Question about attribute-map.xml

Cantor, Scott cantor.2 at osu.edu
Wed Jul 17 10:26:57 EDT 2013


> Interesting. Instead of bouncing both Apache and shibd between tests, I
> started testing after bouncing Apache, and then after bouncing shibd.
> After restarting Apache, my protected resources were no longer protected.
> Restarting shibd re-established the SP's control of the resources. So at
> least on my system, it appears that if you restart Apache you must also
> restart shibd. Is this normal behavior?

No. Modern configurations do not automatically reload the attribute mappings, unless the entire configuration is reloaded, but that has no effect either way on protection of resources. And shibd plays no role whatsoever in resource rules, that's an in process function.

-- Scott




More information about the users mailing list