IDP Relying Party Reload Behavior

[John Mitchell]

On Fri, Aug 19, 2011 at 9:55 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 8/19/11 1:50 PM, "John Mitchell" <jpmitchell at alaska.edu> wrote:
>>1. Add some new metadata about about an SP to relying-party.xml using
>>ResourceBackedMetadataProvider and a file.
>>2. Config is reloaded on IdP after 15 minutes as expected and
>>functions as expected.
>>3. SP metadata file is changed.
>>4. IdP never reloads the new SPs metadata and a restart is required.
>
> Metadata reload has nothing to do with the relying-party reload other than
> as a brute force alternative. Certainly that won't reload just because the
> metadata does, nor would you want it to.

    That is my understanding and seems very appropriate.

>
>>Can someone educate me about what conditions trigger the IdP to reload
>>the metadata file on the IdP?
>
> If you tell it to and the file changes. I think there are some conditions
> under which it seems to miss local file changes depending on when it
> changes relative to the polling thread, but I haven't identified it.
>

    What do you mean by tell it to?

>> I have tried several things to make it
>>reload like changing the MetadataProvider id and changing the filename
>>in an effort to trigger the reload but it still has the old metadata.
>
> If you change the relying-party.xml *file*, and it doesn't reload, then
> the rest of the reloading isn't working right, but that's not the metadata
> reload. That would require the metadata file to change.
>

    I think my brute force approach of changing the relying party
config is not causing the the metadata to be reloaded. The logs show
the relying party configuration reloads but the already loaded
metadata for the SP does not appear to reload even though the file on
disk has changed. Does that make sense?

> -- Scott
>
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>



-- 
John P. Mitchell <jpmitchell at alaska.edu>
907.450.8320
http://www.alaska.edu/oit/iam

"All mankind is divided into three classes: those that are immovable,
those that are movable, and those that move." - Benjamin Franklin