<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div class="moz-cite-prefix">I'd start by looking at the Shib IdP
log file (idp-process.log) or, if it is not getting to that point,
the Jetty log file, to get more information on where it is failing
on startup.</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">You might also get a hint if you use
systemctl's suggestion to add "-l" to see the rest of the
ellipsized line.<br>
</div>
<div class="moz-cite-prefix"><br>
</div>
<div class="moz-cite-prefix">On 5/8/2020 10:13 AM, Lohr, Donald
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:961121bb-f566-89a8-5098-071f2e38003a@jmu.edu">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
1) On one IdP server "systemctl status Shibboleth" returns:<br>
<br>
<tt>Shibboleth.service - Shibboleth Identity Provider</tt><tt><br>
</tt><tt> Loaded: loaded
(/etc/systemd/system/Shibboleth.service; enabled; vendor preset:
disabled)</tt><tt><br>
</tt><tt> <b>Active: </b></tt><b><tt>active</tt></b><b><tt>
(running) since Sun 2020-05-03 03:01:32 EDT; 5 days ago</tt></b><tt><br>
</tt><tt> Main PID: 827 (java)</tt><tt><br>
</tt><tt> CGroup: /system.slice/Shibboleth.service</tt><tt><br>
</tt><tt> ├─ 827 /usr/lib/jvm/<b>jdk-11.0.2</b>/bin/java
-Djetty.host=0.0.0.0 -Didp.home=/opt/shibboleth-idp
-Djava.io.tmpdir=/opt/jetty/shib-base/tmp -jar
/opt/jetty/start.jar jetty.home=/opt/jetty jetty.base=/opt...</tt><tt><br>
</tt><tt> └─1103 /usr/lib/jvm/<b>jdk-11.0.2</b>/bin/java
-Xmx1500m -XX:MaxPermSize=128m -Djava.io.tmpdir=tmp
-Djetty.home=/opt/jetty -Djetty.base=/opt/jetty/shib-base
-Djava.io.tmpdir=tmp -Didp.home=/opt/shibboleth...</tt><br>
<br>
The <i>java -version</i> command on that server reports:<br>
<tt>openjdk version "<b>11.0.2</b>" 2019-01-15</tt><tt><br>
</tt><tt>OpenJDK Runtime Environment 18.9 (build <b>11.0.2+9</b>)</tt><tt><br>
</tt><tt>OpenJDK 64-Bit Server VM 18.9 (build <b>11.0.2+9, </b><b>mixed
mode</b>)</tt><br>
<br>
The <i>whereis java</i> command on that server reports:<br>
<tt>java: /usr/bin/java /usr/lib/java /etc/java /usr/share/java
/usr/lib/jvm/<b>jdk-11.0.2</b>/bin/java</tt><tt><br>
</tt><br>
<br>
2) On another IdP server "systemctl status Shibboleth" returns:<br>
<br>
<tt>Shibboleth.service - Shibboleth Identity Provider</tt><tt><br>
</tt><tt> Loaded: loaded
(/etc/systemd/system/Shibboleth.service; enabled; vendor preset:
disabled)</tt><tt><br>
</tt><tt> <b>Active: active (running) since Thu 2020-05-07
08:54:46 EDT; 1 day 1h ago</b></tt><tt><br>
</tt><tt> Main PID: 1654 (java)</tt><tt><br>
</tt><tt> CGroup: /system.slice/Shibboleth.service</tt><tt><br>
</tt><tt> ├─1654 /etc/alternatives/java
-Djetty.host=0.0.0.0 -Didp.home=/opt/shibboleth-idp
-Djava.io.tmpdir=/opt/jetty/shib-base/tmp -jar
/opt/jetty/start.jar jetty.home=/opt/jetty
jetty.base=/opt/jetty/shi...</tt><tt><br>
</tt><tt> └─1761 /usr/lib/jvm/<b>java-11-openjdk-11.0.7.10-4.el7_8.x86_64</b>/bin/java
