First Response Dispatched by mod_shib Before Metadata Reloading Completes?

Cantor, Scott cantor.2 at osu.edu
Tue Sep 4 10:38:39 EDT 2012


On 9/3/12 7:02 PM, "Nate Klingenstein" <ndk at internet2.edu> wrote:

>I've got a 2.5.0 SP loading a folder of metadata with the new Folder
>MetadataProvider.  If I place a new metadata file in that folder and
>touch /etc/shibboleth/shibboleth2.xml, and then try accessing a
>SessionInitiator, the session initiator will dispatch a response(e.g.
>Unable to locate metadata for identity provider) before the metadata
>reloading is complete.

That's because you don't control when the reload happens, it's in the
background to prevent hung clients. If your use case is such that the
configuration change has to be tightly controlled, restarting the SP is
the only way to guarantee that.

-- Scott




More information about the users mailing list