Metadata error after SP install and configuration

[Pax, Christopher]

> It means don't give the URL to that metadata to anyone (e.g. an IdP or
> Federation Operator) to use "as is" as this will make a proper key
> rollover process pretty much impossible.

So, this is a warning included in current versions of shibboleth? do you
know what version this was implemented?

Is the metadata still valid?

my idp tell me that after im done configuring the SP, I need to give them
the generated Metadata. But when I did, they said they never seen this
message before.




On Wed, Mar 27, 2013 at 11:09 AM, Peter Schober
<peter.schober at univie.ac.at>wrote:

> * Pax, Christopher <pax at njit.edu> [2013-03-27 15:58]:
> > I get the following error at the top my
> > example.njit.edu/Shibboleth.sso/Metadata
> >
> > <!--
> > This is example metadata only. Do *NOT* supply it as is without review,
> > and do *NOT* provide it in real time to your partners.
> >  -->
>
> I can't find an error message above or anywhere else in your email.
>
> > I repeated the setup with a linux host and could not produce the problem.
>
> What problem? If the above warning is not displayed on another install
> that other install is probably running an earlier release of the
> software that did not yet put the warning there.
>
> > Please give me a explanation of what this message is, and how I can
> > resolve it?
>
> It means don't give the URL to that metadata to anyone (e.g. an IdP or
> Federation Operator) to use "as is" as this will make a proper key
> rollover process pretty much impossible.
>
> >         <Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
> >                   checkAddress="false" handlerSSL="false"
> cookieProps="http">
>
> Any specific reasons you don't want HTTP Cookies limited to TLS/SSL?
> Otherwise make that cookieProps="https".
> -peter
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Christopher Pax
New Jersey Institute of Technology
University Information Services
christopher.pax at njit.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130327/5ad5c945/attachment.html