Metadata validity interval and fun with timezones

Wessel, Keith kwessel at illinois.edu
Thu Oct 31 14:02:05 EDT 2013


An excellent question. It's because I used the word local to simplify things. It's the I-Trust (Illinois) federation, so it's more than local. It's generated by the AAF Federation Registry which we now have in production.

Our true local file doesn't have a validUntil But our I-Trust one does..

Keith

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Peter Schober
Sent: Thursday, October 31, 2013 12:19 PM
To: users at shibboleth.net
Subject: Re: Metadata validity interval and fun with timezones

* Wessel, Keith <kwessel at illinois.edu> [2013-10-31 16:29]:
> Our IDPs all started complaining about the metadata validUntil time 
> being too far in the future this week. Our local metadata has a 7-day 
> validUnti time, and the validityInterval in relying-party.xml is set 
> to 7 days.

Out of curiosity (cf. the other curren thread, "Metadata Issue") why would you put a validUntil on local metadata?
-peter
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


More information about the users mailing list