Metadata not updating in IDP

Rod Widdowson rdw at steadingsoftware.com
Fri Feb 20 03:43:20 EST 2015


> Any feeling on the effectiveness of this solution?

It's not going to hurt (you may consume a few more nanoseconds of cpu each
day and a few more bytes of memory), but it is important to remember that
all you are doing with the config changes is isolating the failure to a
single reloadable service.  In the stack dump supplied in that case the
issue was not with the IdP per se, but a library that it uses which was
hanging rather than timing out.  You cannot configure your way out of that.

In several of the reported incidents in that case the IdP was downloading
filter configuration as well as metadata and so the surface exposure was
greater and with the 'one out, all out' that the default config gives you
exacerbated things.

I'd suggest that you try this on your test IdP and observe that for a week.

/Rod



More information about the users mailing list