Unable to add Trust Relationship

By: David Hafley user 22 Nov 2016 at 11:46 a.m. CST

11 Responses
David Hafley gravatar
I'm attempting to setup my first Trust Relationship with Gluu, so this could be my own issue and not an issue with the actual software. But logging it here just in case others are experiencing. I've attempted to add a few different Service Providers to my Gluu server, both through File and URL metadata types. I'm unable to add TestShip Trust Relationship when following these docs: https://www.gluu.org/docs/integrate/test-shib2/#testshib2-testing-for-gluu-server Here is the exception I see in wrapper.log: ``` INFO | jvm 1 | 2016/11/22 17:33:26 | 2016-11-22 17:33:26,581 ERROR [org.xdi.util.io.HTTPFileDownloader] Failed to get resource http://www.testshib.org/metadata/testshib-providers.xml INFO | jvm 1 | 2016/11/22 17:33:26 | java.net.UnknownHostException: www.testshib.org INFO | jvm 1 | 2016/11/22 17:33:26 | at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:178) INFO | jvm 1 | 2016/11/22 17:33:26 | at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) INFO | jvm 1 | 2016/11/22 17:33:26 | at java.net.Socket.connect(Socket.java:579) INFO | jvm 1 | 2016/11/22 17:33:26 | at java.net.Socket.connect(Socket.java:528) INFO | jvm 1 | 2016/11/22 17:33:26 | at java.net.Socket.<init>(Socket.java:425) INFO | jvm 1 | 2016/11/22 17:33:26 | at java.net.Socket.<init>(Socket.java:280) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(Unknown Source) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.commons.httpclient.protocol.DefaultProtocolSocketFactory.createSocket(Unknown Source) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.commons.httpclient.HttpConnection.open(Unknown Source) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(Unknown Source) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(Unknown Source) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.commons.httpclient.HttpClient.executeMethod(Unknown Source) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.commons.httpclient.HttpClient.executeMethod(Unknown Source) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.xdi.util.io.HTTPFileDownloader.getResource(HTTPFileDownloader.java:53) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.gluu.oxtrust.ldap.service.Shibboleth2ConfService.saveSpMetadataFile(Shibboleth2ConfService.java:614) INFO | jvm 1 | 2016/11/22 17:33:26 | at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) INFO | jvm 1 | 2016/11/22 17:33:26 | at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) INFO | jvm 1 | 2016/11/22 17:33:26 | at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) INFO | jvm 1 | 2016/11/22 17:33:26 | at java.lang.reflect.Method.invoke(Method.java:606) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.util.Reflections.invoke(Reflections.java:22) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.intercept.RootInvocationContext.proceed(RootInvocationContext.java:32) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:56) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.transaction.RollbackInterceptor.aroundInvoke(RollbackInterceptor.java:28) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.core.BijectionInterceptor.aroundInvoke(BijectionInterceptor.java:79) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.core.MethodContextInterceptor.aroundInvoke(MethodContextInterceptor.java:44) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.intercept.RootInterceptor.invoke(RootInterceptor.java:107) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.intercept.JavaBeanInterceptor.interceptInvocation(JavaBeanInterceptor.java:196) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.intercept.JavaBeanInterceptor.invoke(JavaBeanInterceptor.java:114) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.gluu.oxtrust.ldap.service.Shibboleth2ConfService_$$_javassist_seam_4.saveSpMetadataFile(Shibboleth2ConfService_$$_javassist_seam_4.java) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.gluu.oxtrust.action.UpdateTrustRelationshipAction.saveSpMetaDataFileSourceTypeURI(UpdateTrustRelationshipAction.java:776) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.gluu.oxtrust.action.UpdateTrustRelationshipAction.save(UpdateTrustRelationshipAction.java:269) INFO | jvm 1 | 2016/11/22 17:33:26 | at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) INFO | jvm 1 | 2016/11/22 17:33:26 | at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) INFO | jvm 1 | 2016/11/22 17:33:26 | at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) INFO | jvm 1 | 2016/11/22 17:33:26 | at java.lang.reflect.Method.invoke(Method.java:606) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.util.Reflections.invoke(Reflections.java:22) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.intercept.RootInvocationContext.proceed(RootInvocationContext.java:32) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:56) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.transaction.RollbackInterceptor.aroundInvoke(RollbackInterceptor.java:28) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.core.BijectionInterceptor.aroundInvoke(BijectionInterceptor.java:79) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.core.MethodContextInterceptor.aroundInvoke(MethodContextInterceptor.java:44) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.security.SecurityInterceptor.aroundInvoke(SecurityInterceptor.java:163) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.intercept.SeamInvocationContext.proceed(SeamInvocationContext.java:68) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.intercept.RootInterceptor.invoke(RootInterceptor.java:107) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.intercept.JavaBeanInterceptor.interceptInvocation(JavaBeanInterceptor.java:196) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.intercept.JavaBeanInterceptor.invoke(JavaBeanInterceptor.java:114) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.gluu.oxtrust.action.UpdateTrustRelationshipAction_$$_javassist_seam_57.save(UpdateTrustRelationshipAction_$$_javassist_seam_57.java) INFO | jvm 1 | 2016/11/22 17:33:26 | at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) INFO | jvm 1 | 2016/11/22 17:33:26 | at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) INFO | jvm 1 | 2016/11/22 17:33:26 | at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) INFO | jvm 1 | 2016/11/22 17:33:26 | at java.lang.reflect.Method.invoke(Method.java:606) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.el.util.ReflectionUtil.invokeMethod(ReflectionUtil.java:335) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.el.util.ReflectionUtil.invokeMethod(ReflectionUtil.java:348) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.el.parser.AstPropertySuffix.invoke(AstPropertySuffix.java:58) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.el.parser.AstValue.invoke(AstValue.java:96) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:276) INFO | jvm 1 | 2016/11/22 17:33:26 | at com.sun.faces.facelets.el.TagMethodExpression.invoke(TagMethodExpression.java:105) INFO | jvm 1 | 2016/11/22 17:33:26 | at javax.faces.component.MethodBindingMethodExpressionAdapter.invoke(MethodBindingMethodExpressionAdapter.java:87) INFO | jvm 1 | 2016/11/22 17:33:26 | at com.sun.faces.application.ActionListenerImpl.processAction(ActionListenerImpl.java:101) INFO | jvm 1 | 2016/11/22 17:33:26 | at javax.faces.component.UICommand.broadcast(UICommand.java:315) INFO | jvm 1 | 2016/11/22 17:33:26 | at javax.faces.component.UIViewRoot.broadcastEvents(UIViewRoot.java:786) INFO | jvm 1 | 2016/11/22 17:33:26 | at javax.faces.component.UIViewRoot.processApplication(UIViewRoot.java:1251) INFO | jvm 1 | 2016/11/22 17:33:26 | at com.sun.faces.lifecycle.InvokeApplicationPhase.execute(InvokeApplicationPhase.java:81) INFO | jvm 1 | 2016/11/22 17:33:26 | at com.sun.faces.lifecycle.Phase.doPhase(Phase.java:101) INFO | jvm 1 | 2016/11/22 17:33:26 | at com.sun.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:118) INFO | jvm 1 | 2016/11/22 17:33:26 | at javax.faces.webapp.FacesServlet.service(FacesServlet.java:593) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:748) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:486) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:411) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:338) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.web.RewriteFilter.process(RewriteFilter.java:98) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.web.RewriteFilter.doFilter(RewriteFilter.java:57) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.web.LoggingFilter.doFilter(LoggingFilter.java:60) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.web.IdentityFilter.doFilter(IdentityFilter.java:40) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.web.MultipartFilter.doFilter(MultipartFilter.java:86) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.web.ExceptionFilter.doFilter(ExceptionFilter.java:64) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.web.RedirectFilter.doFilter(RedirectFilter.java:45) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:69) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.servlet.SeamFilter$FilterChainImpl.doFilter(SeamFilter.java:73) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.jboss.seam.servlet.SeamFilter.doFilter(SeamFilter.java:158) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:505) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:170) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:423) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.coyote.ajp.AjpProcessor.process(AjpProcessor.java:190) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:625) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:316) INFO | jvm 1 | 2016/11/22 17:33:26 | at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) INFO | jvm 1 | 2016/11/22 17:33:26 | at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) INFO | jvm 1 | 2016/11/22 17:33:26 | at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) INFO | jvm 1 | 2016/11/22 17:33:26 | at java.lang.Thread.run(Thread.java:745) ``` I've confirmed that I can wget the contents at the end of that url. ``` $ wget http://www.testshib.org/metadata/testshib-providers.xml --2016-11-22 12:34:14-- http://www.testshib.org/metadata/testshib-providers.xml Resolving www.testshib.org (www.testshib.org)... 128.118.137.147, 2610:8:0:81:b943:6d1:3851:49bf Connecting to www.testshib.org (www.testshib.org)|128.118.137.147|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 19630 (19K) [text/xml] Saving to: ‘testshib-providers.xml’ 100%[===================================================================================================================================================================================================================================>] 19,630 --.-K/s in 0.03s 2016-11-22 12:34:15 (578 KB/s) - ‘testshib-providers.xml’ saved [19630/19630] ```
U1404
closed

