Thanks. I am just trying to see how IdP could handle these error cases, I don't want IdP to be down if only one SP metadata file is not accessible. In production, everything could happen.<br><br>I see some documents in <a href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPMetadataProvider">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPMetadataProvider</a>.<br>
<br>I tried the following scenario:<br>1. Config relying-party.xml like this:<br>
<p class="MsoNormal"><metadata:MetadataProvider id="SP"
minRefreshDelay="PT1M" maxRefreshDelay="PT2M"
metadataFile="E:\metadata.xml"
xsi:type="metadata:FilesystemMetadataProvider"/></p>
<br>2. Restart IdP<br>3. Everything works well now<br>4. I manually deleted E:\metadata.xml file<br>5. Based on the wiki, I am expecting the IdP to refresh the cache in max 2 minutes.<br>6. But after 5 minutes, I still don't see any error, IdP still return correct response.<br>
<br>Did it miss anything?<br><br clear="all"><div>Yaowen</div>
<br><br><div class="gmail_quote">On Tue, Mar 19, 2013 at 4:44 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im">On 3/19/13 6:58 PM, "Yaowen Tu" <<a href="mailto:yaowen.tu@gmail.com">yaowen.tu@gmail.com</a>> wrote:<br>
><br>
>Based on my experiment, If the metadata file does not exist, the whole<br>
>IdP won't work.<br>
<br>
</div>Why would you define a metadata source that didn't exist? The more common<br>
case is avoiding failure due to the file being invalid for whatever reason.<br>
<div class="im"><br>
>Is there a setting some where to tell the IdP to skip the the SPs whose<br>
>metadata file or URL is not accessible?<br>
<br>
</div>They have a failFast setting that can be disabled. I can't recall the<br>
exact spelling or wording, should be in the docs. In which case I'd ask<br>
what you searched on so that I can fix the docs to make it more findable.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div><br>