<div dir="ltr"><div class="gmail_default" style="font-family:georgia,serif">Hi again, Shib Users,</div><div class="gmail_default" style="font-family:georgia,serif"><br></div><div class="gmail_default" style="font-family:georgia,serif">Someone at InCommon showed me how to run the curl on the container.</div><div class="gmail_default" style=""><font face="monospace"># podman exec -it 270a7aac015c curl -k <a href="https://127.0.0.1/idp/status">https://127.0.0.1/idp/status</a></font><br></div><div class="gmail_default" style="font-family:georgia,serif"><br></div><div class="gmail_default" style="font-family:georgia,serif">Does this look correct? I was expecting HTML output.</div><div class="gmail_default" style="font-family:georgia,serif"><br></div><div class="gmail_default" style="font-family:georgia,serif">===================</div><div class="gmail_default" style=""><font face="monospace"># podman exec -it 54d824b363c0 curl -k <a href="https://127.0.0.1/idp/status">https://127.0.0.1/idp/status</a><br>### Operating Environment Information<br>operating_system: Linux<br>operating_system_version: 5.15.0-103.114.4.el9uek.x86_64<br>operating_system_architecture: amd64<br>jdk_version: 11.0.19<br>available_cores: 4<br>used_memory: 149 MB<br>maximum_memory: 3000 MB<br><br>### Identity Provider Information<br>idp_version: 4.3.1<br>start_time: 2023-08-15T15:56:03.634Z<br>current_time: 2023-08-15T15:58:26.888727Z<br>uptime: PT2M23.254S<br><br>enabled modules: <br>    idp.authn.Password (Password Authentication)<br>  idp.admin.Hello (Hello World)<br><br>installed plugins: <br><br>service: shibboleth.LoggingService<br>last successful reload attempt: 2023-08-15T15:55:58.538299Z<br>last reload attempt: 2023-08-15T15:55:58.538299Z<br><br>service: shibboleth.AttributeFilterService<br>last successful reload attempt: 2023-08-15T15:56:01.681255Z<br>last reload attempt: 2023-08-15T15:56:01.681255Z<br><br>service: shibboleth.AttributeResolverService<br>last reload attempt: 2023-08-15T15:56:01.787520Z<br><br>    No Data Connector has ever failed<br><br>service: shibboleth.AttributeRegistryService<br>last successful reload attempt: 2023-08-15T15:56:00.817894Z<br>last reload attempt: 2023-08-15T15:56:00.817894Z<br><br>service: shibboleth.NameIdentifierGenerationService<br>last successful reload attempt: 2023-08-15T15:56:02.174581Z<br>last reload attempt: 2023-08-15T15:56:02.174581Z<br><br>service: shibboleth.RelyingPartyResolverService<br>last successful reload attempt: 2023-08-15T15:56:02.259009Z<br>last reload attempt: 2023-08-15T15:56:02.259009Z<br><br>service: shibboleth.MetadataResolverService<br>last successful reload attempt: 2023-08-15T15:56:01.113745Z<br>last reload attempt: 2023-08-15T15:56:01.113745Z<br><br>      No Metadata Resolver has ever attempted a reload<br><br>service: shibboleth.ReloadableAccessControlService<br>last successful reload attempt: 2023-08-15T15:56:02.727162Z<br>last reload attempt: 2023-08-15T15:56:02.727162Z<br><br>service: shibboleth.ReloadableCASServiceRegistry<br>last successful reload attempt: 2023-08-15T15:56:02.800181Z<br>last reload attempt: 2023-08-15T15:56:02.800181Z<br><br>service: shibboleth.ManagedBeanService<br>last successful reload attempt: 2023-08-15T15:56:02.825529Z<br>last reload attempt: 2023-08-15T15:56:02.825529Z<br><br>#</font></div><div class="gmail_default" style=""><font face="monospace">=======================</font></div><div class="gmail_default" style=""><br></div><div class="gmail_default" style=""><font face="georgia, serif">I really appreciate all the help that I've received!</font></div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><p style="background-image:initial;background-position:initial;background-repeat:initial"><b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102);background-image:initial;background-position:initial;background-repeat:initial">David Dellinger </span></b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102);background-image:initial;background-position:initial;background-repeat:initial">| Sr. Systems Administrator</span><span style="font-family:Arial,sans-serif;color:rgb(89,89,89);background-image:initial;background-position:initial;background-repeat:initial"><br></span><b><span style="font-family:Arial,sans-serif;color:rgb(255,153,0)">Information Technology Services<br></span></b><span style="font-family:Arial,sans-serif;color:rgb(89,89,89)"><a href="mailto:ddellinger@oxy.edu" target="_blank">ddellinger@oxy.edu</a> </span><span