Question on ValidUntil attribute in Metadata

[Brewer, Edward L]

To all,

I am currently running Shibboleth IdP 2.4.4 and I am attempting to test if the IdP is detecting and advoiding using metadata that is beyond it's validUntil date.

I have metadata that is File based

<?xml version="1.0"?>
<EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://vanderbilt-np.hosted.xmatters.com/sp/SSO.saml2" validUntil="2015-04-01T10:00:00Z">

... Removed the GUTS...

</EntityDescriptor>

And I want to make sure that the IdP does not use this metadata... So I made the following entry to my relying-party.xml

<metadata:MetadataProvider
id="xmatters"
xsi:type="metadata:FilesystemMetadataProvider"
metadataFile="/PathToFile/Filename.xml"
maxRefreshDelay="P1D"
failFastInitialization="false"
requireValidMetadata="true"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:metadata="urn:mace:shibboleth:2.0:metadata">
<MetadataFilter
xsi:type="ChainingFilter"
xmlns="urn:mace:shibboleth:2.0:metadata">
<MetadataFilter
xsi:type="RequiredValidUntil"
maxValidityInterval="P14D" />
<MetadataFilter
xsi:type="SchemaValidation"
xmlns="urn:mace:shibboleth:2.0:metadata" />
</MetadataFilter>
</metadata:MetadataProvider>

So... when I restart the IdP I see the following in the logs  (Date of restart is 20150420)

...
12:02:19.974 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:256] - Beginning refresh of metadata from '/PathToFile/Filename.xml'
12:02:19.974 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:263] - Processing new metadata from '/PathToFile/Filename.xml'
12:02:19.974 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:352] - Unmarshalling metadata from '/PathToFile/Filename.xml'
12:02:19.975 - WARN [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:374] - Entire metadata document from '/PathToFile/Filename.xml' was expired at time of loading, existing metadata retained
12:02:19.976 - INFO [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:279] - Next refresh cycle for metadata provider '/PathToFile/Filename.xml' will occur on '2015-04-20T17:07:19.975Z' ('2015-04-20T12:07:19.975-05:00' local time)
...

Then later

12:07:19.977 - DEBUG [org.opensaml.saml2.metadata.provider.AbstractReloadingMetadataProvider:267] - Error occurred while attempting to refresh metadata from '/PathToFile/Filename.xml'
java.lang.NullPointerException: null

Where it repeats.

Is this normal and will the IdP use the Metadata?

Thanks,
Lee Brewer



Lee Brewer | Application Developer | Information Technology | Vanderbilt University
lee.brewer at vanderbilt.edu | phone 615.343.2802 | it.vanderbilt.edu<http://it.vanderbilt.edu/>
[Vanderbilt IT logo]

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150420/db86ccca/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 7677 bytes
Desc: image002.jpg
URL: <http://shibboleth.net/pipermail/users/attachments/20150420/db86ccca/attachment-0001.jpg>