SP : ignored expired metadata instance / Unable to locate metadata for provider

[Mak, Steve]

<MetadataProvider type="XML"
        url="https://metadata.federation.renater.fr/renater/main/main-all-renater-metadata.xml"
      backingFilePath="main-all-renater-metadata.xml" reloadInterval="7200">
       <MetadataFilter type="RequireValidUntil" maxValidityInterval="2419200"/>
       <MetadataFilter type="Signature" certificate="renater-metadata-signing-cert-2016.pem"/>
    </MetadataProvider>

    <ApplicationOverride id="myspID" entityID="https://www.mysp.fr">
      <Sessions lifetime="28800" timeout="3600" relayState="ss:mem" checkAddress="false"
                consistentAddress="true" handlerSSL="true" cookieProps="https" handlerURL="/api/Shibboleth.sso">
            <SSO discoveryProtocol="SAMLDS" discoveryURL="https://discovery.renater.fr/renater">
              SAML2
            </SSO>
      </Sessions>
     <MetadataProvider type="XML"
        url="https://metadata.federation.renater.fr/renater/main/main-all-renater-metadata.xml"
      backingFilePath="main-all-renater-metadata.xml">
       <MetadataFilter type="RequireValidUntil" maxValidityInterval="2419200"/>
       <MetadataFilter type="Signature" certificate="renater-metadata-signing-cert-2016.pem"/>
     </MetadataProvider>

It looks like you have the federation defined twice, and the bottom version does NOT have a reloadInternal parameter set, which means default=0 (no reload).

It's likely that your shib is using the last loaded rule for this metadata provider so it's not reloading at all.

- Steve


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200924/cb67837a/attachment.htm>