InCommon metadata support

["Nguyen, Son T" <>]

Tom, thanks for quick response. Please see below

<metadata:MetadataProvider id="ICMD" 
xsi:type="metadata:FileBackedHTTPMetadataProvider"
                          
metadataURL="http://md.incommon.org/InCommon/InCommon-metadata.xml";
                          
backingFile="/apps/shibb-IdP/metadata/InCommon-metadata.xml"
                          maxRefreshDelay="PT1H"
                          requestTimeout="PT50S">
                                    
        <metadata:MetadataFilter xsi:type="metadata:ChainingFilter">
                <!-- Temp remove until problem resolved
                <metadata:MetadataFilter 
xsi:type="metadata:RequiredValidUntil" maxValidityInterval="P14D" />
                --> 
                <metadata:MetadataFilter 
xsi:type="metadata:SignatureValidation"
                                trustEngineRef="ICTrust" 
requireSignedMetadata="true" />
                <metadata:MetadataFilter 
xsi:type="metadata:EntityRoleWhiteList">
                                
<metadata:RetainedRole>samlmd:SPSSODescriptor</metadata:RetainedRole>
                </metadata:MetadataFilter>
        </metadata:MetadataFilter>
</metadata:MetadataProvider>

Best regards,

Sonny Nguyen
Enterprise Application Services
713-743-1779


University of Houston
You Are The Pride
A Carnegie-designated Tier One public research university


-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Tom Scavo
Sent: Thursday, June 19, 2014 2:23 PM
To: Nguyen, Son T
Cc: Tom Scavo; 
;
 

Subject: Re: [Metadata-Support] Error in retrieving the InCommon metadata

On Thu, Jun 19, 2014 at 2:27 PM, Nguyen, Son T 
<>
 wrote:
> Tom, I have subscribed.

Thanks.

> Yes, it's repeatable. We got this error every hour when Shib tried to 
> refresh the metadata. Our InCommon-metadata.xml file hasn't been 
> automatically updated.
>
> Curl'ing http://md.incommon.org/InCommon/InCommon-metadata.xml returned 
> data without problem.

This sounds like a Shibboleth problem, not a federation issue, but before I 
send you over to the shib users mailing list, can you post your 
<MetadataProvider> element here so we can take a look?

Thanks,

Tom