Message expiry

[Chad La Joie]

If it's just for testing purposes you can disable the check all together.  Just looking towards the bottom of the relying-party.xml file.  You'll see the security rule that checks the message issue instant.
--
Chad La Joie
www.itumi.biz
trusted identities, delivered

On Sep 5, 2011, at 6:14 AM, Sukesh Nischal wrote:

> To conduct a certain software test I’ve set the clock of the SP to be a week behind the IdP. However I’m getting errors such as:
>  
> Message was expired: message issue time was '2011-08-30T09:40:52.000Z', message expired at: '2011-08-30T09:44:52.000Z', current time: '2011-09-05T10:48:32.196+01:00'
>  
> on the IDP.  I’ve tried setting clockSkew on the SP to be 10 days, but this hasn’t helped. Is there any way to set the IDP to have a larger message lifetime?
>  
> Regards,
>  
> Sukesh Nischal
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net