Skip to Content.
Sympa Menu

metadata-support - Re: [Metadata-Support] InCommon_Metadata.xml not updating

Subject: InCommon metadata support

List archive

Re: [Metadata-Support] InCommon_Metadata.xml not updating


Chronological Thread 
  • From: Tom Scavo <>
  • To: "" <>
  • Subject: Re: [Metadata-Support] InCommon_Metadata.xml not updating
  • Date: Wed, 9 Sep 2015 11:55:41 -0400

On Wed, Sep 9, 2015 at 11:25 AM, Josh Bright
<>
wrote:
>
> About two months ago after no known change to our system, the
> InCommon_Metadata.xml stop refreshing (updating) automatically. This went
> un-noticed until the expiration time (two weeks) hit and our users were no
> longer able to authenticate.
>
> A note that leads me to believe a configuration change may have been made is
> that it is impacting two of our servers not just one. If we restart the
> servers or restart tomcat then the file updates and is good for another two
> weeks.
>
> Current iDP Version 2.4.4
>
> Metadata Provider info
>
> <MetadataProvider id="URLMD_incommon"
> xsi:type="FileBackedHTTPMetadataProvider"
> metadataURL="http://wayf.incommonfederation.org/InCommon/InCommon-metadata.xml";
> backingFile="/opt/shibboleth-idp/metadata/InCommon_metadata.xml"/>

Josh, you're pointing to an obsolete file. The correct file is:

http://md.incommon.org/InCommon/InCommon-metadata.xml

See the Metadata Aggregates wiki page: https://spaces.internet2.edu/x/SoG8Ag

Also, you're refreshing metadata insecurely. See the Shibboleth
Metadata Config wiki page for a specific example:
https://spaces.internet2.edu/x/XAQjAQ

May I ask where you learned or copied the above configuration? I need
to fix that documentation.

Question for ScottC: This isn't the first time in the last couple of
months someone's had a problem with the old file location. Do you know
why that might be?

Thanks,

Tom



Archive powered by MHonArc 2.6.16.

Top of Page