By: Niclas Lindqvist user 25 May 2020 at 8:05 a.m. CDT

5 Responses
Niclas Lindqvist gravatar
# Expected behaviour: When going to SAML > Trust Relationships I get to configure my trust relationship # Actual Behaviour: I get error "Oops" The trust seems OK and is working, but we can't seem to change it: SWAMID 2.0 Email, Organization, First Name FEDERATION Success Active SWAMID 2.0 The sp xml is 60Mb. # Minimized example We imported a sp metadata file that is working as intended on standalone shibboleth I can see it under shibboleth-idp/metadata/ I can't see this generating an error in oxtrust.log or any other jetty log? I have oxtrust logging level to DEBUG. Thanks in advance.

By Michael Schwartz Account Admin 25 May 2020 at 12:46 p.m. CDT

Michael Schwartz gravatar
Alex, is this a known issue fixed by the latest patch?

By Aliaksandr Samuseu staff 25 May 2020 at 2:02 p.m. CDT

Aliaksandr Samuseu gravatar
Hi, Niclas & Michael. >Alex, is this a known issue fixed by the latest patch? Haven't heard of this one. We have an issue when SAML TR is shown as failed validation, while it's working (and it's fixed in upcoming 4.1.1 and 4.2 packages), but you still should be able to view and edit the TR. Instead, I suspect this is the cause of the issue Niclas is facing: >The sp xml is 60Mb That's of a size of an InCommon metadata (may be it IS InCommon, Niclas?), so I would assume similar reccomendations will apply: oxTrust's and IDP's JVMs' memory allocations need to be increased. Niclas, please edit next files: 1. `/etc/default/identity` : in `JAVA_OPTIONS` line, make sure "-Xms" and "-Xmx" options are set to at least `1024m` and `2048m`, correspondingly 2. `/etc/default/idp` : same as above After that restart "identity" service, then "idp" service, wait for 5 minutes, and test again. If error persists, consider increasing heap allocations for "identity" JVM even more, and repeat the test again.

By Aliaksandr Samuseu staff 25 May 2020 at 2:12 p.m. CDT

Aliaksandr Samuseu gravatar
If it won't help, please share the metadata with us so we could try to reproduce your issue internally.

By Niclas Lindqvist user 26 May 2020 at 7:39 a.m. CDT

Niclas Lindqvist gravatar
That did it, thanks a bunch Alex!

By Aliaksandr Samuseu staff 26 May 2020 at 11:06 a.m. CDT

Aliaksandr Samuseu gravatar
You're weclome, closing the ticket then.