testing errors

[Rod Widdowson]

> With a MetadataProvider
> as included below you sha1-hash (or whatever) an entity's entityID and
> that becomes the filename for the SAML 2.0 metadata you put into the
> directory. So that file in fact (1) does contain the actual metadata,
> and (2) will result in deterministic and invariant file names for any
> given entityID.

Right.

> 
> <MetadataProvider type="Dynamic" ignoreTransport="true" minCacheDuration="10" maxCacheDuration="600">
>   <Subst encoded="false" hashed="SHA1">file:///etc/shibboleth/metadata/hash/$entityID.xml</Subst>
> </MetadataProvider>
> 
> But I'll let make Rod his point, as I'm not fully sure of the needs of
> testshib. (Obviously the above is only for the SP's metadata
> consumption, though the IDP's LocalDynamicMetadataProvider should work
> similarly?)

Yes and yes.  And in V3 we are introducing

<MetadataProvider type="type=" LocalDynamicMetadataProvider" sourceDirectory="/etc/shibboleth/metadata/hash"/>

Which is syntactic sugar for the above.

> > Clearly (to me), if TestShib is to survive, it should evolve into a
> > metadata query server
> 
> People don't need a metadata service. They're trying to avoid running an IdP or SP, that's testshib's purpose.

+1

Also for my fading memory, what was the name of the "Federation before testshib".  The name "InSecure" springs to mind, but I'm sure
that wasn't in.