Redis support for StorageService in opensaml-java?

[George Wang]

Actually I am implementing SP, and the replay checking is mostly for
assertion replays. Also with an LB on top of the hosts, per node cache
doesn't really work.

I'm not requesting a feature, but more just curious of the decisions.

Also, what is your reason for not implementing SP? I understand there's a
SP package implemented by shib, but is there any other reason for that?


George

On Thu, Aug 18, 2016 at 6:40 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > I was thinking of using one of the MessageReplayHandlers that require
> > StorageService. There was only memcached based Storage Service, and was
> > thinking of using redis instead. I think in this case serverside storage
> is
> > required, unless you have any other suggestion?
>
> Most people just do per-node caches in memory and leave it. The only real
> significant case where replay checking is valuable for the IdP is for
> people supporting SOAP over 443 using signed messages from clients. Replay
> and freshness are (currently) the only real MITM mitigation there. But very
> few people are doing that.
>
> If you're implementing an SP, replay checking matters more, but you
> shouldn't be implementing an SP.
>
> Unicon has a hazelcast plugin available also.
>
> -- Scott
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20160818/09df7920/attachment.html>