<!DOCTYPE html><html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<p>Hello all,</p>
<p><br>
</p>
<p>Need help with shibd service not starting (results of <u>journalctl
-xe below)</u>. </p>
<p>System details:<br>
</p>
<ul>
<li>CentOS7, latest updates </li>
<li>shibboleth SP 3.4.1</li>
<li>SELinux in permissive mode.</li>
</ul>
<p>Sock file is not created and everything fails after that.</p>
<p>I went through shibd.log but I cannot find any reference to the
cause of the error (Contents of shibd.logger below).<br>
</p>
<p>I've also checked the following folders and confirmed they are
owned by shibd:</p>
<ul>
<li><span style="font-family:monospace"><span style="color:#000000;background-color:#ffffff;">/run/shibboleth </span></span></li>
<li><span style="font-family:monospace">/var/log/shibboleth </span></li>
<li><span style="font-family:monospace">/var/cache/shibboleth</span></li>
</ul>
<p><span style="font-family:monospace"><br>
</span></p>
<p>Could someone point me to the right direction?</p>
<p><br>
</p>
<p>-- Evelthon<br>
</p>
<p><br>
</p>
<p><u>Results of<i> journalctl -xe</i> after a failed <i>systemctl
start shibd.service</i> attempt</u><br>
</p>
<p><span style="font-family:monospace"><span style="color:#000000;background-color:#ffffff;">Nov 01
13:36:12 domain.com shibboleth[11407]: </span><span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [11407] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:12 domain.com shibboleth[11407]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [11407] shib_check_user [default]: cannot
connect socket (17)...</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:12 domain.com shibboleth[11407]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">CRIT
Shibboleth.Listener [11407] shib_check_user [default]: socket
server unavailable, failing</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:12 domain.com shibboleth[11407]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Apache [11407] shib_check_user: Cannot connect to
shibd process, a site administrator should be notified that
this web server has malfunctioned.</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:12 domain.com shibboleth[11160]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [11160] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:12 domain.com shibboleth[11160]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [11160] shib_check_user [default]: cannot
connect socket (17)...retrying</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:13 domain.com shibboleth[11794]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [11794] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:13 domain.com shibboleth[11794]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [11794] shib_check_user [default]: cannot
connect socket (17)...</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:13 domain.com shibboleth[11794]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">CRIT
Shibboleth.Listener [11794] shib_check_user [default]: socket
server unavailable, failing</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:13 domain.com shibboleth[11794]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Apache [11794] shib_check_user: Cannot connect to
shibd process, a site administrator should be notified that
this web server has malfunctioned.</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:13 domain.com shibboleth[9772]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [9772] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:13 domain.com shibboleth[9772]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [9772] shib_check_user [default]: cannot
connect socket (17)...retrying</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:13 domain.com shibboleth[11982]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [11982] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:13 domain.com shibboleth[11982]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [11982] shib_check_user [default]: cannot
connect socket (17)...</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:13 domain.com shibboleth[11982]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">CRIT
Shibboleth.Listener [11982] shib_check_user [default]: socket
server unavailable, failing</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:13 domain.com shibboleth[11982]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Apache [11982] shib_check_user: Cannot connect to
shibd process, a site administrator should be notified that
this web server has malfunctioned.</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:13 domain.com shibboleth[12238]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [12238] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:13 domain.com shibboleth[12238]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [12238] shib_check_user [default]: cannot
connect socket (17)...retrying</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:13 domain.com shibboleth[11157]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [11157] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:13 domain.com shibboleth[11157]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [11157] shib_check_user [default]: cannot
