<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><span>OK - I federate with the Belgian academic federation and I have a Dutch school that connects to me with that. That worked fine for months.</span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span><br></span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span style="background-color: transparent;">Until today...</span><br></div><div style="font-family: arial, helvetica, sans-serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span><br></span></div><div style="font-family: arial, helvetica, sans-serif;
font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span>This morning I added a new private fed's metadata. shibd -check reports no issue. That client connects just fine. Then the BelNet customer sends me a message about an our ago...</span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span><br></span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span>They send me a message that they get a server 500 error. I check the logs and see no errors related to this unless it's this:</span></div><div style="font-family: arial, helvetica, sans-serif; font-size: 16px; color: rgb(0, 0, 0); background-color: transparent; font-style: normal;"><span><br></span></div><div><div>2013-01-18 12:11:54
ERROR Shibboleth.Listener [4800] isapi_shib_extension: remoted message returned an error: Message was signed, but signature could not be verified.</div><div>2013-01-18 12:11:54 ERROR Shibboleth.ISAPI [4800] isapi_shib_extension: Message was signed, but signature could not be verified.</div><div><br></div></div> <div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"> <div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt;"> <div dir="ltr"> <font size="2" face="Arial"> <hr size="1"> <b><span style="font-weight:bold;">From:</span></b> "Cantor, Scott" <cantor.2@osu.edu><br> <b><span style="font-weight: bold;">To:</span></b> Shib Users <users@shibboleth.net> <br> <b><span style="font-weight: bold;">Sent:</span></b> Friday, January 18, 2013 2:03 PM<br> <b><span style="font-weight: bold;">Subject:</span></b> Re: Metadata volume question<br> </font> </div> <br>
On 1/18/13 4:54 PM, "Mike Flynn" <<a ymailto="mailto:shibbolethlynda@yahoo.com" href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>> wrote:<br><br>>Is there a practical limit to the amount of metadata that my SP can<br>>consume? 2.4.3 on IIS7.<br><br>Yes, obviously the batches have to go at some point, but the only real<br>limit is memory and the number of entries to index and find efficiently,<br>which nobody is anywhere near even with nothing done to optimize it.<br><br>2.5 also drops the DOM by default to save memory.<br><br>-- Scott<br><br><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br> </div> </div> </div></body></html>