IdP startup issues

Cantor, Scott cantor.2 at osu.edu
Thu Apr 3 10:52:26 EDT 2014


On 4/3/14, 10:46 AM, "Joel Goguen" <joel.goguen at unb.ca> wrote:

>All of our MetadataProvider entries are defined as
>FileBackedHTTPMetadataProvider types. This is causing us issues with
>starting up the IdP; whenever any one or more metadata sources is
>unavailable, the IdP refuses to start entirely even if the defined
>backingFile exists. Is there some way (preferably without external cron
>jobs) we can have automatically-updating MetadataProvider definitions but
>not have the IdP fail to start when a metadata source can't be reached?

Yes, turn failFastInitialization off.

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPMetadataProvider

But you should understand that in doing that, your IdP will start up fine
and then services will just fail to work randomly. Either way you're going
to get called, so a complete solution is probably to look into fixing
whatever's causing problems with metadata sources.

-- Scott





More information about the users mailing list