<div dir="ltr">Thanks Peter!<div><br></div><div>Any other idea regarding the other questions?</div><div><br></div><div>Thanks!</div><div><br></div><div>Best,</div><div><br></div><div>Thomas</div></div><div class="gmail_extra">
<br><br><div class="gmail_quote">On Thu, Oct 31, 2013 at 12:15 PM, Peter Schober <span dir="ltr"><<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
* Thomas Jones <<a href="mailto:thomas.jones.g@gmail.com">thomas.jones.g@gmail.com</a>> [2013-10-31 16:32]:<br>
<div class="im">> Peter I don't understand:<br>
><br>
> > Note that for locally managed metadata there's no gain in having<br>
> > any validUntil on the EntityDescriptor. So leaving that out is one<br>
> > possibility.<br>
><br>
> Since you mention that validUntil is useless in this context, how can I<br>
> make a local managed metadata expired?<br>
<br>
</div>I meant maintaining a validUntil XML attribute (value) on the<br>
EntityDescriptor for a static, unsigned, local file (if that is in<br>
fact what you'd doing), doesn't add anything useful. So I suggested to<br>
remove the validUntil attribute from the local file. Then it simply<br>
cannot expire. It's local to your IdP, so you have other ways of<br>
dealing with that entity.<br>
<div class="im"><br>
> > The other one is setting requireValidMetadata="false" on the IdP's<br>
> > MetadataProvider for that custom relying party, but I see you<br>
> > already have that (so either way an expired EntityDescriptor from<br>
> > a local file shouldn't disrupt operations).<br>
> > -peter<br>
><br>
> is not that what is happening? (the operation it's been<br>
> disrupted). Due the fact that the EntityDescriptor is not valid (I'm<br>
> assuming that the reason is because it has expired) is showing that<br>
> it's treating the relyingParty as anonymous, right?<br>
<br>
</div>What I meant to say (maybe I didn't, English is not my native<br>
language): The fact that you already had requireValidMetadata="false"<br>
on the metadata provider for that local file should rule out expired<br>
entities based on the value of validUntil. So watever is or isn't in<br>
validUntil (or whether there is such an attribute in the XML at all)<br>
should /not/ cause the entity to expire (i.e, should not disrupt<br>
operations by treating the entity as an anonymous RP).<br>
Now you're saying it did disrupt operations, so I don't have an<br>
explanation for that other than that it's either a bug and/or it<br>
cannot have anything to do with validUntil.<br>
<div class="HOEnZb"><div class="h5">-peter<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>