Errors after Relying Party Service Reload

Cantor, Scott cantor.2 at osu.edu
Mon Apr 2 21:13:02 BST 2012


> We are well aware of the warning on the wiki regarding use of the
> configuration reloading in production, and we have sufficient configuration
> testing in place to prevent invalid configurations from being loaded into the
> production environment. The goal of using the reloading features is to
> provide shorter turn-around when adding new SPs to the IdP and modifying
> attributes and release policies without resetting session state for all
> authenticated users by restarting Tomcat entirely.

None of those things requires reloading relying-party.xml.

> Given this issue, however,
> we've delayed implementation of this feature and instead scheduled a
> restart of Tomcat nightly to pick up any changes made the previous day,
> which means even the smallest change doesn't take effect until the
> following day.

There are no small changes that involve that file.

I have no idea if there's a bug or not, I don't do that kind of reloading. Just saying it isn't needed to address your requirements in general. My guess is the cache of resolved keys from metadata is corrupted somehow.

-- Scott



More information about the users mailing list