<style>
/* Changing the layout to use less space for mobiles */
@media screen and (max-device-width: 480px), screen and (-webkit-min-device-pixel-ratio: 2) {
#email-body { min-width: 30em !important; }
#email-page { padding: 8px !important; }
#email-banner { padding: 8px 8px 0 8px !important; }
#email-avatar { margin: 1px 8px 8px 0 !important; padding: 0 !important; }
#email-fields { padding: 0 8px 8px 8px !important; }
#email-gutter { width: 0 !important; }
}
</style>
<div id="email-body">
<table id="email-wrap" align="center" border="0" cellpadding="0" cellspacing="0" style="background-color:#f0f0f0;color:#000000;width:100%;">
<tr valign="top">
<td id="email-page" style="padding:16px !important;">
<table align="center" border="0" cellpadding="0" cellspacing="0" style="background-color:#ffffff;border:1px solid #bbbbbb;color:#000000;width:100%;">
<tr valign="top">
<td bgcolor="#ffffff" style="background-color:#ffffff;color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;line-height:1;"><img src="https://shibboleth.net/images/shib_240x83.png" alt="" style="vertical-align:top;" /></td>
</tr><tr valign="top">
<td id="email-banner" style="padding:32px 32px 0 32px;">
<table align="left" border="0" cellpadding="0" cellspacing="0" width="100%" style="width:100%;">
<tr valign="top">
<td style="color:#505050;font-family:Arial,FreeSans,Helvetica,sans-serif;padding:0;">
<img id="email-avatar" src="https://issues.shibboleth.net/jira/secure/useravatar?ownerId=wkiyxkscr4bax%2F2pq5dvxwse0ei%3D%40https%3A%2F%2Faai-logon.switch.ch%2Fidp%2Fshibboleth&avatarId=10382" alt="" height="48" width="48" border="0" align="left" style="padding:0;margin: 0 16px 16px 0;" />
<div id="email-action" style="padding: 0 0 8px 0;font-size:12px;line-height:18px;">
<a class="user-hover" rel="wkiyxkscr4bax/2pq5dvxwse0ei=@https://aai-logon.switch.ch/idp/shibboleth" id="email_wkiyxkscr4bax/2pq5dvxwse0ei=@https://aai-logon.switch.ch/idp/shibboleth" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=wkiyxkscr4bax%2F2pq5dvxwse0ei%3D%40https%3A%2F%2Faai-logon.switch.ch%2Fidp%2Fshibboleth" style="color:#326ca6;">Lukas Haemmerle</a>
created <img src="https://issues.shibboleth.net/jira/images/icons/issuetypes/bug.png" height="16" width="16" border="0" align="absmiddle" alt="Bug"> <a style='color:#326ca6;text-decoration:none;' href='https://issues.shibboleth.net/jira/browse/SIDP-614'>SIDP-614</a>
</div>
<div id="email-summary" style="font-size:16px;line-height:20px;padding:2px 0 16px 0;">
<a style='color:#326ca6;text-decoration:none;' href='https://issues.shibboleth.net/jira/browse/SIDP-614'><strong>Useless HTTP Requests with multiple ConfigurationResource</strong></a>
</div>
</td>
</tr>
</table>
</td>
</tr>
<tr valign="top">
<td id="email-fields" style="padding:0 32px 32px 32px;">
<table border="0" cellpadding="0" cellspacing="0" style="padding:0;text-align:left;width:100%;" width="100%">
<tr valign="top">
<td id="email-gutter" style="width:64px;white-space:nowrap;"></td>
<td>
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Issue Type:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<img src="https://issues.shibboleth.net/jira/images/icons/issuetypes/bug.png" height="16" width="16" border="0" align="absmiddle" alt="Bug"> Bug
</td>
</tr> <tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Affects Versions:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
2.1.2, 2.4.1 </td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Assignee:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<a class="user-hover" rel="cantor.2@osu.edu" id="email_cantor.2@osu.edu" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=cantor.2%40osu.edu" style="color:#326ca6;">Scott Cantor</a>
