SP State and Clustering

[Cantor, Scott]

On 3/17/17, 5:33 PM, "users on behalf of Bill Moseley" <users-bounces at shibboleth.net on behalf of bill at turnitin.com> wrote:


> $ shibd -v
> shibboleth 2.4.3

Well, that qualifies as wrong. That is 8? 9? versions beyond unsupported. It is insecure. It's missing features explicitly designed to improve startup time. It probably includes out of date libraries.

> We have seven federations configured as well as a few direct IdPs.  Does that still seem unreasonably long for that much
> configuration?  If so, any suggestion on additional debugging?

You need to revisit all of that and figure out which ones are no longer relevant because of the eduGAIN feeds into the various aggregates. You are likely loading multiple copies of the entire global set of systems in eduGAIN, and that's partly why you're having problems.

> I don't suppose there a way to have the "POST /Shibboleth.sso/SAML2/POST" on our SP run a script directly instead of making
> the redirect back to the original resource, right?

No.

-- Scott