connect socket (17)...retrying</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:14 domain.com shibboleth[12078]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [12078] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:14 domain.com shibboleth[12078]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [12078] shib_check_user [default]: cannot
connect socket (17)...</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:14 domain.com shibboleth[12078]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">CRIT
Shibboleth.Listener [12078] shib_check_user [default]: socket
server unavailable, failing</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:14 domain.com shibboleth[12078]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Apache [12078] shib_check_user: Cannot connect to
shibd process, a site administrator should be notified that
this web server has malfunctioned.</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:14 domain.com shibboleth[11160]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [11160] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:14 domain.com shibboleth[11160]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [11160] shib_check_user [default]: cannot
connect socket (17)...retrying</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:15 domain.com shibboleth[11715]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [11715] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:15 domain.com shibboleth[11715]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [11715] shib_check_user [default]: cannot
connect socket (17)...retrying</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:15 domain.com shibboleth[11614]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [11614] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:15 domain.com shibboleth[11614]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [11614] shib_check_user [default]: cannot
connect socket (17)...</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:15 domain.com shibboleth[11614]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">CRIT
Shibboleth.Listener [11614] shib_check_user [default]: socket
server unavailable, failing</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:15 domain.com shibboleth[11614]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Apache [11614] shib_check_user: Cannot connect to
shibd process, a site administrator should be notified that
this web server has malfunctioned.</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:15 domain.com shibboleth[12238]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [12238] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:15 domain.com shibboleth[12238]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [12238] shib_check_user [default]: cannot
connect socket (17)...retrying</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:15 domain.com shibboleth[12229]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [12229] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:15 domain.com shibboleth[12229]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [12229] shib_check_user [default]: cannot
connect socket (17)...retrying</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:15 domain.com shibboleth[12232]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [12232] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:15 domain.com shibboleth[12232]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [12232] shib_check_user [default]: cannot
connect socket (17)...retrying</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:17 domain.com shibboleth[9772]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [9772] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:17 domain.com shibboleth[9772]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [9772] shib_check_user [default]: cannot
connect socket (17)...</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:17 domain.com shibboleth[9772]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">CRIT
Shibboleth.Listener [9772] shib_check_user [default]: socket
server unavailable, failing</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:17 domain.com shibboleth[9772]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Apache [9772] shib_check_user: Cannot connect to
shibd process, a site administrator should be notified that
this web server has malfunctioned.</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:17 domain.com shibboleth[11715]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [11715] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:17 domain.com shibboleth[11715]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [11715] shib_check_user [default]: cannot
connect socket (17)...retrying</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:17 domain.com shibboleth[12229]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [12229] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:17 domain.com shibboleth[12229]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [12229] shib_check_user [default]: cannot
connect socket (17)...retrying</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:17 domain.com shibboleth[12232]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [12232] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:17 domain.com shibboleth[12232]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [12232] shib_check_user [default]: cannot
