InCommon Operations Notifications

[Tom Scavo <>]

Hi Kathy,

> I am on of the InCommon representatives for Shibboleth at Clemson.
> The SP shibsp.clemson.edu is a test node in our environment and
> unfortunately showed up on your list due to its being down. It has
> is now running.

Yes, I can confirm that:

$ ./probe_saml_entities.sh -t 6 -m 8 -F 'Clemson University'
Beg testing entityID https://hbjapache.clemson.edu/shibboleth
Beg testing URL http://hbjapache.clemson.edu
curl: (28) connect() timed out!
response:000;dns:0.003;tcp:0.000;ssl:0.000;total:6.007
End testing URL http://hbjapache.clemson.edu
End testing entityID https://hbjapache.clemson.edu/shibboleth
Beg testing entityID https://shibsp.clemson.edu/shibboleth
Beg testing URL http://shibsp.clemson.edu
response:200;dns:0.001;tcp:0.049;ssl:0.000;total:0.167
End testing URL http://shibsp.clemson.edu
End testing entityID https://shibsp.clemson.edu/shibboleth
Beg testing entityID https://wiki.clemson.edu/shibboleth
Beg testing URL http://wiki.clemson.edu
response:403;dns:0.001;tcp:0.097;ssl:0.000;total:0.147
End testing URL http://wiki.clemson.edu
End testing entityID https://wiki.clemson.edu/shibboleth
Beg testing entityID https://www.intelligentriver.org/shibboleth
Beg testing URL http://www.intelligentriver.org
response:200;dns:0.001;tcp:0.045;ssl:0.000;total:0.113
End testing URL http://www.intelligentriver.org
Beg testing URL https://www.intelligentriver.org
response:302;dns:0.001;tcp:0.048;ssl:0.297;total:0.358
End testing URL https://www.intelligentriver.org
End testing entityID https://www.intelligentriver.org/shibboleth
Beg testing entityID https://www.marinegenomics.org/sp
Beg testing URL https://www.marinegenomics.org
curl: (28) connect() timed out!
response:000;dns:0.001;tcp:0.000;ssl:0.000;total:6.005
End testing URL https://www.marinegenomics.org
End testing entityID https://www.marinegenomics.org/sp
Beg testing entityID urn:mace:incommon:clemson.edu
Beg testing URL https://idp.clemson.edu
response:200;dns:0.001;tcp:0.047;ssl:0.280;total:0.381
End testing URL https://idp.clemson.edu
End testing entityID urn:mace:incommon:clemson.edu
Beg testing entityID https://idp.raidp.org/idp/shibboleth
Beg testing URL https://idp.raidp.org
response:403;dns:0.001;tcp:0.047;ssl:0.186;total:0.236
End testing URL https://idp.raidp.org
End testing entityID https://idp.raidp.org/idp/shibboleth

> Please move it from your list.

The list in the wiki is a point-in-time snapshot. I will put the script on 
cron and run it daily.

Thanks,
Tom

> On Jun 26, 2012, at 8:56 AM, Tom Scavo 
> <>
>  wrote:
> 
> > This is a followup to the previous message sent on Wed, Jun 20
> > (below). Thanks to everyone who took the time to provide feedback.
> > As a result, we made a number of modifications to the tool used to
> > probe browser-facing endpoints in metadata.
> > 
> > Since we are using curl, the custom codes used previously have been
> > replaced with curl exit codes. The first field of each line in the
> > liveness log file is a curl exit code. These exit codes are
> > described in the wiki. [1]
> > 
> > Two lists of entities are provided: dead entities and crippled
> > entities. [1] An entity is dead if all of its endpoint probes
> > fail. An entity is crippled if at least one of its endpoint probes
> > fails. Timeouts are not considered when categorizing entities as
> > "dead" or "crippled," which is done to exclude firewalled SPs from
> > both of the lists (at the risk of missing some dead or crippled
> > SPs).
> > 
> > There are 51 dead entities (4 IdPs) and 16 crippled entities in
> > metadata. If your IdP is dead, repair it immediately. If one of
> > your SPs is dead or crippled, please investigate ASAP. Visit our
> > wiki for more information.
> > 
> > [1] https://spaces.internet2.edu/x/BorYAQ
> > 
> > ----- Original Message -----
> >> Over the last few days, InCommon Operations has actively probed
> >> browser-facing endpoints in metadata for liveness. This probe
> >> revealed 183 dead entities in metadata. Complete results of the
> >> probe are available in the wiki [1]. Please check to see if you
> >> have
> >> any dead entities in metadata. These need to be repaired or
> >> removed
> >> as soon as possible.
> >> 
> >> [1] https://spaces.internet2.edu/x/BorYAQ
> > 
> > ------------------------
> > InC-Ops-Notifications
> > 
> > This is a notification-only email list with an open subscription
> > policy. Anyone may join this list. For any questions regarding
> > InCommon Operations, please email 
> > .
> >  For any
> > discussions with the community regarding issues related to
> > federation, please post to 
> > 
> > 
> > If you are an official designated InCommon Site Administrator for
> > your organization, you MUST remain on this email list. The reason
> > is that this list is the primary means of notifying you regarding
> > timely information that could potentially affect the way your
> > organization's systems operate in a federated context.
> > 
> > Unsubscribing: To unsubscribe from this email list, send email to
> > 
> >  with the subject: unsub inc-ops-notifications
> > 
> > Subscribing: To subscribe to this email list, send email to
> > 
> >  with the subject: sub inc-ops-notifications
> > 
> > Alternatively, subscriptions can be managed at
> > https://lists.incommon.org/sympa/info/inc-ops-notifications
>