REFEDS R&S SP reports intermittent failures

[Scott Koranda]

> I have also tried testing this with aacli on a spare IdP host with the
> same config where I can log at DEBUG level.
> 
> ===== aacli test, log excerpts
> *** www.cilogon.org:
> 
> $ aacli.sh --configDir=conf --principal=baron --requester=https://www.cilogon.org/shibboleth
> No attribute statement.
> 
> 2016-04-15 17:18:17.553 - DEBUG [edu.internet2.middleware.shibboleth.common.relyingparty.provider.SAMLMDRelyingPartyConfigurationManager:157] - No custom or group-based relying party configuration found for https://www.cilogon.org/shibboleth. Using default relying party configuration.
> ...
> 2016-04-15 17:18:17.650 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:130] - Evaluating if filter policy REFED_RandS is active for principal baron
> 2016-04-15 17:18:17.650 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.match.saml.AbstractEntityAttributeMatchFunctor:110] - No metadata available for the entity ***
> 2016-04-15 17:18:17.650 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:134] - Filter policy REFED_RandS is not active for principal baron
> ...
> 2016-04-15 17:18:17.655 - DEBUG [edu.internet2.middleware.shibboleth.common.attribute.filtering.provider.ShibbolethAttributeFilteringEngine:114] - Filtered attributes for principal baron.  The following attributes remain: [transientId]
> 
> I don't know if it's relevant, but I note that it reports "No metadata
> available for the entity". 

This particular test was not a fair test. You tested with entityID

https://www.cilogon.org/shibboleth

but the CILogon entityID is

https://cilogon.org/shibboleth

It will be helpful if you can repeat that part of the test
with the correct entityID.

Thanks,

Scott K