How is duplicate metadata handled by Shibboleth?

Yeargan, Yancey Yancey.Yeargan at untsystem.edu
Wed Jan 25 14:32:36 GMT 2012


In this case, it is for an SP. The Chaining metadata provider's "precedence" attribute will allow me to override federation metadata until I can get the federation metadata updated.


On Jan 25, 2012, at 8:14 AM, Chad La Joie wrote:

> Also, be sure to post which product you're actually working with.  We
> have OpenSAML-C++, OpenSAML-Java, Service Provider, Identity Provider,
> Centralized Discovery Service, Embedded Discovery Service, and
> Metadata Aggregator.  In this particular case, all but the Embedded
> Discovery Service perform metadata loading of some type.
> 
> On Wed, Jan 25, 2012 at 09:08, Yeargan, Yancey
> <Yancey.Yeargan at untsystem.edu> wrote:
>> Thank you, Chad. Not sure how I missed that earlier. In the future, I must try to resolve issues with the proper amount of sleep.
>> 
>> Yancey
>> 
>> 
>> On Jan 25, 2012, at 7:56 AM, Chad La Joie wrote:
>> 
>>> IDP Metadata Provider Docs:
>>> https://wiki.shibboleth.net/confluence/display/SHIB2/IdPMetadataProvider
>>> 
>>> SP Metadata Provider Docs:
>>> https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPMetadataProvider
>>> 
>>> On Wed, Jan 25, 2012 at 08:52, Yeargan, Yancey
>>> <Yancey.Yeargan at untsystem.edu> wrote:
>>>> If an entity's metadata is loaded twice (such as from two federations or from a federation and a local file) and the two copies are different, which definition does Shibboleth use? Does Shibboleth use the first definition loaded, last definition loaded, something else?
>>>> --
>>>> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>>> 
>> --
>> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
> 
> 
> 
> -- 
> Chad La Joie
> www.itumi.biz
> trusted identities, delivered
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net



More information about the users mailing list