<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Courier;
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Times New Roman \(Body CS\)";
panose-1:2 2 6 3 5 4 5 2 3 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:Helvetica;
color:windowtext;
font-weight:normal;
font-style:normal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-family:Helvetica"> </span>skarra@idp-shiboleth:/opt/shibboleth-idp$ sudo -E ./bin/status.sh<br>
<br>
<span style="font-family:Helvetica"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:Helvetica">Try adding the --url parameter like this (including whatever proxy/ajp ports you're using:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:Helvetica"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:Helvetica">bin/status.sh --url=http://localhost/idp<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:Helvetica"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:Helvetica">I use something like:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:Helvetica"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:Helvetica">bin/status.sh –url=http://localhost:8009/idp<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:Helvetica"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">From: </span></b><span style="font-size:12.0pt;color:black">users <users-bounces@shibboleth.net> on behalf of Sriram Karra <skarra@asynk.io><br>
<b>Reply-To: </b>Shib Users <users@shibboleth.net><br>
<b>Date: </b>Tuesday, January 7, 2020 at 13:42<br>
<b>To: </b>Shib Users <users@shibboleth.net><br>
<b>Subject: </b>Re: [EXT] Newbie IDP installation question<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On Wed, Jan 1, 2020 at 9:04 AM Yeargan, Yancey <<a href="mailto:Yancey.Yeargan@untsystem.edu">Yancey.Yeargan@untsystem.edu</a>> wrote:<o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal">I would check the Tomcat logs first. See if the Shibboleth application (war file) is even loading successfully. There may be a dependency that got missed or something else preventing the Shibboleth IDP from loading.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">After you get Tomcat to load the application, then proceed with the following.<o:p></o:p></p>
</div>
</div>
</blockquote>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Tomcat is not showing any problems with deployment. The manager-gui app lists the endpoint correctly, the tomcat logs (catalina.out) show deployment confirmation and no errors, I am able to deploy other sample tomcat webapps as well without
issues.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">But bin/status.sh returns nothing useful. One thing that did change in one of my attempts at reinstalling and starting from scratch - is the script started returning 'connection refused' instead of what I had sent in my previous email.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I tried similar install on a local MacbookPro as well (everything on localhost) with exact same results. At this point It certainly looks like I am getting something very basic wrong here...<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Is there any way to increase the level of debubbing within runclass.sh / CLI?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">-Sriram<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<div>
<div>
<p class="MsoNormal">When starting out with the Shibboleth Identity Provider, I found it immensely helpful to increase the logging to debug level. I suggest starting with the following while learning ...<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">In file <span style="font-family:Courier">/opt/shibboleth-idp/conf/idp.properties</span>, add the following …<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Courier">idp.loglevel.idp=DEBUG</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">.. then check /opt/shibboleth-idp/idp-process.log for details. It's a bit overwhelming at first, but you'll grow accustomed to it over time.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal">Once the IDP is running, you may still get an access denied response when attempting to access the status page. The status page is restricted by IP address, and defaults to localhost only.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">In file <span style="font-family:Courier">/opt/shibboleth-idp/conf/access-control.xml</span>, check/update the following lines and add the IP network [in CIDR format] of the machine on which the web browser is running.
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-family:Courier"><entry key="AccessByIPAddress"><br>
<bean parent="shibboleth.IPRangeAccessControl"<br>
p:allowedRanges="#{ { '<a href="http://127.0.0.1/32" target="_blank">127.0.0.1/32</a>' , '::1/128' } }" /><br>
</entry></span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal"><b><span style="font-size:10.5pt;color:black">Yancey Yeargan</span></b><span style="font-size:10.0pt;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;color:black">IT Manager</span><span style="font-size:10.0pt;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;color:black">IT Shared Services</span><span style="font-size:10.0pt;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:10.5pt;color:black">________________________________</span><span style="font-size:10.0pt;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-size:10.5pt;color:#059033">UNIVERSITY OF NORTH TEXAS SYSTEM</span></b><span style="font-size:10.0pt;color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><b><span style="font-size:10.5pt;color:black">Office:</span></b><span style="font-size:10.5pt;color:black"> 940.369.7521</span><span style="font-size:10.0pt;color:black"><o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">On Dec 31, 2019, at 12:50 PM, Sriram Karra <<a href="mailto:skarra@asynk.io" target="_blank">skarra@asynk.io</a>> wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">I am trying to install IDP on a Linux box (on GCP). Tomcat is up and running, and I have deployed the idp.war file.
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I was trying to do a status of the installation, and was expecting to see something like this: <a href="https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fdisplay%2FIDP30%2FStatus&data=02%7C01%7CYancey.Yeargan%40untsystem.edu%7Cf2da131c990f4dafc48308d78e2265ad%7C70de199207c6480fa318a1afcba03983%7C0%7C1%7C637134150708334172&sdata=pidvC0zBpFPpe9erbKU6Z5KjqZJs4Zb7mc06Iy%2Ft4yg%3D&reserved=0" target="_blank">https://wiki.shibboleth.net/confluence/display/IDP30/Status</a>,
but I am not getting any reasonable output, or even errors. See output below. Any pointers in how to debug this further?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">skarra@idp-shiboleth:/opt/shibboleth-idp$ sudo -E ./bin/status.sh<br>
(<a href="https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2F35.226.11.37%3A8080%2Fidp%2Fstatus&data=02%7C01%7CYancey.Yeargan%40untsystem.edu%7Cf2da131c990f4dafc48308d78e2265ad%7C70de199207c6480fa318a1afcba03983%7C0%7C1%7C637134150708334172&sdata=u5IAISg%2B%2FC6dktAuZFHJ78umhBCA%2BXDoKC2%2FKTPKe%2FI%3D&reserved=0" target="_blank">http://35.226.11.37:8080/idp/status</a>)
<a href="https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2F35.226.11.37%3A8080%2Fidp%2Fstatus&data=02%7C01%7CYancey.Yeargan%40untsystem.edu%7Cf2da131c990f4dafc48308d78e2265ad%7C70de199207c6480fa318a1afcba03983%7C0%7C1%7C637134150708344163&sdata=1Hr61OOiz5LykWSM3b2Sz3Z6cM93qghdEj3brSxtRS8%3D&reserved=0" target="_blank">
http://35.226.11.37:8080/idp/status</a><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal">-- <br>
For Consortium Member technical support, see <a href="https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=02%7C01%7CYancey.Yeargan%40untsystem.edu%7Cf2da131c990f4dafc48308d78e2265ad%7C70de199207c6480fa318a1afcba03983%7C0%7C0%7C637134150708364161&sdata=Z%2B%2BRfWvflEW%2FLNuLZkQiRRw0uEwIyCeAlIVK6Ce0RmA%3D&reserved=0" target="_blank">
https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=02%7C01%7CYancey.Yeargan%40untsystem.edu%7Cf2da131c990f4dafc48308d78e2265ad%7C70de199207c6480fa318a1afcba03983%7C0%7C0%7C637134150708364161&sdata=Z%2B%2BRfWvflEW%2FLNuLZkQiRRw0uEwIyCeAlIVK6Ce0RmA%3D&reserved=0</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">
users-unsubscribe@shibboleth.net</a><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<p class="MsoNormal">-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" target="_blank">
https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">
users-unsubscribe@shibboleth.net</a><o:p></o:p></p>
</blockquote>
</div>
</div>
</div>
</body>
</html>