InCommon metadata support

["Cantor, Scott" <>]

On 2/18/16, 7:06 PM, 
"
 on behalf of Jeffrey Eaton" 
<
 on behalf of 
>
 wrote:



>The signature check passes (just as slowly as without the 
>EntityRoleWhiteList filter), and the filtering completes but doesn’t seem to 
>have much effect on the in-memory resident size (still taking ~250MB).

Linux really doesn't release memory. Results on Windows would be different.

>Loading that aggregate complete in 2 seconds, and the resulting shibd 
>process only takes up about 40 MB of RAM.  That actually seems like a very 
>reasonable compromise.

I'm not sure how that's a compromise, that's just the old non-global set of 
entities. Or am I not understanding? That would be a rollback, not a 
compromise.

>I’m still evaluating what we’re going to recommend to our SP operators, but 
>in the worst case, I can have them use the export aggregate, or my split and 
>re-signed IDP-only aggregate, with no further changes needed from the 
>InCommon side.

I'm still not understanding the real problem, apart from the obvious trend 
that eventually it will be. I've run an SP that consumes more than this 
amount of metadata for a decade, and it's never been a concern.

-- Scott