Metadata validity interval and fun with timezones

Byte Flinger byteflinger at gmail.com
Thu Oct 31 17:10:30 EDT 2013


On a slightly related matter, I have system with a picketlink-based SP test
installation which talks to Shibboleth. I performed a complete
reinstallation of Shibboleth yesterday and have switched from using java
1.7.40 to 1.7.04 on Shibboleth and for some reason picketlink keeps saying
that the assertion is too old and rejects Shibboleths SAML answer.

I doubt it has to do with the java version as I have the same setup on a
different environment working just fine. I should mention that the
picketlink app along with the application server hosting it ( which were
both working fine last time I tested it about a month or so ago) have been
down up until I reinstalled Shibboleth while that is not the case
infuriated working environment.

I have not yet been able to figure which side is the culprit of the issue.
Could it be related to your issue?
On Oct 31, 2013 7:39 PM, "Christopher Bongaarts" <cab at umn.edu> wrote:

> What timezone is the validUntil date in the metadata using?
>
> On 10/31/2013 11:05 AM, Wessel, Keith wrote:
> > Thanks. I'll wait and see if a new tzupdater with 2013h fixes this.
> >
> > Keith
> >
> >
> > -----Original Message-----
> > From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net]
> On Behalf Of Cantor, Scott
> > Sent: Thursday, October 31, 2013 11:02 AM
> > To: Shib Users
> > Subject: Re: Metadata validity interval and fun with timezones
> >
> > On 10/31/13, 11:57 AM, "Wessel, Keith" <kwessel at illinois.edu> wrote:
> >> I've just pushed the validity times out a bit. A little padding doesn't
> >> really hurt. But I am curious if anyone has any other theories.
> > I think you must be correct about the DST issue, Java must be
> mis-computing the time window involved.
> >
> > -- Scott
> >
> >
> > --
> > To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
> > --
> > To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
>
> --
> %%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
> %%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
> %%  University of Minnesota    %%  +1 (612) 625-1809    %%
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131031/adc27349/attachment.html 


More information about the users mailing list