SAML metadata validation try two

[Cantor, Scott]

On 6/6/13 11:37 PM, "Nate Klingenstein" <ndk at internet2.edu> wrote:
>
>I'd add that you usually shouldn't in most cases rely on schema files
>hosted externally, primarily for security reasons, but in this case also
>because www.w3.org <http://www.w3.org> is timing out on your schema
>download requests(see first 8 lines of the error log you posted) and that
>means that the references in the document can't be chased, which is where
>the rest of your errors are coming from.

Externals are fine for editing or validation purposes, just not for SAML
software. But they're not that easy to use or get working, there are too
many schemas to get and too much broken about schema lookup in XML.

There's not much simpler than just loading it into an SP or IdP and
checking the log for errors, and Shibboleth does more validation than most
other code bases anyway. I should have put together a command line tool
for this, but it's just never bubbled up.

-- Scott