Error with SPs registered with InCommon

[Rodriguez, Eric]

Thank you. I found the setting in the metadata-providers.xml configuration file. Worked like a charm. Now to get on that InCommon distro list and look to the long term. Thank you again.

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Rodriguez, Eric via users
Sent: Tuesday, February 18, 2025 11:31 AM
To: Shib Users <users at shibboleth.net>
Cc: Rodriguez, Eric <rodriguezer at longwood.edu>
Subject: RE: Error with SPs registered with InCommon

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
CAUTION: This is an EXTERNAL email. Do not click links or open attachments unless you recognize the sender and know the content is safe.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Total Shibboleth neophyte here, so I apologize, but is this to be edited in the XML file directly or a configuration file in the IdP directory? Looking now. And thank you fine folks for the insights.

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott via users
Sent: Tuesday, February 18, 2025 11:29 AM
To: Shib Users <users at shibboleth.net>
Cc: Cantor, Scott <cantor.2 at osu.edu>
Subject: Re: Error with SPs registered with InCommon

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
CAUTION: This is an EXTERNAL email. Do not click links or open attachments unless you recognize the sender and know the content is safe.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

> You need to change the validUntil period to 21 days for now. 

Specifically the rule used in the RequireValidUntil filter applied to prevent stale metadata from being injected back into an IdP from a DNS or routing  hijack.

-- Scott


-- 
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

-- 
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net