<div dir="ltr">Peter,<div>That looks like it fixed it. I had to create that override file as you documented. I was also under the same impression as others that there should have been something written in the idp-process.log according to the errors.  After creating the file and running the demon-reload command it still wasn't working. Not even restarting tomcat. At this point I was about ready to just rebuild from scratch but the reboot of the server worked.</div><div><br></div><div>Question about going forward with IDP4. Has the attribute-resolver.xml file been split apart?  Do the encoded attributes still reside here or is there a different place for them to go? I thought I had read that the encoded items were moved out and only leaving connection details in there but I can't seem to find where I read that at. For example would this remain in attribute-resolver.xml or is IDP4 recommending this be moved out:</div><div><br></div><div>





<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><AttributeDefinition </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"Simple"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"> </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">id</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"givenName"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">></span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space">        </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"><InputDataConnector </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">ref</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"myLDAP"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"> </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">attributeNames</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s5" style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"givenName"</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">/></span></p>
<p class="gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(180,36,25)"><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space">        </span></span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><AttributeEncoder </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"SAML1String"</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">name</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"urn:mace:dir:attribute-def:givenName"</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> /></span></p>
<p class="gmail-p2" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(180,36,25)"><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space">        </span></span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><AttributeEncoder </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span class="gmail-s3" style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"SAML2String"</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">name</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"urn:oid:2.5.4.42"</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span class="gmail-s2" style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">friendlyName</span><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">"givenName"</span><span class="gmail-s6" style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> /></span></p>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:Menlo;color:rgb(46,174,187)"><span class="gmail-s4" style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"><span class="gmail-Apple-converted-space">    </span></span><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures"></AttributeDefinition></span></p></div><div><br clear="all"><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><p><span style="font-family:Arial,sans-serif;color:rgb(31,73,125)"><font size="1">Steve Herrera<br></font></span><span style="font-family:Arial,sans-serif;color:rgb(31,73,125)"><font size="1">System Administration<br>Information Security<br></font></span><span style="color:rgb(31,73,125);font-family:Arial,sans-serif;font-size:7.5pt">Bradley University<br></span><span style="color:rgb(31,73,125);font-family:Arial,sans-serif;font-size:7.5pt">Phone: 309 / 677-2336<br></span><span style="color:rgb(31,73,125);font-family:Arial,sans-serif;font-size:7.5pt">FAX: 309 / 677-3460<br></span><span style="font-size:7.5pt;font-family:Arial,sans-serif;color:rgb(31,73,125)">Email:  </span><u><span style="font-size:7.5pt;font-family:"Arial","sans-serif";color:blue"><a href="mailto:sherrera@fsmail.bradley.edu" target="_blank">sherrera@fsmail.bradley.edu</a></span></u></p></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Sep 1, 2020 at 4:11 PM Peter Schober <<a href="mailto:peter.schober@univie.ac.at">peter.schober@univie.ac.at</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">* Christopher Bongaarts via users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>> [2020-09-01 22:11]:<br>
> But if it got this far, I would have expected to see output in<br>
> idp-process.log, so you might also want to double-check your logging<br>
> configuration and filesystem permissions.<br>
<br>
There's also the possibility of changed Tomcat packaging. E.g. when<br>
Debian (which is the basis for Ubuntu) updated Tomcat 8 to 9 in Debian<br>
10 they also moved the service management from SysV to systemd.<br>
And the default systemd configuration for tomcat included<br>
ProtectSystem=strict and a default set of ReadWritePaths limitations,<br>
preventing tomcat from writing anywhere else on the file system -- so<br>
no metadata file backups and no local log files.<br>
<br>
If that's the case the workaround is easy, cf.<br>
<a href="http://shibboleth.net/pipermail/users/2020-April/046659.html" rel="noreferrer" target="_blank">http://shibboleth.net/pipermail/users/2020-April/046659.html</a><br>
<a href="http://shibboleth.net/pipermail/users/2020-May/046924.html" rel="noreferrer" target="_blank">http://shibboleth.net/pipermail/users/2020-May/046924.html</a><br>
<br>
-peter<br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div>