expirationWarningThreshold

Tom Scavo trscavo at gmail.com
Sat May 13 20:26:37 EDT 2017


I see that a new expirationWarningThreshold XML attribute will be
introduced in IdP v3.4:
https://wiki.shibboleth.net/confluence/x/8YAOAQ

>From the wiki page:

<quote>
expirationWarningThreshold
Duration [default: PT12H]
When a metadata refresh completes, if the live effective metadata root
element's validUntil indicates an expiration time within the specified
duration from the current time, log a warning about the impending
expiration.
</quote>

What exactly is a "completed metadata refresh?" I assume that does not
include an attempted metadata refresh that was short-circuited via
HTTP Conditional GET, correct?

Presumably, an appropriate setting for expirationWarningThreshold will
depend on the values of the other configuration parameters. Suppose a
reloading metadata provider is configured to refresh metadata at least
daily. If validUntil is 14 days in the future, then the
expirationWarningThreshold should be set to PT13D, right?

I'm probably not understanding something since the default value is
just PT12H. That's why I asked about "completed metadata refresh"
initially.

Thanks,

Tom


More information about the dev mailing list