Metadata volume question

Mike Flynn shibbolethlynda at
Fri Jan 18 17:33:33 EST 2013

OK - I federate with the Belgian academic federation and I have a Dutch school that connects to me with that.  That worked fine for months.

Until today...

This morning I added a new private fed's metadata.  shibd -check reports no issue.  That client connects just fine.  Then the BelNet customer sends me a message about an our ago...

They send me a message that they get a server 500 error.  I check the logs and see no errors related to this unless it's this:

2013-01-18 12:11:54 ERROR Shibboleth.Listener [4800] isapi_shib_extension: remoted message returned an error: Message was signed, but signature could not be verified.
2013-01-18 12:11:54 ERROR Shibboleth.ISAPI [4800] isapi_shib_extension: Message was signed, but signature could not be verified.

 From: "Cantor, Scott" <cantor.2 at>
To: Shib Users <users at> 
Sent: Friday, January 18, 2013 2:03 PM
Subject: Re: Metadata volume question
On 1/18/13 4:54 PM, "Mike Flynn" <shibbolethlynda at> wrote:

>Is there a practical limit to the amount of metadata that my SP can
>consume?  2.4.3 on IIS7.

Yes, obviously the batches have to go at some point, but the only real
limit is memory and the number of entries to index and find efficiently,
which nobody is anywhere near even with nothing done to optimize it.

2.5 also drops the DOM by default to save memory.

-- Scott

To unsubscribe from this list send an email to users-unsubscribe at
-------------- next part --------------
An HTML attachment was scrubbed...

More information about the users mailing list