style="font-family:Arial,sans-serif;color:rgb(102,102,102)">| T 323-259-1315</span><b><span style="font-family:Arial,sans-serif;color:rgb(255,153,0)"></span></b></p><p style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif"></p><p style="background-image:initial;background-position:initial;background-repeat:initial"><b><span style="font-family:Arial,sans-serif;color:rgb(255,153,0);background-image:initial;background-position:initial;background-repeat:initial">OXY</span></b><b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102);background-image:initial;background-position:initial;background-repeat:initial"> </span></b><b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102);background-image:initial;background-position:initial;background-repeat:initial">Occidental College<br></span></b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102)">Mary Norton Clapp Library | 1600 Campus Road  |  Los Angeles, California 90041<br></span><span style="font-family:Arial,sans-serif"><a href="http://oxy.edu/its" target="_blank">oxy.edu/its</a><span> </span></span></p></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Aug 14, 2023 at 10:54 AM David Dellinger <<a href="mailto:ddellinger@oxy.edu">ddellinger@oxy.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:georgia,serif">Hi David,</div><div class="gmail_default" style="font-family:georgia,serif"><br></div><div class="gmail_default" style="font-family:georgia,serif">Thanks for your reply.</div><div class="gmail_default" style="font-family:georgia,serif">Yes, it's published on port 443. Good thinking to check though!</div><div class="gmail_default" style="font-family:georgia,serif"><br></div><div class="gmail_default"><font face="monospace"># podman port -l<br>443/tcp -> <a href="http://0.0.0.0:443" target="_blank">0.0.0.0:443</a><br></font></div><div class="gmail_default" style="font-family:georgia,serif"><br></div><div><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><p style="background-image:initial;background-position:initial;background-repeat:initial"><b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102);background-image:initial;background-position:initial;background-repeat:initial">David Dellinger </span></b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102);background-image:initial;background-position:initial;background-repeat:initial">| Sr. Systems Administrator</span><span style="font-family:Arial,sans-serif;color:rgb(89,89,89);background-image:initial;background-position:initial;background-repeat:initial"><br></span><b><span style="font-family:Arial,sans-serif;color:rgb(255,153,0)">Information Technology Services<br></span></b><span style="font-family:Arial,sans-serif;color:rgb(89,89,89)"><a href="mailto:ddellinger@oxy.edu" target="_blank">ddellinger@oxy.edu</a> </span><span style="font-family:Arial,sans-serif;color:rgb(102,102,102)">| T 323-259-1315</span><b><span style="font-family:Arial,sans-serif;color:rgb(255,153,0)"></span></b></p><p style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif"></p><p style="background-image:initial;background-position:initial;background-repeat:initial"><b><span style="font-family:Arial,sans-serif;color:rgb(255,153,0);background-image:initial;background-position:initial;background-repeat:initial">OXY</span></b><b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102);background-image:initial;background-position:initial;background-repeat:initial"> </span></b><b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102);background-image:initial;background-position:initial;background-repeat:initial">Occidental College<br></span></b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102)">Mary Norton Clapp Library | 1600 Campus Road  |  Los Angeles, California 90041<br></span><span style="font-family:Arial,sans-serif"><a href="http://oxy.edu/its" target="_blank">oxy.edu/its</a><span> </span></span></p></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Aug 14, 2023 at 10:26 AM IAM David Bantz <<a href="mailto:dabantz@alaska.edu" target="_blank">dabantz@alaska.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div dir="ltr">
