Unverified RP issue CRITICAL

[O'Dowd, Josh]

Yep,  that was it.  Thanks again.

Josh
________________________________________
From: users [users-bounces at shibboleth.net] on behalf of Cantor, Scott [cantor.2 at osu.edu]
Sent: Wednesday, July 26, 2017 9:07 AM
To: Shib Users
Subject: Re: Unverified RP issue CRITICAL

On 7/26/17, 11:04 AM, "users on behalf of O'Dowd, Josh" <users-bounces at shibboleth.net on behalf of Josh.O'Dowd at mso.umt.edu> wrote:

> You are likely correct.  I am coming into territory that was recently vacated by a sys-admin who ran our aggregation stuff, and
> set the constraints.  I am finding that the agg did not run since 7 days ago, so I think the expired MD is likely.

Without much doubt then, I didn't have the context. I believe we added more logging post-3.3 to highlight this problem, I had a similar issue with a campus metadata source. It was virtually silent until now.

Just take the file it backed up to and remove the validUntil (and signature check) and load it locally for now until the remote source is fixed.

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net