Metadata Aggregator schema validation and logging

[Chad La Joie]

On Mon, Nov 28, 2011 at 09:11, Patrik Schnellmann
<patrik.schnellmann at switch.ch> wrote:
> First, when it comes to the configuration of the schema validation, there's
> something I would like to configure properly:
> The schema file "saml-schema-metadata-2.0.xsd" depends on other xsd files
> from which it imports the namespaces. How could I use a java classpath for
> these imports? I only got that working using absolute file paths which is
> not proper enough for me.

Oh, this is one of those "damned if you do, damned if you don't"
things.  One of the biggest gripes about the current schema validation
the IdP does is that it uses classpath URLs.  Probably the easiest way
to do this is to teach the JVM to resolve classpath: URLs via the
custom protocol handler provided here (thanks to whoever provided
this)[1], see Step 3.

> The second thing is logging. I wanted to log less than on debug level, i.e.
> on the info level which of the EntityDescriptors (or EntitiesDescriptors)
> were processed. I defined the bean as follows:
>>     <util:list id="infoStatusClass">
>>         <value>#{T(net.shibboleth.metadata.InfoStatus)}</value>
>>     </util:list>
>>     <bean id="logItemInfo"
> class="net.shibboleth.metadata.pipeline.StatusMetadataLoggingStage"
>>           p:id="logItemInfo" p:selectionRequirements-ref="infoStatusClass"/>
>
> ... and then used that bean in a stage, but there was no output at all. Does
> any stage set that info and does that configuration "read" it correctly?

I'm not sure what you mean here.  What you have there should log, on
INFO level, anything StatusInfo messages that appear on any element in
the item collection being processed by that stage.  Are you saying the
StatusInfo messages are being logged on debugged?  Or that you're not
seeing any StatusInfo messages at all where you excepted to?  Or
something else...


[1] https://wiki.shibboleth.net/confluence/display/SHIB2/IdPDevCustomExtension
-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered