IDP Relying Party Reload Behavior

John Mitchell jpmitchell at alaska.edu
Fri Aug 19 18:50:23 BST 2011


All,

     I am having trouble getting the relying party config on my IDP to
reload without restarting in a certain situation. I have the following
in service.xml:

<Service id="shibboleth.RelyingPartyConfigurationManager"
             configurationResourcePollingFrequency="PT15M0.000S"
             configurationResourcePollingRetryAttempts="3"
             xsi:type="relyingParty:SAMLMDRelyingPartyConfigurationManager"
             depends-on="shibboleth.SAML1AttributeAuthority
shibboleth.SAML2AttributeAuthority">
        <ConfigurationResource
file="/opt/shibboleth-idp/conf/relying-party.xml"
xsi:type="resource:FilesystemResource" />
    </Service>

Here is the behavior:

1. Add some new metadata about about an SP to relying-party.xml using
ResourceBackedMetadataProvider and a file.
2. Config is reloaded on IdP after 15 minutes as expected and
functions as expected.
3. SP metadata file is changed.
4. IdP never reloads the new SPs metadata and a restart is required.

Can someone educate me about what conditions trigger the IdP to reload
the metadata file on the IdP? I have tried several things to make it
reload like changing the MetadataProvider id and changing the filename
in an effort to trigger the reload but it still has the old metadata.

-- 
John P. Mitchell <jpmitchell at alaska.edu>
907.450.8320
http://www.alaska.edu/oit/iam

"All mankind is divided into three classes: those that are immovable,
those that are movable, and those that move." - Benjamin Franklin


More information about the users mailing list