="text/css" style="display:none">
<!--
p
        {margin-top:0;
        margin-bottom:0}
-->
</style>
                  <div id="x_x_x_divtagdefaultwrapper" dir="ltr"
                    style="font-size:12pt; color:#000000;
                    font-family:Calibri,Helvetica,sans-serif">
                    <p style="margin-top:0; margin-bottom:0">The upgrade
                      to 3 is stalled because Kevin is a vastly more
                      competent sysadmin than I am and he hasn't had
                      time to do his thing.</p>
                    <p style="margin-top:0; margin-bottom:0"><br>
                    </p>
                    <p style="margin-top:0; margin-bottom:0">I would've
                      been slapping up versions just like I always did. 
                      We're in a better place.</p>
                  </div>
                  <hr tabindex="-1" style="display:inline-block;
                    width:98%">
                  <div id="x_x_x_divRplyFwdMsg" dir="ltr"><font
                      style="font-size:11pt" face="Calibri, sans-serif"
                      color="#000000"><b>From:</b> users
                      <a class="x_x_x_moz-txt-link-rfc2396E"
                        href="mailto:users-bounces@shibboleth.net"
                        moz-do-not-send="true">
                        <users-bounces@shibboleth.net></a> on
                      behalf of Bobby Lawrence <a
                        class="x_x_x_moz-txt-link-rfc2396E"
                        href="mailto:robertl@jlab.org"
                        moz-do-not-send="true">
                        <robertl@jlab.org></a><br>
                      <b>Sent:</b> Thursday, April 26, 2018 7:22:30 AM<br>
                      <b>To:</b> <a
                        class="x_x_x_moz-txt-link-abbreviated"
                        href="mailto:users@shibboleth.net"
                        moz-do-not-send="true">
                        users@shibboleth.net</a><br>
                      <b>Subject:</b> Re: TestShib metadata issues?</font>
                    <div> </div>
                  </div>
                  <div style="background-color:#FFFFFF">
                    <p>So it seems that the SP side of this is good to
                      go now, but I'm still having an issue on the IdP
                      side.  I'm not sure what it is yet but my SP works
                      with the exact same config with other IdPs at my
                      site.  One of them is shibboleth idp 3.3 and one
                      is 2.3.8 (which I'm in the process of retiring). 
                      I do see that TestShib is running 2.4.  Seems odd
                      to me that this test environment is almost a full
                      version behind, but oh well..maybe a TestShib 3
                      will pop up sometime lol. 
                      <br>
                    </p>
                    <p>Anyway - is it at all possible to change the
                      TestShib IdP process log config and set the
                      "org.opensaml" logger to DEBUG?
                      <br>
                    </p>
                    <br>
                    <div class="x_x_x_x_moz-cite-prefix">On 4/25/2018
                      7:22 PM, Nate Klingenstein wrote:<br>
                    </div>
                    <blockquote type="cite">
                      <div dir="ltr">
                        <div class="x_x_x_x_gmail_extra">I cleared out
                          two uploads that were bad, but they had been
                          there for some time, and it looked like the
                          aggregator was skipping them.  The SP logs
                          appear like it was loading metadata happily
                          without incident except for a one-minute
                          hiccup at 9:20 EDT with no obvious cause.</div>
                        <div class="x_x_x_x_gmail_extra"><br>
                        </div>
                        <div class="x_x_x_x_gmail_extra">I'm able to
                          look up your IdP now and the metadata file is
                          loading without incident.  I was talking with
                          Kevin, but he stepped away right before it
                          worked, so I don't think he did anything.  I
                          don't know an invocation URL for the SP, but I
                          suspect it'll work.</div>
                        <div class="x_x_x_x_gmail_extra"><br>
                        </div>
                        <div class="x_x_x_x_gmail_extra">Thanks for
                          letting us know promptly, please let me know
                          if it doesn't work for you, and I blame
                          tommyknockers.</div>
                      </div>
                      <br>
                      <fieldset class="x_x_x_x_mimeAttachmentHeader"></fieldset>
                      <br>
                    </blockquote>
                    <br>
                    <pre class="x_x_x_x_moz-signature" cols="72">-- 
Bobby Lawrence (<a class="x_x_x_x_moz-txt-link-abbreviated" href="mailto:robertl@jlab.org" moz-do-not-send="true">robertl@jlab.org</a>)
Jefferson Lab MIS
757-269-5818</pre>
                  </div>
                  <br>
                  <fieldset class="x_x_x_mimeAttachmentHeader"></fieldset>
                  <br>
                </blockquote>
                <br>
                <pre class="x_x_x_moz-signature" cols="72">-- 
Bobby Lawrence (<a class="x_x_x_moz-txt-link-abbreviated" href="mailto:robertl@jlab.org" moz-do-not-send="true">robertl@jlab.org</a>)
Jefferson Lab MIS
757-269-5818</pre>
              </div>
            </blockquote>
            <br>
            <pre class="x_x_moz-signature" cols="72">-- 
Bobby Lawrence (<a class="x_x_moz-txt-link-abbreviated" href="mailto:robertl@jlab.org" moz-do-not-send="true">robertl@jlab.org</a>)
Jefferson Lab MIS
757-269-5818</pre>
          </div>
        </blockquote>
        <br>
        <pre class="x_moz-signature" cols="72">-- 
Bobby Lawrence (<a class="x_moz-txt-link-abbreviated" href="mailto:robertl@jlab.org" moz-do-not-send="true">robertl@jlab.org</a>)
Jefferson Lab MIS
757-269-5818</pre>
      </div>
    </blockquote>
    <br>
    <pre class="moz-signature" cols="72">-- 
Bobby Lawrence (<a class="moz-txt-link-abbreviated" href="mailto:robertl@jlab.org">robertl@jlab.org</a>)
Jefferson Lab MIS
757-269-5818</pre>
  </body>
</html>