Occasional problem with InCommon metadata refreshes

[Tom Scavo]

Followups to metadata-support at incommon.org, please.

https://lists.incommon.org/sympa/info/metadata-support

On Thu, Jun 26, 2014 at 4:20 PM, Brian Koehmstedt
<bkoehmstedt at ucmerced.edu> wrote:
>
>          <metadata:MetadataProvider id="IdPMD"
> xsi:type="metadata:FilesystemMetadataProvider"
> metadataFile="/local/users/shib/cvs/shibboleth/conf/incommon/InCommon-metadata.xml"
>                                     maxRefreshDelay="PT15M" />
>
> And we have a crontab that runs at 1am every night that downloads the
> metadata file to a temp location and once the download is complete,
> moves it to
> /local/users/shib/cvs/shibboleth/conf/incommon/InCommon-metadata.xml.

Hmm, why don't you use the Shib IdP itself to download, verify, and
otherwise process the metadata? See this wiki page for a complete
example: https://spaces.internet2.edu/x/XAQjAQ

What URL are you refreshing from? Are you verifying the signature on
the metadata?

Tom