Interfederation

[Scott Koranda <>]

Hi Steven,

I am finally attempting to have my SP load your metadata feed but
there is a problem.

The Shib 2.5.1 SP shows me this:

# /usr/sbin/shibd -t -c /etc/shibboleth/shibboleth2.xml.new
2013-04-08 21:37:24 ERROR OpenSAML.MetadataProvider.XML : metadata
instance failed manual validation checking: Extensions must have at
least one child element.
2013-04-08 21:37:24 WARN OpenSAML.MetadataProvider.XML : adjusted
reload interval to 600 seconds
2013-04-08 21:37:24 WARN OpenSAML.MetadataProvider.XML : trying backup
file, exception loading remote resource: Metadata instance failed
manual validation checking.
2013-04-08 21:37:24 ERROR XMLTooling.ParserPool : fatal error on line
0, column 0, message: unable to open primary document entity
'/var/cache/shibboleth/interfed-test-unsigned-.xml'
2013-04-08 21:37:24 ERROR OpenSAML.MetadataProvider.XML : error while
loading resource (/var/cache/shibboleth/interfed-test-unsigned-.xml):
XML error(s) during parsing, check log for specifics
2013-04-08 21:37:24 CRIT OpenSAML.Metadata.Chaining : failure
initializing MetadataProvider: XML error(s) during parsing, check log
for specifics

Unfortunately I do not immediately see how to turn up the debugging to
tell me where the
bad element is and I do not immediately see the bad element.

I will keep looking.

Thanks,

Scott K

On Thu, Feb 21, 2013 at 11:59 AM, Steven Carmody
<>
 wrote:
> Ian took a look at the file I was producing, and saw immediately that it is
> in fact an aggregate of the IC file and the UK export file. My bad. In my
> defense, it turns out the UK export file only contains 16 EntityDescriptor
> elements, so they're hard to find. My file currently contains ALL of IC plus
> the UK export; its available at:
>
> http://stc-test4.cis.brown.edu/mda-output/interfed-test-unsigned.xml
>
> Scott K -- can you take a look, and see if your proposed partners are in
> that file ? There are some Cardiff entries.
>
> One of the next questions, tho, is which IC entries do we want to include ?
> Stated another way, if IC made available an export file, and this mechanism
> used the IC and UK export files as input, what would IC include in its
> export file ?
>
> Ahhh.... policy already. ;-)