Caching of attributes retrieved by attribute query in the SP

[Jonas Dehlin]

Hi Peter,

Thank you for your quick response. From what I can gather from the
documentation, the cache settings apply for all data stored in the cache.
If possible, I want to exclude a specific attribute(s) from caching.

I do wonder about the cacheAllowance attribute of the NativeSPSessionCache.
What happens when the cache expires? Will the SP refetch attributes using
Attribute Query (if not present in the bearer assertion)? If so, what
happens to attributes initially retrieved from the bearer assertion? Does a
cacheAllowance of 0 mean that no caching is performed?

Essentially, what I need to do is make a lookup for the attribute value for
each incoming request since I always need the latest value. If all
attribute values are cached then I guess it is not possible without any
kind of extension. Of course, this value could be fetched by the
application itself, but this would need rewrites of the application and
would create a non-homogeneous approach to how attributes are handled,
something that is undesirable.

Kind regards,
Jonas



On Fri, Dec 14, 2012 at 12:38 PM, Peter Schober
<peter.schober at univie.ac.at>wrote:

> * jonde973 <jonas.dehlin.crap at gmail.com> [2012-12-14 11:25]:
> > Are the attributes retrieved via an attribute query using the "Query
> > AttributeResolver" cached by the SP? If so, is it possible to
> > disable the caching?
>
> They are part of the session at the SP so resources have access to
> them as long as the session is valid. Regarding how much data is kept
> there and for how long cf.
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessionCache
> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPStorageService
> IIRC there also is a more conceptual page explaining how all settings
> work together somewhere,
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20121214/d2216065/attachment.html