connect socket (17)...retrying</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:17 domain.com shibboleth[11157]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [11157] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:17 domain.com shibboleth[11157]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [11157] shib_check_user [default]: cannot
connect socket (17)...</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:17 domain.com shibboleth[11157]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">CRIT
Shibboleth.Listener [11157] shib_check_user [default]: socket
server unavailable, failing</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:17 domain.com shibboleth[11157]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Apache [11157] shib_check_user: Cannot connect to
shibd process, a site administrator should be notified that
this web server has malfunctioned.</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:18 domain.com shibboleth[12233]: <span style="font-weight:bold;color:#ff5454;background-color:#ffffff;">ERROR
Shibboleth.Listener [12233] shib_check_user [default]: failed
socket call (connect), result (2): No such file or directory</span><span style="color:#000000;background-color:#ffffff;"> </span><br>
Nov 01 13:36:18 domain.com shibboleth[12233]: <span style="font-weight:bold;color:#000000;background-color:#ffffff;">WARN
Shibboleth.Listener [12233] shib_check_user [default]: cannot
connect socket (17)...retrying</span></span></p>
<p><u><br>
</u></p>
<p><u>Contents of <i>shibd.logger</i></u></p>
<p><span style="font-family:monospace"></span><span style="font-family:monospace"><span style="color:#000000;background-color:#ffffff;"># set overall
behavior
</span><br>
log4j.rootCategory=DEBUG, shibd_log, warn_log
<br>
<br>
<br>
# fairly verbose for DEBUG, so generally leave at INFO
<br>
log4j.category.XMLTooling.XMLObject=INFO
<br>
log4j.category.XMLTooling.XMLObjectBuilder=INFO
<br>
log4j.category.XMLTooling.KeyInfoResolver=INFO
<br>
log4j.category.Shibboleth.IPRange=INFO
<br>
log4j.category.Shibboleth.PropertySet=INFO
<br>
<br>
# raise for low-level tracing of SOAP client HTTP/SSL behavior
<br>
log4j.category.XMLTooling.libcurl=INFO
<br>
<br>
# useful categories to tune independently:
<br>
#<br>
# tracing of SAML messages and security policies<br>
log4j.category.OpenSAML.MessageDecoder=DEBUG<br>
log4j.category.OpenSAML.MessageEncoder=DEBUG<br>
log4j.category.OpenSAML.SecurityPolicyRule=DEBUG<br>
log4j.category.XMLTooling.SOAPClient=DEBUG<br>
# interprocess message remoting<br>
log4j.category.Shibboleth.Listener=DEBUG<br>
# mapping of requests to applicationId<br>
log4j.category.Shibboleth.RequestMapper=DEBUG<br>
# high level session cache operations<br>
#log4j.category.Shibboleth.SessionCache=DEBUG<br>
# persistent storage and caching<br>
log4j.category.XMLTooling.StorageService=DEBUG<br>
<br>
# logs XML being signed or verified if set to DEBUG<br>
log4j.category.XMLTooling.Signature.Debugger=INFO, sig_log<br>
log4j.additivity.XMLTooling.Signature.Debugger=false<br>
log4j.ownAppenders.XMLTooling.Signature.Debugger=true<br>
<br>
# the tran log blocks the "default" appender(s) at runtime<br>
# Level should be left at INFO for this category<br>
log4j.category.Shibboleth-TRANSACTION=INFO, tran_log<br>
log4j.additivity.Shibboleth-TRANSACTION=false<br>
log4j.ownAppenders.Shibboleth-TRANSACTION=true<br>
<br>
# uncomment to suppress particular event types<br>
#log4j.category.Shibboleth-TRANSACTION.AuthnRequest=WARN<br>
#log4j.category.Shibboleth-TRANSACTION.Login=WARN<br>
#log4j.category.Shibboleth-TRANSACTION.Logout=WARN<br>
<br>
# define the appenders<br>
<br>
log4j.appender.shibd_log=org.apache.log4j.RollingFileAppender<br>
log4j.appender.shibd_log.fileName=/var/log/shibboleth/shibd.log<br>
log4j.appender.shibd_log.maxFileSize=1000000<br>
log4j.appender.shibd_log.maxBackupIndex=10<br>
log4j.appender.shibd_log.layout=org.apache.log4j.PatternLayout<br>
log4j.appender.shibd_log.layout.ConversionPattern=%d{%Y-%m-%d
%H:%M:%S} %p %c %x: %m%n<br>
<br>
log4j.appender.warn_log=org.apache.log4j.RollingFileAppender<br>
log4j.appender.warn_log.fileName=/var/log/shibboleth/shibd_warn.log<br>
log4j.appender.warn_log.maxFileSize=1000000<br>
log4j.appender.warn_log.maxBackupIndex=10<br>
log4j.appender.warn_log.layout=org.apache.log4j.PatternLayout<br>
log4j.appender.warn_log.layout.ConversionPattern=%d{%Y-%m-%d
%H:%M:%S} %p %c %x: %m%n<br>
log4j.appender.warn_log.threshold=WARN<br>
<br>
log4j.appender.tran_log=org.apache.log4j.RollingFileAppender<br>
log4j.appender.tran_log.fileName=/var/log/shibboleth/transaction.log<br>
log4j.appender.tran_log.maxFileSize=1000000<br>
log4j.appender.tran_log.maxBackupIndex=20<br>
log4j.appender.tran_log.layout=org.apache.log4j.PatternLayout<br>
log4j.appender.tran_log.layout.ConversionPattern=%d{%Y-%m-%d
%H:%M:%S}|%c|%m%n<br>
<br>
log4j.appender.sig_log=org.apache.log4j.FileAppender<br>
log4j.appender.sig_log.fileName=/var/log/shibboleth/signature.log<br>
log4j.appender.sig_log.layout=org.apache.log4j.PatternLayout<br>
log4j.appender.sig_log.layout.ConversionPattern=%m<br>
<br>
<br>
</span></p>
</body>
</html>