includeConditionsNotBefore=false not allowed in ProfileConfiguration

[Pablo Millet]

Hi

This is my first post to this list so apologize if topic has been adressed before.

I have a misbehaving SP who refuses to apply time skew. After big drama I got them to implement the option to simply ignore notBefore since it is optional according to spec.

I upgraded from 2.x to 2.4.0 because i found out about the options to ignore "notBefore" by adding includeConditionsNotBefore=false to profiles in ProfileConfiguration but my IdP doesn't even start properly because of the additional includeConditionsNotBefore.

The log says:

5:50:54.655 - ERROR [edu.internet2.middleware.shibboleth.common.config.BaseService:187] - Configuration was not loaded for shibboleth.RelyingPartyConfigurationManager service, error creating components.  The root cause of this error was: org.xml.sax.SAXParseException: cvc-complex-type.3.2.2: Attribute 'includeConditionsNotBefore' is not allowed to appear in element 'ProfileConfiguration'.

So, I upgraded again from 2.4.0 to 2.4.3,.. Same thing :-(

I have tried on DefaultRelyingParty and custom RelyingParty.

What is the correct approach to have IdP ignore sending notBefore in response to SP?
Any ideas?

-------------------------------------
Pablo Millet
IT-Department
University of Gothenburg








-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150129/8fa9b7c4/attachment.html