<div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Mar 13, 2020 at 3:37 AM Rod Widdowson <<a href="mailto:rdw@steadingsoftware.com">rdw@steadingsoftware.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="auto">Check your logs (shibd) further up.  I’d guess that  metadata reload started to fail<div> a few days ago and you didn’t notice and now it’s all gone out of date...</div></div></blockquote><div><br>Reloading is happening okay it seems. It's from my IDP server. <br><br>2020-03-13 07:40:58,779 - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:387] - Service 'shibboleth.MetadataResolverService': Reload complete<br>2020-03-13 07:44:58,797 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:299] - Metadata Resolver FilesystemMetadataResolver SiteSP2: Beginning refresh of metadata from '/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml'<br>2020-03-13 07:44:58,797 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:306] - Metadata Resolver FilesystemMetadataResolver SiteSP2: Processing new metadata from '/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml'<br>2020-03-13 07:44:58,797 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:419] - Metadata Resolver FilesystemMetadataResolver SiteSP2: Unmarshalling metadata from '/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml'<br>2020-03-13 07:44:58,801 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:462] - Metadata Resolver FilesystemMetadataResolver SiteSP2: Preprocessing metadata from '/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml'<br>2020-03-13 07:44:58,801 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractMetadataResolver:376] - Metadata Resolver FilesystemMetadataResolver SiteSP2: Applying metadata filter<br>2020-03-13 07:44:58,801 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:472] - Metadata Resolver FilesystemMetadataResolver SiteSP2: Releasing cached DOM for metadata from '/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml'<br>2020-03-13 07:44:58,801 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:476] - Metadata Resolver FilesystemMetadataResolver SiteSP2: Post-processing metadata from '/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml'<br>2020-03-13 07:44:58,802 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:480] - Metadata Resolver FilesystemMetadataResolver SiteSP2: Computing expiration time for metadata from '/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml'<br>2020-03-13 07:44:58,802 - DEBUG [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:485] - Metadata Resolver FilesystemMetadataResolver SiteSP2: Expiration of metadata from '/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml' will occur at 2020-03-13T11:44:58.797Z<br>2020-03-13 07:44:58,802 - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:504] - Metadata Resolver FilesystemMetadataResolver SiteSP2: New metadata successfully loaded for '/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml'<br>2020-03-13 07:44:58,802 - INFO [org.opensaml.saml.metadata.resolver.impl.AbstractReloadingMetadataResolver:324] - Metadata Resolver FilesystemMetadataResolver SiteSP2: Next refresh cycle for metadata provider '/opt/shibboleth-idp/metadata/DA3DE445BFF61F9700020C2FBED1000697FA9270-sp-metadata.xml' will occur on '2020-03-13T10:44:58.798Z' ('2020-03-13T10:44:58.798Z' local time)<br>2020-03-13 07:51:57,634 - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:258] - Service 'shibboleth.AttributeFilterService': Reloading service configuration<br>2020-03-13 07:51:57,635 - INFO [net.shibboleth.ext.spring.util.SchemaTypeAwareXMLBeanDefinitionReader:317] - Loading XML bean definitions from file [/opt/shibboleth-idp/conf/attribute-filter.xml]<br>2020-03-13 07:51:57,643 - DEBUG [net.shibboleth.idp.attribute.filter.spring.impl.AttributeFilterPolicyGroupParser:66] - Parsing attribute filter policy group ShibbolethFilterPolicy<br>2020-03-13 07:51:57,643 - DEBUG [net.shibboleth.idp.attribute.filter.spring.BaseFilterParser:169] - Element 'AttributeFilterPolicy' 'id' attribute 'SiteApp1' is mapped to '/AttributeFilterPolicyGroup:ShibbolethFilterPolicy/AttributeFilterPolicy:SiteApp1'<br>2020-03-13 07:51:57,644 - DEBUG [net.shibboleth.idp.attribute.filter.spring.impl.AttributeFilterPolicyParser:84] - Parsing configuration for attribute filter policy: SiteApp1<br>2020-03-13 07:51:57,644 - DEBUG [net.shibboleth.idp.attribute.filter.spring.impl.AttributeRuleParser:97] - permitValueRules [Generic bean: class [net.shibboleth.idp.attribute.filter.Matcher$1]; scope=prototype; abstract=false; lazyInit=false; autowireMode=0; dependencyCheck=0; autowireCandidate=true; primary=false; factoryBeanName=null; factoryMethodName=null; initMethodName=null; destroyMethodName=null]<br>2020-03-13 