InCommon metadata support

[Tom Scavo <>]

On Wed, Sep 9, 2015 at 11:25 AM, Josh Bright 
<>
 wrote:
>
> About two months ago after no known change to our system, the
> InCommon_Metadata.xml stop refreshing (updating) automatically.  This went
> un-noticed until the expiration time (two weeks) hit and our users were no
> longer able to authenticate.
>
> A note that leads me to believe a configuration change may have been made is
> that it is impacting two of our servers not just one.  If we restart the
> servers or restart tomcat then the file updates and is good for another two
> weeks.
>
> Current iDP Version 2.4.4
>
> Metadata Provider info
>
> <MetadataProvider id="URLMD_incommon"
> xsi:type="FileBackedHTTPMetadataProvider"
> metadataURL="http://wayf.incommonfederation.org/InCommon/InCommon-metadata.xml";
> backingFile="/opt/shibboleth-idp/metadata/InCommon_metadata.xml"/>

Josh, you're pointing to an obsolete file. The correct file is:

http://md.incommon.org/InCommon/InCommon-metadata.xml

See the Metadata Aggregates wiki page: https://spaces.internet2.edu/x/SoG8Ag

Also, you're refreshing metadata insecurely. See the Shibboleth
Metadata Config wiki page for a specific example:
https://spaces.internet2.edu/x/XAQjAQ

May I ask where you learned or copied the above configuration? I need
to fix that documentation.

Question for ScottC: This isn't the first time in the last couple of
months someone's had a problem with the old file location. Do you know
why that might be?

Thanks,

Tom