SP metadata expired?

[Morris, Andi]

I've grepped to make certain there is no other reference to the EZProxy Sp in any other metadata than the one declared in the relying-party.xml.
I've also grepped for valid_until, which only appears in the UK federation metadata, as expected.

There was a reference in an old version of the test shib metadata, but this metadata is not loaded by the relying-party file. I've removed the old metadata to be sure.

I've also added the  requireValidMetadata="false" to the relying party for that SP, but still I get:
11:29:53.314 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:509] - Searching for entity descriptor with an entity ID of https://login.ezproxy.uwic.ac.uk
11:29:53.314 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:126] - Looking up relying party configuration for https://login.ezproxy.uwic.ac.uk
11:29:53.314 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:132] - No custom relying party configuration found for https://login.ezproxy.uwic.ac.uk, looking up configuration based on metadata groups.
11:29:53.314 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:199] - Checking child metadata provider for entity descriptor with entity ID: https://login.ezproxy.uwic.ac.uk
11:29:53.314 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:509] - Searching for entity descriptor with an entity ID of https://login.ezproxy.uwic.ac.uk
11:29:53.314 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:166] - Metadata document does not contain an EntityDescriptor with the ID https://login.ezproxy.uwic.ac.uk
11:29:53.314 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:170] - Metadata document contained an EntityDescriptor with the ID https://login.ezproxy.uwic.ac.uk, but it was no longer valid
11:29:53.314 - DEBUG [org.opensaml.saml2.metadata.provider.ChainingMetadataProvider:199] - Checking child metadata provider for entity descriptor with entity ID: https://login.ezproxy.uwic.ac.uk
11:29:53.314 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractMetadataProvider:509] - Searching for entity descriptor with an entity ID of https://login.ezproxy.uwic.ac.uk
11:29:53.314 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:155] - No custom or group-based relying party configuration found for https://login.ezproxy.uwic.ac.uk. Using default relying party configuration.

We currently have separate metadata files for all our SPs, is this the right way to do it, or should I chain them into one file?  I'm really confused why the debug references custom and default relying-party configs.

Cheers,
Andi

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Peter Schober
Sent: 15 March 2013 09:40
To: users at shibboleth.net
Subject: Re: SP metadata expired?

* Morris, Andi <amorris at cardiffmet.ac.uk> [2013-03-15 10:17]:
> This is the curious thing. It's only declared in the relying-party.xml
> once, and there is only the one equivalent metadata file for it.

Make sure it's not contained in /any/ other metadata source configured in the IdP. E.g.
$ fgrep -l sp.ezproxy.domain.ac.uk /opt/shibboleth-idp/metadata/* Adjusting hostname and paths accordingly, -peter
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
________________________________

From 1st November 2011 UWIC changed its title to Cardiff Metropolitan University. From the 6th December 2011, as part of this change, all email addresses which included @uwic.ac.uk have changed to @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan University will now be sent from the new @cardiffmet.ac.uk address. Please could you ensure that all of your contact records and databases are updated to reflect this change. Further information can be found on the website here.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>

Ar Dachwedd y 1af 2011 newidiodd UWIC ei henw i Brifysgol Fetropolitan Caerdydd. O Ragfyr 6ed, fel rhan o'r newid yma, bydd pob cyfeiriad e-bost sy'n cynnwys @uwic.ac.uk yn newid i @cardiffmet.ac.uk. Bydd yr holl ebyst a ddanfonir o Brifysgol Fetropolitan Caerdydd yn cael eu danfon o‘r cyfeiriad @cardiffmet.ac.uk newydd. Gwnewch yn siwr eich bod yn diweddaru eich cofnodion cyswllt a'ch cronfeydd data i adlewyrchu hyn. Gellir cael rhagor o wybodaeth ar y wefan yma.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>