LocalDynamic + MetadataFilters = possible bug?

Cantor, Scott cantor.2 at osu.edu
Wed Oct 14 16:24:31 UTC 2020


On 10/14/20, 12:03 PM, "users on behalf of Mak, Steve" <users-bounces at shibboleth.net on behalf of makst at upenn.edu> wrote:

>    We stick our SP md files into the directories, and they get dynamically injected EntityAttributes on load, that control
> which attributes they get.

I don't have any filters on my LocalDynamic case, but I do for MDQ, they're working fine.

>    We use IdP v4.0.1 and never saw this problem in v3.4.6. I was wondering if the md localdynamic process is loading the
> md file and sending it to the IdP as loaded before the metadata filter finishes adding the dynamic value. I didn't think it
> was possible, and I'm sure it isn't. But I'm trying to understand the root cause.

It's not. Check your log for errors at startup and when the filter runs for that SP, you might just be hitting the XML namespace bug that crops up with some filter configs. But that would be all the time, not just per-transaction.

-- Scott




More information about the users mailing list