A note about mod_shib2 and mod_http2

Cantor, Scott cantor.2 at osu.edu
Fri Aug 18 21:21:31 EDT 2017


(Actually, I'm mis-speaking anyway, that would be shibd taking that long because of the metadata size. There is *nothing* that could cause mod_shib to take that long, so there's something seriously wrong there. Apache restarts should be instantaneous.)

-- Scott

On 8/18/17, 9:20 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

On 8/18/17, 9:08 PM, "users on behalf of Jacob Lundberg" <users-bounces at shibboleth.net on behalf of jacob at collegenet.com> wrote:

> Our SP takes fifteen minutes to validate config and start up.  I'd hate to take this route.

There is no properly functioning system that would take that long. I have run the metadata numbers, so there's something wrong with your system or it's badly under-resourced. Regardless, you should be skipping signature validation on the backup file, and that will at least work around the problem.

-- Scott







More information about the users mailing list