<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 5/19/17 4:20 PM, Tom Scavo wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CAEtu=dPHqU=M2h+WCNu5PTMwS+Ngur_7A2Ae5JB3_MymoF64Tw@mail.gmail.com">
<pre wrap="">
</pre>
<pre wrap="">
Thanks for clarifying. All of that makes sense. It needs to be
documented, however.</pre>
</blockquote>
<br>
I added a parenthetical qualifier to the expirationWarningThreshold
docs on the wiki. <br>
<br>
I don't know how one would document any of the other. It's not
about Shibboleth software, it's about general metadata concepts.<br>
<br>
<br>
<blockquote type="cite"
cite="mid:CAEtu=dPHqU=M2h+WCNu5PTMwS+Ngur_7A2Ae5JB3_MymoF64Tw@mail.gmail.com"><br>
<blockquote type="cite">
<pre wrap="">We in fact do not actually literally expunge expired metadata, but we don't
return it from a metadata resolve call.
</pre>
</blockquote>
<pre wrap="">
This is not made clear in all the documentation I've read. Of course I
could have missed something.
</pre>
</blockquote>
<br>
The not expunging part isn't. But it's an internal implementation
detail, so I don't know why a deployer would care. The necessity of
the entity to be valid to be used is documented in the
requireValidMetadata attribute. <br>
<br>
<br>
<blockquote type="cite"
cite="mid:CAEtu=dPHqU=M2h+WCNu5PTMwS+Ngur_7A2Ae5JB3_MymoF64Tw@mail.gmail.com">
<pre wrap="">
</pre>
<pre wrap="">
That, too, is not clear by reading the documentation.</pre>
</blockquote>
<br>
It's in the requireValidMetadata attribute.<br>
<br>
<blockquote type="cite"
cite="mid:CAEtu=dPHqU=M2h+WCNu5PTMwS+Ngur_7A2Ae5JB3_MymoF64Tw@mail.gmail.com">
<pre wrap=""> I was under the
impression that invalid metadata was ignored, full stop.</pre>
</blockquote>
<br>
As far as the calling code is concerned, it is ignored, full stop.
What I mentioned is the internal impl detail of the resolvers. This
is the dev list, so I'm mentioning details of the software that
would be irrelevant to an end-user deployer.<br>
<br>
<br>
<blockquote type="cite"
cite="mid:CAEtu=dPHqU=M2h+WCNu5PTMwS+Ngur_7A2Ae5JB3_MymoF64Tw@mail.gmail.com">
<pre wrap=""> Also, what is
isRequireValidMetadata? I can't find that in the docs.
</pre>
</blockquote>
<blockquote type="cite"
cite="mid:CAEtu=dPHqU=M2h+WCNu5PTMwS+Ngur_7A2Ae5JB3_MymoF64Tw@mail.gmail.com"></blockquote>
<br>
That's the Java method name, corresponds to the resolver config
attribute requireValidMetadata:<br>
<br>
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/IDP30/MetadataConfiguration#MetadataConfiguration-Attributes">https://wiki.shibboleth.net/confluence/display/IDP30/MetadataConfiguration#MetadataConfiguration-Attributes</a><br>
<br>
It's been there since v2.2.<br>
<br>
<br>
</body>
</html>