</td>
</tr> <tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Created:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
27/Aug/14 4:37 AM
</td>
</tr> <tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Description:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<p style='margin-top:0;margin-bottom:10px;'>Our Identity Providers download the file attribute-filter.xml from a remote web server using the following configuration:</p>
<p style='margin-top:0;margin-bottom:10px;'>----------------------<del>8<</del>----------------------------<br/>
<srv:Service id="shibboleth.AttributeFilterEngine" <br/>
xsi:type="attribute-afp:ShibbolethAttributeFilteringEngine"<br/>
configurationResourcePollingFrequency="PT1H" <br/>
configurationResourcePollingRetryAttempts="128"></p>
<p style='margin-top:0;margin-bottom:10px;'> <!-- RR-provided filters --><br/>
<srv:ConfigurationResource xsi:type="resource:FileBackedHttpResource"<br/>
url="https://example.ch/switchaai/switch.ch/attribute-filter.xml"<br/>
file="/opt/shibboleth-idp/conf/attribute-filter.xml"/></p>
<p style='margin-top:0;margin-bottom:10px;'> <!-- Locally managed attribute filters --><br/>
<srv:ConfigurationResource xsi:type="resource:FilesystemResource"<br/>
file="/opt/shibboleth-idp/conf/local-attribute-filter.xml"/></p>
<p style='margin-top:0;margin-bottom:10px;'></srv:Service><br/>
----------------------<del>8<</del>----------------------------</p>
<p style='margin-top:0;margin-bottom:10px;'>This configuration should make the IdP download the attribute-filter.xml from the remote host every hour (PT1H).</p>
<p style='margin-top:0;margin-bottom:10px;'>When querying the URL <a href="https://example.ch/switchaai/switch.ch/attribute-filter.xml" class="external-link">https://example.ch/switchaai/switch.ch/attribute-filter.xml</a> the client gets a response like:</p>
<p style='margin-top:0;margin-bottom:10px;'>----------------------<del>8<</del>----------------------------<br/>
HTTP/1.1 200 OK<br/>
Date: Wed, 27 Aug 2014 08:13:17 GMT<br/>
Server: Apache<br/>
X-Powered-By: PHP/5.4.4-14+deb7u11<br/>
Content-Disposition: inline; filename="attribute-filter.xml"<br/>
Last-Modified: Wed, 27 Aug 2014 08:13:18 GMT<br/>
Etag: 9d2317fbb798412d03ae2f647014a870<br/>
Transfer-Encoding: chunked<br/>
Content-Type: text/xml<br/>
----------------------<del>8<</del>----------------------------</p>
<p style='margin-top:0;margin-bottom:10px;'>So, the server implements Etags and the last Last-Modified header.</p>
<p style='margin-top:0;margin-bottom:10px;'>However, what we see in our logs is this:</p>
<p style='margin-top:0;margin-bottom:10px;'>130.59.10.101 - - <span class="error">[25/Aug/2014:01:24:49 +0200]</span> "HEAD /switchaai/switch.ch/attribute-filter.xml HTTP/1.1" 200 -<br/>
130.59.10.101 - - <span class="error">[25/Aug/2014:01:24:50 +0200]</span> "HEAD /switchaai/switch.ch/attribute-filter.xml HTTP/1.1" 200 -<br/>
130.59.10.101 - - <span class="error">[25/Aug/2014:02:24:49 +0200]</span> "HEAD /switchaai/switch.ch/attribute-filter.xml HTTP/1.1" 200 -<br/>
130.59.10.101 - - <span class="error">[25/Aug/2014:02:24:50 +0200]</span> "HEAD /switchaai/switch.ch/attribute-filter.xml HTTP/1.1" 200 -<br/>
130.59.10.101 - - <span class="error">[25/Aug/2014:02:24:51 +0200]</span> "HEAD /switchaai/switch.ch/attribute-filter.xml HTTP/1.1" 200 -<br/>
130.59.10.101 - - <span class="error">[25/Aug/2014:02:24:51 +0200]</span> "GET /switchaai/switch.ch/attribute-filter.xml HTTP/1.1" 200 706116<br/>
130.59.10.101 - - <span class="error">[25/Aug/2014:02:25:26 +0200]</span> "HEAD /switchaai/switch.ch/attribute-filter.xml HTTP/1.1" 200 -<br/>
