Internation dateline issue

[Mike Flynn]

So, for each member coming through this fed, I have to add a new relying party rule?  I can't match on .edu.au as other schools need to come in as private feds.


________________________________
 From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Users <users at shibboleth.net> 
Sent: Tuesday, January 22, 2013 5:18 PM
Subject: Re: Internation dateline issue
 
On 1/22/13 8:00 PM, "Mike Flynn" <shibbolethlynda at yahoo.com> wrote:

>Now it looks like a cert issue...

Are you actually signing requests for some reason?

>We joined the AAF and as part of that process, the AAF required that we
>create a new cert that used our entityID instead of our base domain.

Sigh.

>  So, I created a new one:

That isn't going to matter. It's not going to choose it for signing unless
you create a relying party rule to make it choose that. Otherwise it's
going to use the first one it finds for everything.

But my primary advice would be to stop signing your requests unless you
have a reason for doing so.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130122/79f0140b/attachment.html