Metadata volume question

[Mike Flynn]

OK - I federate with the Belgian academic federation and I have a Dutch school that connects to me with that.  That worked fine for months.

Until today...


This morning I added a new private fed's metadata.  shibd -check reports no issue.  That client connects just fine.  Then the BelNet customer sends me a message about an our ago...

They send me a message that they get a server 500 error.  I check the logs and see no errors related to this unless it's this:

2013-01-18 12:11:54 ERROR Shibboleth.Listener [4800] isapi_shib_extension: remoted message returned an error: Message was signed, but signature could not be verified.
2013-01-18 12:11:54 ERROR Shibboleth.ISAPI [4800] isapi_shib_extension: Message was signed, but signature could not be verified.


________________________________
 From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Users <users at shibboleth.net> 
Sent: Friday, January 18, 2013 2:03 PM
Subject: Re: Metadata volume question
 
On 1/18/13 4:54 PM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>Is there a practical limit to the amount of metadata that my SP can
>consume?  2.4.3 on IIS7.

Yes, obviously the batches have to go at some point, but the only real
limit is memory and the number of entries to index and find efficiently,
which nobody is anywhere near even with nothing done to optimize it.

2.5 also drops the DOM by default to save memory.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130118/a1c23f22/attachment-0001.html