07:51:57,644 - DEBUG [net.shibboleth.idp.attribute.filter.spring.impl.AttributeRuleParser:97] - permitValueRules [Generic bean: class [net.shibboleth.idp.attribute.filter.Matcher$1]; scope=prototype; abstract=false; lazyInit=false; autowireMode=0; dependencyCheck=0; autowireCandidate=true; primary=false; factoryBeanName=null; factoryMethodName=null; initMethodName=null; destroyMethodName=null]<br>2020-03-13 07:51:57,645 - DEBUG [net.shibboleth.idp.attribute.filter.spring.impl.AttributeRuleParser:97] - permitValueRules [Generic bean: class [net.shibboleth.idp.attribute.filter.Matcher$1]; scope=prototype; abstract=false; lazyInit=false; autowireMode=0; dependencyCheck=0; autowireCandidate=true; primary=false; factoryBeanName=null; factoryMethodName=null; initMethodName=null; destroyMethodName=null]<br>2020-03-13 07:51:57,645 - DEBUG [net.shibboleth.idp.attribute.filter.spring.BaseFilterParser:169] - Element 'AttributeFilterPolicy' 'id' attribute 'SiteApp2' is mapped to '/AttributeFilterPolicyGroup:ShibbolethFilterPolicy/AttributeFilterPolicy:SiteApp2'<br>2020-03-13 07:51:57,645 - DEBUG [net.shibboleth.idp.attribute.filter.spring.impl.AttributeFilterPolicyParser:84] - Parsing configuration for attribute filter policy: SiteApp2<br>2020-03-13 07:51:57,645 - INFO [net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:583] - Refreshing ApplicationContext:shibboleth.AttributeFilterService: startup date [Fri Mar 13 07:51:57 UTC 2020]; parent: Root WebApplicationContext<br>2020-03-13 07:51:57,662 - DEBUG [net.shibboleth.idp.attribute.filter.spring.impl.AttributeFilterServiceStrategy:54] - Creating Attribute Filter ShibbolethAttributeFilter with  2 Policies<br>2020-03-13 07:51:57,663 - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:380] - Service 'shibboleth.AttributeFilterService': Completed reload and swapped in latest configuration for service 'shibboleth.AttributeFilterService'<br>2020-03-13 07:51:57,663 - INFO [net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:984] - Closing ApplicationContext:shibboleth.AttributeFilterService: startup date [Fri Mar 13 07:36:57 UTC 2020]; parent: Root WebApplicationContext<br>2020-03-13 07:51:57,664 - INFO [net.shibboleth.ext.spring.service.ReloadableSpringService:387] - Service 'shibboleth.AttributeFilterService': Reload complete<br>2020-03-13 07:51:58,096 - INFO [net.shibboleth.utilities.java.support.service.AbstractReloadableService:258] - Service 'shibboleth.AttributeResolverService': Reloading service configuration<br><br> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="auto"><div><div><div><br><div dir="ltr">Sent from my iPad</div><div dir="ltr"><br><blockquote type="cite">On 13 Mar 2020, at 07:47, Zico <<a href="mailto:mailzico@gmail.com" target="_blank">mailzico@gmail.com</a>> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><div dir="ltr">Hello, <br><br>I am observing this for last two days. My 3.x Shibboleth IDP can't perform validation for any new SP. Here 'new SP' doesn't mean... brand new SP but also it's happening with "any metadata". <br>Like, I removed currently active one lately and prepared a new trust relationship with that SP metadata; which is also failing now. <br><br>From error I see these: <br><br><b><span style="color:rgb(0,0,0);font-family:Arial,Verdana,sans-serif;font-size:11px">src-resolve: Cannot resolve the name 'resolver:BasePrincipalConnectorType' to a(n) 'type definition' component.</span> <br><span style="color:rgb(0,0,0);font-family:Arial,Verdana,sans-serif;font-size:11px">Error of schema creating</span> <br><span style="color:rgb(0,0,0);font-family:Arial,Verdana,sans-serif;font-size:11px">Warning: cannot validate metadata. Check internet connetion ans <a href="http://www.w3.org" target="_blank">www.w3.org</a> availability.</span> <br><span style="color:rgb(0,0,0);font-family:Arial,Verdana,sans-serif;font-size:11px">Warning: Error of schema creating</span> <br><span style="color:rgb(0,0,0);font-family:Arial,Verdana,sans-serif;font-size:11px">Warning: src-resolve: Cannot resolve the name 'resolver:BasePrincipalConnectorType' to a(n) 'type definition' component</span>      <br clear="all"></b><div><br></div>-- <br><div dir="ltr">Best,<br>Zico</div></div>
<span>-- </span><br><span>For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a></span><br><span>To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a></span></div></blockquote></div></div></div></div>-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a></blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature">Best,<br>Zico</div></div>