InCommon metadata aggregate exceeds 50MB

[Nick Roy]

This is a building block of the InCommon MDQ service offering. Shannon and Paul will be working on getting this container to sign metadata using InCommon hardware security modules and then we will front it with a CDN (which one(s) TBD).

Huge thanks to Paul, Shannon, Dave, Ian, Rhys and others at InCommon/JISC/Shibboleth project for the work on this.

People have asked me if I would be concerned if they were to take production InCommon metadata and resign it and redistribute it to their metadata clients using something like this, and I have no qualms with anyone doing that.

Best,

Nick

On 3/19/18 2:27 PM, Gettes, Michael wrote:
Hallelujah!  Hallelujah!

https://www.youtube.com/watch?v=LRP8d7hhpoQ

I only wish I had a version of Shib locally which I could config to take advantage of your great work.

THANK YOU PAUL!

/mrg

On Mar 19, 2018, at 4:18 PM, Paul Caskey <pcaskey at internet2.edu<mailto:pcaskey at internet2.edu>> wrote:

I'm responding to a very old thread, I know...

It took me a bit to get it into a public repo, but if any of you want to try out an MDQ server with InCommon global metadata, it's as easy as: "docker run -d -p 443:443 tier/mdq-appliance"    :)

It's an centos-based apache server that serves up InCommon metadata processed with the Metadata Aggregator and signed with a key generated when you first run the container.

Source files are here:
https://urldefense.proofpoint.com/v2/url?u=https-3A__github.internet2.edu_i2_mdq-2Dappliance&d=DwICAg&c=pZJPUDQ3SB9JplYbifm4nt2lEVG5pWx2KikqINpWlZM&r=EUBHI54mtQDlbcqo5rUTdQ&m=Q5QVNsUgDZCYGE9T6JvxnV0P_wR7bfL2ShIpixlextk&s=AjTbFpMean3LtRh-rE2NUppEQ_upoFGygqTcXOFWz3o&e=

Comments are welcome/desired.


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor,
Scott
Sent: Monday, February 12, 2018 3:43 PM
To: Shib Users <users at shibboleth.net><mailto:users at shibboleth.net>
Subject: RE: InCommon metadata aggregate exceeds 50MB

There's not much choice, is there?  Will dynamic metadata be available
soon?

Ditto. Starting to look as though I'll have to spend a day or two standing
something up for myself, it's probably inevitable for redundancy anyway at
the end of the day.

-- Scott

--
For Consortium Member technical support, see
https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=pZJPUDQ3SB9JplYbifm4nt2lEVG5pWx2KikqINpWlZM&r=EUBHI54mtQDlbcqo5rUTdQ&m=Q5QVNsUgDZCYGE9T6JvxnV0P_wR7bfL2ShIpixlextk&s=O3SrjZC6BPEyqJQRutEU97MJv5o922rmca5RZhkzd9w&e=
To unsubscribe from this list send an email to users-
unsubscribe at shibboleth.net<mailto:unsubscribe at shibboleth.net>
--
For Consortium Member technical support, see https://urldefense.proofpoint.com/v2/url?u=https-3A__wiki.shibboleth.net_confluence_x_coFAAg&d=DwICAg&c=pZJPUDQ3SB9JplYbifm4nt2lEVG5pWx2KikqINpWlZM&r=EUBHI54mtQDlbcqo5rUTdQ&m=Q5QVNsUgDZCYGE9T6JvxnV0P_wR7bfL2ShIpixlextk&s=O3SrjZC6BPEyqJQRutEU97MJv5o922rmca5RZhkzd9w&e=
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180320/d99d36c0/attachment.html>