InCommon metadata support

[Tom Scavo <>]

Sonny, you're still not subscribed to the mailing list, apparently.

On Thu, Jun 19, 2014 at 4:57 PM, Nguyen, Son T 
<>
 wrote:
>
> <metadata:MetadataProvider id="ICMD" 
> xsi:type="metadata:FileBackedHTTPMetadataProvider"
>                           
> metadataURL="http://md.incommon.org/InCommon/InCommon-metadata.xml";
>                           
> backingFile="/apps/shibb-IdP/metadata/InCommon-metadata.xml"
>                           maxRefreshDelay="PT1H"
>                           requestTimeout="PT50S">
>
>         <metadata:MetadataFilter xsi:type="metadata:ChainingFilter">
>                 <!-- Temp remove until problem resolved
>                 <metadata:MetadataFilter 
> xsi:type="metadata:RequiredValidUntil" maxValidityInterval="P14D" />
>                 -->
>                 <metadata:MetadataFilter 
> xsi:type="metadata:SignatureValidation"
>                                 trustEngineRef="ICTrust" 
> requireSignedMetadata="true" />
>                 <metadata:MetadataFilter 
> xsi:type="metadata:EntityRoleWhiteList">
>                                 
> <metadata:RetainedRole>samlmd:SPSSODescriptor</metadata:RetainedRole>
>                 </metadata:MetadataFilter>
>         </metadata:MetadataFilter>
> </metadata:MetadataProvider>

This looks good to me. Scott lurks on this list, so maybe he can help.
Barring that, you'll have to post your question on the shib mailing
list, I think. This doesn't appear to be a federation issue.

Tom

> -----Original Message-----
> From: 
> 
>  
> [mailto:]
>  On Behalf Of Tom Scavo
> Sent: Thursday, June 19, 2014 2:23 PM
> To: Nguyen, Son T
> Cc: Tom Scavo; 
> ;
>  
> 
> Subject: Re: [Metadata-Support] Error in retrieving the InCommon metadata
>
> On Thu, Jun 19, 2014 at 2:27 PM, Nguyen, Son T 
> <>
>  wrote:
>> Tom, I have subscribed.
>
> Thanks.
>
>> Yes, it's repeatable. We got this error every hour when Shib tried to 
>> refresh the metadata. Our InCommon-metadata.xml file hasn't been 
>> automatically updated.
>>
>> Curl'ing http://md.incommon.org/InCommon/InCommon-metadata.xml returned 
>> data without problem.
>
> This sounds like a Shibboleth problem, not a federation issue, but before I 
> send you over to the shib users mailing list, can you post your 
> <MetadataProvider> element here so we can take a look?
>
> Thanks,
>
> Tom