IdP Metadata Cache

[Jeff Masiello]

Good Morning All,
I've been reading the Shibboleth Wiki quite a bit and don't mind being pointed to specific information. I've recently inherited a legacy setup. If I understand the terms it is a federation. We have an IdP and several SP's out there that connect to it.

My questions:
When I add a new set of metadata from an SP, it sometimes takes quite a while to get included into the current IdP cache set. I'm not sure if I'm using the proper terminology but on the IdP we have a federation-metadata.xml file that has all the metadata from all the SP's in it. We will manually add a new Entity Descriptor to that file. It sometimes takes up to 12 hours to become active. Our config on the IdP has about a 5 minute refresh time (I think) so I'm not sure what to do. Is there a way to force a complete refresh? We have a development environment as well and have tried actually restarting shibd on the IdP but when we go to the SP and log in we still get an error. Come back the next morning and it works.

Any thoughts at all appreciated. FYI, the legacy setup was setup by someone who didn't know shib. I'm guessing this because I see active "example.org" config elements in place.
Thanks

Jeff Masiello



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20140619/e5db9d86/attachment.html