Metadata expiry and computing a new expiration time.

Simon Fraser srf at sanger.ac.uk
Mon Sep 14 11:07:46 EDT 2015



On 14/09/15 16:00, Tom Scavo wrote:
>
>> -u with https: and the FQDN worked well (with localhost it was a certificate
>> error, which is fine, as localhost isn't in the certificate). Thank you!
>
> Simon, can write down the command line that worked for you (for the archives)?

In an instructional style:

Find the right metadata ID string from the metadata-providers.xml:
root at idp# grep "MetadataProvider id" 
/opt/shibboleth-idp/conf/metadata-providers.xml

And with the FQDN of the IDP passed in by -u, gives me:

/opt/shibboleth-idp/bin/reload-metadata.sh -id UKfederationMetadata -u 
https://idp.sanger.ac.uk

Which triggered a metadata reload, logged in 
/opt/shibboleth-idp/logs/idp-process.log (with enough DEBUG logging 
turned on)


-- 
 The Wellcome Trust Sanger Institute is operated by Genome Research 
 Limited, a charity registered in England with number 1021457 and a 
 company registered in England with number 2742969, whose registered 
 office is 215 Euston Road, London, NW1 2BE. 


More information about the users mailing list