-Xmx1500m -XX:MaxPermSize=128m -Djava.io.tmpdir=tmp
-Djetty.home=/opt/jetty -Djetty.base=/opt/jetty/shib-base
-Djava.io.tmpdir=...</tt><tt><br>
</tt><tt><br>
</tt><tt>systemd[1]: <b>Shibboleth.service failed.</b></tt><tt><br>
</tt><tt>systemd[1]: Started Shibboleth Identity Provider.</tt><tt><br>
</tt><tt>java[1654]: OpenJDK 64-Bit Server VM warning: Ignoring
option MaxPermSize; support was removed in 8.0</tt><tt><br>
</tt><tt>java[1654]: 2020-05-07 08:54:50.376:INFO::main: Logging
initialized @993ms</tt><tt><br>
</tt><tt>java[1654]: 2020-05-07 08:54:51.041:INFO::main:
Redirecting stderr/stdout to
/opt/jetty-distribution-9.3.24.v20180605/shib-base/logs/2020_05_07.stderrout.log</tt><tt><br>
</tt><tt>java[1654]: WARNING: An illegal reflective access
operation has occurred</tt><tt><br>
</tt><tt>java[1654]: WARNING: Illegal reflective access by
org.springframework.beans.BeanUtils
(<a class="moz-txt-link-freetext"
href="file:/opt/jetty-distribution-9.3.24.v20180605/shib-base/tmp/jetty-0.0.0.0-80-i"
moz-do-not-send="true">file:/opt/jetty-distribution-9.3.24.v20180605/shib-base/tmp/jetty-0.0.0.0-80-i</a>...</tt><tt><br>
</tt><tt>java[1654]: WARNING: Please consider reporting this to
the maintainers of org.springframework.beans.BeanUtils</tt><tt><br>
</tt><tt>java[1654]: WARNING: Use --illegal-access=warn to enable
warnings of further illegal reflective access operations</tt><tt><br>
</tt><tt>java[1654]: WARNING: All illegal access operations will
be denied in a future release</tt><tt><br>
</tt><tt>Hint: Some lines were ellipsized, use -l to show in full.</tt><br>
<br>
The <i>java -version</i> command on that server reports:<br>
<tt>openjdk version "<b>11.0.</b><b>7</b>" 2020-04-14 LTS</tt><tt><br>
</tt><tt> OpenJDK Runtime Environment 18.9 (build <b>11.0.7+10</b>-LTS)</tt><tt><br>
</tt><tt> OpenJDK 64-Bit Server VM 18.9 (build <b>11.0.7+10</b>-LTS,
<b>mixed mode, sharing</b>)</tt><br>
<br>
The <i>whereis java</i> command on that server reports:<br>
<tt>java: /usr/bin/java /usr/lib/java /etc/java /usr/share/java
/usr/share/man/man1/java.1.gz</tt><tt><br>
</tt><br>
<br>
<br>
In my current role, I do not manage the server hardware, OS, or
java flavor/version. But am seeking help on the "systemd[1]: <b>Shibboleth.service
failed.</b>" Error.<br>
<br>
Thanks again,<br>
Don<br>
<br>
<pre class="moz-signature" cols="72">--
D o n a l d L o h r
I n f o r m a t i o n S y s t e m s
J a m e s M a d i s o n U n i v e r s i t y
5 4 0 . 5 6 8 . 3 7 3 0
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
</blockquote>
<p><br>
</p>
<pre class="moz-signature" cols="72">--
%% Christopher A. Bongaarts %% <a class="moz-txt-link-abbreviated" href="mailto:cab@umn.edu">cab@umn.edu</a> %%
%% OIT - Identity Management %% <a class="moz-txt-link-freetext" href="http://umn.edu/~cab">http://umn.edu/~cab</a> %%
%% University of Minnesota %% +1 (612) 625-1809 %%
</pre>
</body>
</html>