IdP 3.1 - metadata config not working

[Ian Young]

> On 13 Mar 2015, at 11:48, Dave Perry <Dave.Perry at hull-college.ac.uk> wrote:
> 
>             <MetadataFilter xsi:type="RequiredValidUntil" xmlns="urn:mace:shibboleth:2.0:metadata"
>  
>                             maxValidityInterval="604800" />

That maxValidityInterval value will be interpreted as a number of milliseconds (about 10 minutes). UK federation metadata has a much longer validity interval, hence the error.

Can you try something like maxValidityInterval="PT30D" and see if that affects the result?

> but I turned off the signing (which someone may tell me is wrong here)

Yes, you want to turn that back on before going into production to avoid being fed spoofed metadata. Let's sort the initial problem out first, though.

    -- Ian




-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20150313/e7c3ddd1/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5250 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20150313/e7c3ddd1/attachment.bin