<div dir="ltr">We've struggled at times with java's DNS caching in other (non-Shib) environments. You might take a look at those settings.</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Apr 22, 2022 at 8:29 AM Ullfig, Roberto Alfredo via users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div dir="ltr">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Does not appear related to DNS at all at least at the OS level. I ran a query every minute on one of the servers for 20 hours and they were all good. The IDP must be logging an incorrect error message or it's not using the OS's DNS resolver.</div>
<div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div id="gmail-m_-7986148171853278548gmail-m_-4564027320833731955Signature">
<div>
<div></div>
<div id="gmail-m_-7986148171853278548gmail-m_-4564027320833731955divtagdefaultwrapper" style="font-size:12pt;color:rgb(0,0,0);background-color:rgb(255,255,255);font-family:Calibri,Arial,Helvetica,sans-serif">
<div style="font-family:Tahoma;font-size:13px">---
<div><span id="gmail-m_-7986148171853278548gmail-m_-4564027320833731955ms-rterangepaste-start"></span><span style="font-family:arial,helvetica,sans-serif;font-size:13px;line-height:16.003px">Roberto Ullfig - <a href="mailto:rullfig@uic.edu" target="_blank">rullfig@uic.edu</a></span><br style="font-family:arial,helvetica,sans-serif;font-size:13px;line-height:16.003px">
<span style="font-family:arial,helvetica,sans-serif;font-size:13px;line-height:16.003px">Systems Administrator</span><br style="font-family:arial,helvetica,sans-serif;font-size:13px;line-height:16.003px">
<span style="font-family:arial,helvetica,sans-serif;font-size:13px;line-height:16.003px">Enterprise Applications & Services | Technology Solutions</span><br style="font-family:arial,helvetica,sans-serif;font-size:13px;line-height:16.003px">
<span style="font-family:arial,helvetica,sans-serif;font-size:13px;line-height:16.003px">University of Illinois - Chicago</span>
<div><span id="gmail-m_-7986148171853278548gmail-m_-4564027320833731955ms-rterangepaste-end"></span></div>
</div>
</div>
</div>
<div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
<hr style="display:inline-block;width:98%">
<b>From:</b> Ian Young<br>
<b>Sent:</b> Thursday, April 21, 2022 11:51 AM<br>
<b>To:</b> Shib Users<br>
<b>Cc:</b> Ullfig, Roberto Alfredo<br>
<b>Subject:</b> Re: InCommon DNS Issues?
<div><br>
</div>
</div>
<div>
<div><br>
<div>
<blockquote type="cite">
<div>On 2022-04-21, at 17:19, Ullfig, Roberto Alfredo via users <<a href="mailto:users@shibboleth.net" rel="noopener noreferrer" target="_blank">users@shibboleth.net</a>> wrote:</div>
<br>
<div><span style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;float:none;display:inline">Is
it possible that the IDP's error message is not correct and it's actually a download timeout, not a DNS error?</span></div>
</blockquote>
</div>
<br>
<div>Never say never, but I'd say it's very unlikely.</div>
<div><br>
</div>
<div>"Error retrieving metadata" is obviously a message from the IdP, but the inner "cause" message is something thrown by Java.</div>
<div><br>
</div>
<div>It's more likely to be some kind of DNS resolution error in your environment, although it's hard to speculate what might be the cause of that. </div>
<div><span style="border-collapse:separate;color:rgb(0,0,0);font-family:Helvetica;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;border-spacing:0px">
<div><span style="border-collapse:separate;color:rgb(0,0,0);font-family:Helvetica;font-size:12px;font-style:normal;font-variant:normal;font-weight:normal;letter-spacing:normal;line-height:normal;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;border-spacing:0px">
<div><br>
</div>
<div> -- Ian<br>
</div>
<div><span style="font-size:medium"><br>
</span></div>
</span></div>
</span><br>
<br>
</div>
<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
-- <br>
For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw" rel="noreferrer" target="_blank">https://shibboleth.atlassian.net/wiki/x/ZYEpPw</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><b>Tony Skalski (he/him/his)</b></div><div dir="ltr">System Administrator | IT</div><div dir="ltr">Office:<b> </b><a href="tel:(507)786-3227" target="_blank">507-786-3227</a><br></div><div dir="ltr">1510 St. Olaf Avenue Northfield, MN 55057</div><div dir="ltr"><a href="http://stolaf.edu" target="_blank">stolaf.edu</a></div><div><div><br><br></div></div></div></div></div></div></div></div></div></div>