InCommon Operations Notifications

[Nick Roy <>]

Hello,

Here is your weekly legacy metadata endpoint retirement update.  We are
still seeing nearly 500 hosts, from nearly 100 DNS roots, trying to
download metadata from the legacy endpoint (and getting redirected to
the new endpoint).  For a list of hosts and additional information, see:
https://spaces.internet2.edu/x/5YVQBw.

The legacy redirect will be disabled this Wednesday, February 14.  At
that point, any downloads trying to hit the legacy endpoint (full
description available on the wiki page, above) will fail.  The validity
window on cached metadata on these hosts will expire on February 28, and
at that point, these systems will no longer be able to interoperate via
InCommon.

Please look at the list of hosts and remediate any you can, or pass word
along to those who can.

Best regards,

Nick Roy
Director of Technology and Strategy, InCommon / Internet2 Trust and
Identity Services

On 2/2/18 9:20 AM, Nick Roy wrote:
> Hello,
>
> Each Monday, for at least the next month, I will update the list of
> hosts and roots downloading metadata from the legacy endpoint, on the
> following page:
>
> https://spaces.internet2.edu/x/5YVQBw
>
> As a reminder, on February 14, InCommon Operations will disable
> redirects at the legacy endpoint (more details on the wiki page above).
> This will break SAML integration for any hosts still trying to use
> metadata from that endpoint.
>
> I have just updated the page.  Between Monday and today, we have fallen
> from 596 to 521 hosts still downloading from the legacy endpoint, and
> from 118 to 103 distinct DNS roots (roughly mapping to organizations).
>
> Please examine the updated list and if your org is on it, please look
> for hosts that are still trying to use the legacy endpoint.  If you use
> AWS, please look at the extensive list of amazonaws.com hosts and
> attempt to map any of these back to your org.  Of note, IUPUI still has
> a large number of what appear to be app servers still using the legacy
> endpoint.
>
> Best regards,
>
> Nick Roy
> Director of Technology and Strategy, InCommon
>
>