Shibboleth 2.5.1 blacklist of RSA 1.5

[Peter Schober]

* praveen <praveen.pinto at peopleadmin.com> [2013-01-30 16:30]:
> We use shibboleth version 2.5.1 and Ubuntu 10.04 LTS.  Per Scott's
> suggestion, I looked for all files security-policy.xml, and found an
> additional file /etc/shibboleth/security-policy.xml.dist where the blacklist
> was still set to true.  I have set it to false, and have set all logging
> levels to debug. 

As Scott said, the .dist files are copies of the confguration "as
distributed". They are not used by the software, they are only
intended to provide you with a simple way to check for difference with
the default configuration.
It won't do any harm either except confuse you and your colleagues.

Also none of that explains why you think the software uses a
configuration file named security-policy.xml in /var/run/
-peter