v3 AACLI usage

[Cantor, Scott]

On 10/30/15, 9:49 AM, "users on behalf of Martin Haase" <users-bounces at shibboleth.net on behalf of Martin.Haase at DAASI.de> wrote:



>A follow-up...
>
>I noticed that the 'new aacli' does not operate on the
>attribute-resolver.xml as it is currently on disk, but as it has been
>loaded into the IdP already. Is that correct?

Yes. Loading an entire Spring context and IdP outside of a container had horrible performance, particularly because it required loading all the metadata as well.

>This would mean there is no chance to test an updated resolver
>configuration before it goes life?

A dev server?

>In that case there is not much use in having it, which is a real pity.

I really couldn't disagree more.

-- Scott

>