<div dir="ltr"><div dir="ltr"><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Jul 7, 2021 at 4:19 PM Cantor, Scott <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On 7/7/21, 4:14 PM, "users on behalf of <a href="mailto:vadud3@gmail.com" target="_blank">vadud3@gmail.com</a>" <<a href="mailto:users-bounces@shibboleth.net" target="_blank">users-bounces@shibboleth.net</a> on behalf of <a href="mailto:vadud3@gmail.com" target="_blank">vadud3@gmail.com</a>> wrote:<br>
<br>
>    I am still learning and trying to understand the log.<br>
<br>
That's fine, you just didn't include any context, only stated a presumption that happens to be untrue.<br>
<br>
> When the certificate expired I saw this in the shibd.log. <br>
>    2021-07-01 20:23:11 WARN Shibboleth.SSO.SAML2 [35519] [default]: error processing incoming assertion:<br>
> SAML response reported an IdP error.<br>
><br>
>   So looks like it is not related to certificate expiration as one possible factor.<br>
<br>
It means exactly what it says, nothing more. The status code in the SAML response wasn't success. Appropriately configuring the transaction log will include the status code(s) from the message if desired, apart from just tracing it with more log detail.<br></blockquote><div><br></div><div>I do have transaction log as well. What should I be looking for in the log to indicate an issue? Also this is current config for transaction log</div><div><br></div><span style="color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px">log4j.appender.tran_log=org.apache.log4j.RollingFileAppender</span><div style="margin:0px;padding:0px;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:16px;line-height:inherit;font-family:Calibri,Arial,Helvetica,sans-serif;vertical-align:baseline;color:rgb(0,0,0)">log4j.appender.tran_log.fileName=/var/log/shibboleth/transaction.log</div><div style="margin:0px;padding:0px;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:16px;line-height:inherit;font-family:Calibri,Arial,Helvetica,sans-serif;vertical-align:baseline;color:rgb(0,0,0)">log4j.appender.tran_log.maxFileSize=1000000</div><div style="margin:0px;padding:0px;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:16px;line-height:inherit;font-family:Calibri,Arial,Helvetica,sans-serif;vertical-align:baseline;color:rgb(0,0,0)">log4j.appender.tran_log.maxBackupIndex=20</div><div style="margin:0px;padding:0px;border:0px;font-variant-numeric:inherit;font-variant-east-asian:inherit;font-stretch:inherit;font-size:16px;line-height:inherit;font-family:Calibri,Arial,Helvetica,sans-serif;vertical-align:baseline;color:rgb(0,0,0)">log4j.appender.tran_log.layout=org.apache.log4j.PatternLayout</div><div><span style="color:rgb(0,0,0);font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px">log4j.appender.tran_log.layout.ConversionPattern=%d{%Y-%m-%d %H:%M:%S}|%c|%m%n</span></div><div><br></div><div>Thanks,</div><div>Asif</div><div>  </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<br>
-- Scott<br>
<br>
<br>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature">Asif Iqbal<br>PGP Key: 0xE62693C5 KeyServer: <a href="http://pgp.mit.edu" target="_blank">pgp.mit.edu</a><br>A: Because it messes up the order in which people normally read text.<br>Q: Why is top-posting such a bad thing?<br><br></div></div>