Outbound HTTP proxy for metadata updates

[Matthew Slowe]

On Tue, Aug 09, 2016 at 02:09:44PM +0200, Peter Schober wrote:
> * Matthew Slowe <m.slowe at kent.ac.uk> [2016-08-09 13:01]:
> > I've been trying to get our v3 IDP to use an upstream HTTP proxy to make
> > the outbound request but it seems to be ignoring me and going direct :-(
> > 
> > My settings in relying-party.xml:
> 
> You might want to move your metadata config over to
> metadata-providers.xml at some point:
> https://wiki.shibboleth.net/confluence/display/IDP30/MetadataConfiguration#MetadataConfiguration-V2Compatibility
> 
> > <MetadataProvider id="URLMD" xsi:type="FileBackedHTTPMetadataProvider"
> >                    xmlns="urn:mace:shibboleth:2.0:metadata"
> >                    metadataURL="http://metadata.ukfederation.org.uk/ukfederation-metadata.xml"
> >                    proxyHost="advocate.kent.ac.uk"
> >                    proxyPort="3128"
> >                    backingFile="%{idp.home}/metadata/ukfederation-metadata.xml">
> [...]
> > </MetadataProvider>
> > 
> > Is this the correct place to be doing this? Is there some other switch to tickle to enable this?
> 
> At least it matches the v2 configuration:
> https://wiki.shibboleth.net/confluence/display/SHIB2/IdPMetadataProvider#IdPMetadataProvider-FileBackedHTTPMetadataProvider
> as well as v3:
> https://wiki.shibboleth.net/confluence/display/IDP30/HTTPMetadataProviders#HTTPMetadataProviders-Attributes
> 
> Did you actually try it and did it work?

Looks like it was just ignoring the stuff in relying-party.xml, I've
made the change in metadata-providers.xml and it's working.

Ta,
-- 
Matthew Slowe | Server Infrastructure Officer
IT Infrastructure, Information Services, University of Kent
Room S21, Cornwallis South
Canterbury, Kent, CT2 7NZ, UK
Tel: +44 (0)1227 824265 

www.kent.ac.uk/is | @UnikentUnseenIT | @UKCLibraryIt
PGP: https://keybase.io/fooflington