130.59.10.101 - - <span class="error">[25/Aug/2014:03:24:49 +0200]</span> "HEAD /switchaai/switch.ch/attribute-filter.xml HTTP/1.1" 200 -<br/>
130.59.10.101 - - <span class="error">[25/Aug/2014:03:24:50 +0200]</span> "HEAD /switchaai/switch.ch/attribute-filter.xml HTTP/1.1" 200 -<br/>
130.59.10.101 - - <span class="error">[25/Aug/2014:04:24:49 +0200]</span> "HEAD /switchaai/switch.ch/attribute-filter.xml HTTP/1.1" 200 -<br/>
130.59.10.101 - - <span class="error">[25/Aug/2014:04:24:50 +0200]</span> "HEAD /switchaai/switch.ch/attribute-filter.xml HTTP/1.1" 200 -</p>
<p style='margin-top:0;margin-bottom:10px;'>What is strange is that there are two HTTP HEAD requests about every hour. This does not make much sense to me because one HEAD request should be sufficient to find out if the file changed. Even at 2:24 if a change is detected, there is another (useless) HEAD request before the actual GET request to download the new file.</p>
<p style='margin-top:0;margin-bottom:10px;'>I noticed that this is the case at least since IdP 2.1.1. It seems that this behaviour is related to the fact that there are two ConfigurationResources defined. For IdPs that only download the attribute-filter.xml remotely but do not have a local file configured, this is not the case.</p>
<p style='margin-top:0;margin-bottom:10px;'>Could this be a bug or did I oversee a detail that would explain this behaviour?</p>
<p style='margin-top:0;margin-bottom:10px;'>PS: In Jira 2.4.1 is still in the category "Unreleased versions" <img class="emoticon" src="https://issues.shibboleth.net/jira/images/icons/emoticons/smile.gif" height="20" width="20" align="absmiddle" alt="" border="0"/></p>
</td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Environment:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<p style='margin-top:0;margin-bottom:10px;'>Debian, Linux</p>
</td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Project:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<a style="color:#326ca6;" href="https://issues.shibboleth.net/jira/browse/SIDP">Shibboleth IdP 2 - Java</a>
</td>
</tr> <tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Priority:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<img src="https://issues.shibboleth.net/jira/images/icons/priorities/minor.png" height="16" width="16" border="0" align="absmiddle" alt="Minor"> Minor
</td>
</tr>
<tr valign="top">
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 10px 10px 0;white-space:nowrap;">
<strong style="font-weight:normal;color:#505050;">Reporter:</strong>
</td>
<td style="color:#000000;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:12px;padding:0 0 10px 0;width:100%;">
<a class="user-hover" rel="wkiyxkscr4bax/2pq5dvxwse0ei=@https://aai-logon.switch.ch/idp/shibboleth" id="email_wkiyxkscr4bax/2pq5dvxwse0ei=@https://aai-logon.switch.ch/idp/shibboleth" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=wkiyxkscr4bax%2F2pq5dvxwse0ei%3D%40https%3A%2F%2Faai-logon.switch.ch%2Fidp%2Fshibboleth" style="color:#326ca6;">Lukas Haemmerle</a>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td><!-- End #email-page -->
</tr>
<tr valign="top">
<td style="color:#505050;font-family:Arial,FreeSans,Helvetica,sans-serif;font-size:10px;line-height:14px;padding: 0 16px 16px 16px;text-align:center;">
This message is automatically generated by JIRA.<br />
If you think it was sent incorrectly, please contact your JIRA administrators<br />
For more information on JIRA, see: <a style='color:#326ca6;' href='http://www.atlassian.com/software/jira'>http://www.atlassian.com/software/jira</a>
</td>
</tr>
</table><!-- End #email-wrap -->
</div><!-- End #email-body -->