    <font face="ui-sans-serif, sans-serif" style="font-size:13px">Is your IdP servlet perhaps on a different port (8443 is common)?</font></div><div dir="ltr"><font face="ui-sans-serif, sans-serif" style="font-size:13px"><br></font></div><div dir="ltr"><font face="ui-sans-serif, sans-serif">If so, then something like <span style="font-size:13px;color:rgb(26,26,26)">curl -s -k '</span><a href="https://localhost/idp/status" style="font-size:13px" target="_blank"><span style="font-kerning:none;color:rgb(16,60,192)">https://localhost:8443/idp/status</span></a><font color="#1a1a1a"><span>’</span> </font></font></div><div dir="ltr"><font face="ui-sans-serif, sans-serif" style="font-size:13px"><span style="color:rgb(26,26,26)"><br></span></font></div><div dir="ltr"><font face="ui-sans-serif, sans-serif"><font color="#1a1a1a">Haven<span>’</span>t followed this thread carefully, so apologies if this is not helpful.</font></font></div><div dir="ltr"><font face="ui-sans-serif, sans-serif"><b><font color="#1a1a1a"><br></font></b></font></div><div dir="ltr"><font face="ui-sans-serif, sans-serif" style="font-size:13px"><span style="color:rgb(26,26,26)">David St Pierre Bantz</span></font></div>
<br>
<div class="gmail_quote">
    <div dir="ltr" class="gmail_attr">On Aug 14, 2023 at 08:55:44, David Dellinger via users <<a href="mailto:users@shibboleth.net" target="_blank">users@shibboleth.net</a>> wrote:<br></div>
    <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" type="cite">
        <div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:georgia,serif">Agreed. Thanks!</div><div class="gmail_default" style="font-family:georgia,serif">I viewed the access-control.xml file from the running container and see that it is indeed allowing localhost.<br><br>        <entry key="AccessByIPAddress"><br>            <bean id="AccessByIPAddress" parent="shibboleth.IPRangeAccessControl"<br>                p:allowedRanges="#{ {'<a href="http://127.0.0.1/32" target="_blank">127.0.0.1/32</a>', '::1/128'} }" /><br>        </entry><br></div><div class="gmail_default" style="font-family:georgia,serif"><br></div><div class="gmail_default" style="font-family:georgia,serif">I don't want to allow more hosts than necessary. I do want to check the installation before moving forward.</div><div class="gmail_default"><span style="font-family:georgia,serif">It might be what Paul mentioned earlier in the thread about NAT. The status page might be viewable only from within the container's localhost. I'm seeing a new </span><font face="monospace">podman0</font><font face="georgia, serif"> interface, but I get a 404 from a tomcat instance when I hit that interface. It's at least not an access denied message. I don't have tomcat running at the VM level, so I think I'm hitting tomcat inside the container.</font></div><div><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><p style="background-image:initial;background-position:initial;background-repeat:initial"><b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102);background-image:initial;background-position:initial;background-repeat:initial">David Dellinger </span></b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102);background-image:initial;background-position:initial;background-repeat:initial">| Sr. Systems Administrator</span><span style="font-family:Arial,sans-serif;color:rgb(89,89,89);background-image:initial;background-position:initial;background-repeat:initial"><br></span><b><span style="font-family:Arial,sans-serif;color:rgb(255,153,0)">Information Technology Services<br></span></b><span style="font-family:Arial,sans-serif;color:rgb(89,89,89)"><a href="mailto:ddellinger@oxy.edu" target="_blank">ddellinger@oxy.edu</a> </span><span style="font-family:Arial,sans-serif;color:rgb(102,102,102)">| T 323-259-1315</span><b><span style="font-family:Arial,sans-serif;color:rgb(255,153,0)"></span></b></p><p style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif"></p><p style="background-image:initial;background-position:initial;background-repeat:initial"><b><span style="font-family:Arial,sans-serif;color:rgb(255,153,0);background-image:initial;background-position:initial;background-repeat:initial">OXY</span></b><b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102);background-image:initial;background-position:initial;background-repeat:initial"> </span></b><b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102);background-image:initial;background-position:initial;background-repeat:initial">Occidental College<br></span></b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102)">Mary Norton Clapp Library | 1600 Campus Road  |  Los Angeles, California 90041<br></span><span style="font-family:Arial,sans-serif"><a href="http://oxy.edu/its" target="_blank">oxy.edu/its</a><span> </span></span></p></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
    </blockquote>
</div></div>
</blockquote></div>
</blockquote></div>