LocalDynamicMetadataProvider at the SP

Nate Klingenstein ndk at signet.id
Sat Aug 3 23:59:54 EDT 2019


Martin,

> is the LocalDynamicMetadataProvider at the SP supposed to work like the
> one at the IdP?

The one on SAMLtest does.

> https://wiki.shibboleth.net/confluence/display/SP3/LocalDynamicMetadataProvider
> suggests that yes, except that the files should not carry a ".xml"
> extension, so just the uuids, right?

SHA-1 hashes rather than UUIDs.  I have no idea whether the .xml extension is mandatory, but it is on all the uploads on SAMLtest.

> Then I have two questions: is the
> sourceDirectory relative to /etc/shibboleth?

I use absolute paths, but I would presume so.  Will be corrected if wrong.

> And second, what needs to
> be done to make these metadata show up in the DiscoFeed? Together with
> some students we tried to get this work, to no avail.

I don't think they'll appear in the DiscoFeed along with any of the other dynamic providers, as one of the primary goals was to get away from monolithic files, and much of the dynamic lookup work was done for MDQ.  MDQ is capable of listing all its providers, but it does so itself:

3.2.2.  Request All Entities

   A metadata query request for all entities known to the responder is
   performed by issuing an HTTP GET request to a URL constructed as the
   concatenation of the following components:

   o  The responder's base URL.

   o  The string "entities".

   For example, with a base URL of "http://example.org/mdq/", a query
   for all entities would be performed by an HTTP GET request to the
   following URL:

   http://example.org/mdq/entities

SAMLtest does not display SP's in the DiscoFeed in its present configuration, but it did when it was using one gigantic local aggregate.

Again, some of this is just intuition, but if I'm right, it'd be a neat feature to request.

Take care,
Nate.


More information about the users mailing list