InCommon metadata aggregate exceeds 50MB

Nick Roy nroy at
Tue Mar 20 17:11:43 EDT 2018

This is a building block of the InCommon MDQ service offering. Shannon and Paul will be working on getting this container to sign metadata using InCommon hardware security modules and then we will front it with a CDN (which one(s) TBD).

Huge thanks to Paul, Shannon, Dave, Ian, Rhys and others at InCommon/JISC/Shibboleth project for the work on this.

People have asked me if I would be concerned if they were to take production InCommon metadata and resign it and redistribute it to their metadata clients using something like this, and I have no qualms with anyone doing that.



On 3/19/18 2:27 PM, Gettes, Michael wrote:
Hallelujah!  Hallelujah!

I only wish I had a version of Shib locally which I could config to take advantage of your great work.



On Mar 19, 2018, at 4:18 PM, Paul Caskey <pcaskey at<mailto:pcaskey at>> wrote:

I'm responding to a very old thread, I know...

It took me a bit to get it into a public repo, but if any of you want to try out an MDQ server with InCommon global metadata, it's as easy as: "docker run -d -p 443:443 tier/mdq-appliance"    :)

It's an centos-based apache server that serves up InCommon metadata processed with the Metadata Aggregator and signed with a key generated when you first run the container.

Source files are here:

Comments are welcome/desired.

-----Original Message-----
From: users [mailto:users-bounces at] On Behalf Of Cantor,
Sent: Monday, February 12, 2018 3:43 PM
To: Shib Users <users at><mailto:users at>
Subject: RE: InCommon metadata aggregate exceeds 50MB

There's not much choice, is there?  Will dynamic metadata be available

Ditto. Starting to look as though I'll have to spend a day or two standing
something up for myself, it's probably inevitable for redundancy anyway at
the end of the day.

-- Scott

For Consortium Member technical support, see
To unsubscribe from this list send an email to users-
unsubscribe at<mailto:unsubscribe at>
For Consortium Member technical support, see
To unsubscribe from this list send an email to users-unsubscribe at<mailto:users-unsubscribe at>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list