Application of Metadata filter slow
cantor.2 at osu.edu
Tue Jan 24 15:26:09 GMT 2012
> We are using OpenSaml version 2.2.1 and have noticed that at the process
> point just before the authenticated session is sent back to the users browser
> a metadata filter is applied for "signature".
In Shibboleth, that isn't the case, so I don't know what you think you're seeing. Metadata handling is not "inline" with responding to users, it's a background process.
> The filter appears to be looking at an XML file (about 9Mb is this normal?)
> containing the Entity Descriptors and takes over a minute to execute.
I don't think that it takes a minute to verify a signature over a file of that size, but I'm sure it can take a minute to download and update it. None of which would affect respone time other than initial startup.
More information about the users