Answers

By Aliaksandr Samuseu staff 22 Nov 2016 at 11:51 a.m. CST

Copy
Aliaksandr Samuseu gravatar
Hi, David. This >INFO | jvm 1 | 2016/11/22 17:33:26 | java.net.UnknownHostException: www.testshib.org ..seems to me like some kind of name resolution issue inside of your Gluu container. Could you check what is in `/etc/resolv.conf` in there? At least `8.8.8.8` name server should be there. If you are limiting DNS traffic in your network, you may need to put your local DNS servers in that file.

By David Hafley user 22 Nov 2016 at 1:26 p.m. CST

Copy
David Hafley gravatar
This install on the base Ubuntu 14.04 ami at AWS. I'm able to resolve the hostname and nameservers: ``` /opt/gluu-server-2.4.4$ ls bin boot dev etc home install lib lib64 media mnt opt proc root run sbin srv sys tmp usr var dhafley@gluu:/opt/gluu-server-2.4.4$ dig NS http://www.testshib.org ; <<>> DiG 9.9.5-3ubuntu0.9-Ubuntu <<>> NS http://www.testshib.org ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42780 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;http://www.testshib.org. IN NS ;; AUTHORITY SECTION: testshib.org. 60 IN SOA dns2.internet2.edu. hostmaster.internet2.edu. 2016112201 120 120 604800 120 ;; Query time: 91 msec ;; SERVER: 10.42.0.2#53(10.42.0.2) ;; WHEN: Tue Nov 22 14:17:26 EST 2016 ;; MSG SIZE rcvd: 117 ``` I was able to fix the resolution problem by copying /etc/resolv.conf to  /opt/gluu-server-2.4.4/etc/resolv.conf Should I be worried about anything squashing my changes to that file? Why is there a separate resolv.conf file?

By Aliaksandr Samuseu staff 22 Nov 2016 at 1:31 p.m. CST

Copy
Aliaksandr Samuseu gravatar
> dhafley@gluu:/opt/gluu-server-2.4.4$ dig NS http://www.testshib.org The `$` sign here suggests you are running this command as a regular user, thus it cannot be run within container (you can get there only when you are a root user). I assume this is from your local machine, the one where you run browser you use to access web UI of your remote Gluu instance, is it correct? Or may be it's from the Gluu host, but still is run outside of container. >Why is there a separate resolv.conf file? Because container is an enclosed chroot-ed environment, separated from the main host's one, that's the architecture Gluu uses. It even has a separately set time zone and hostname in there.

By David Hafley user 22 Nov 2016 at 1:52 p.m. CST

Copy
David Hafley gravatar
Ah, yes! That would explain it. Going further down the documentation to setup TestShib2 (https://www.gluu.org/docs/integrate/test-shib2/#testshib2-testing-for-gluu-server), it looks like there is a broken link to https://support.gluu.org/view/application-integration/how-can-i-get-my-idps-metadata/216 Could you help with the broken link?

By William Lowe user 22 Nov 2016 at 1:58 p.m. CST

Copy
William Lowe gravatar
Hi David, Thanks for the heads up re: broken link. Here is the correct link: [#216](https://support.gluu.org/216/) I'm going to close this ticket out. Feel free to open a new ticket if you run into additional issues. Thanks, Will

By Aliaksandr Samuseu staff 22 Nov 2016 at 1:59 p.m. CST

Copy
Aliaksandr Samuseu gravatar
IdP's metadata is at `https://your.gluu.hostname/idp/shibboleth`

By Michael Schwartz Account Admin 22 Nov 2016 at 2:54 p.m. CST

Copy
Michael Schwartz gravatar
I don't think you can use `http` to get metadata. You must use `https`. Also, the CA that issues this cert must be in the JVM truststore if it's not a well-known CA.

By David Hafley user 22 Nov 2016 at 4:57 p.m. CST

Copy
David Hafley gravatar
Not having any luck making the connection work. I'm using the self signed cert that shipped with Gluu, could that be the problem? The gluu server is installed at AWS in a private network. Could that be the problem? I was under the impression that connection was handles via browser, so if I have access then no reason for testshib to have access to my gluu server directly. Error I see on testshib after uploading my metadata: 2016-11-22 17:54:14 WARN Shibboleth.SessionInitiator.SAML2 [8024]: unable to locate metadata for provider (https://my.gluu.hostname/idp/shibboleth) (I can also file a new ticket if you would prefer since this one is closed.)

By Aliaksandr Samuseu staff 22 Nov 2016 at 5:16 p.m. CST

Copy
Aliaksandr Samuseu gravatar
Not sure what is your current problem, David. It seemed before you resolved that issue with inability to create TR via web ui (after adding servers to resolv.conf inside of the container). If you have another issue now, you should follow William's suggestion and create a new ticket, describing current situation and your setup in details. Please also check [this article](https://support.gluu.org/docs/user-guide/how-to-ask/) and conduct some initial investigation, providing all your findings in ticket, to speed up the resolution process.

By Aliaksandr Samuseu staff 22 Nov 2016 at 5:20 p.m. CST

Copy
Aliaksandr Samuseu gravatar
Just one moment > 2016-11-22 17:54:14 WARN Shibboleth.SessionInitiator.SAML2 [8024]: unable to locate metadata for provider (https://my.gluu.hostname/idp/shibboleth) You just substituted your real hostname in `https://my.gluu.hostname/idp/shibboleth`, as you don't want to disclose it, correct? When I provided this as an example before, I used `my.gluu.hostname` as a placeholder, you need to use your own hostname instead, of course.

By David Hafley user 22 Nov 2016 at 8:07 p.m. CST

Copy
David Hafley gravatar
Will do. I'll open a new ticket. And yes, I edited to log message to match your previous example.

Post an answer