<div dir="ltr">@John<br><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">You might want to look at using the metadata aggregator (<a href="https://wiki.shibboleth.net/confluence/display/MA1/Home" target="_blank">https://wiki.shibboleth.net/confluence/display/MA1/Home</a>)
to combine the individual metadata files into s single file wrapped
with an <EntitiesDescriptor> tag. That way, the SP only has to
load one file.<br></blockquote><div><br></div><div>I will take a look at it but the version is not yet final so it shouldn't be used in a production environment.<br><br></div><div>@Scott<br></div><div>Thanks for your answers. <br>
<blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">So does testshib, but there is no effective way to do that today other<br>
than by building or using tools to assemble metadata and updating it<br>
whereever it's being loaded from.<br></blockquote><div><br></div><div>Which tool does testshib use to aggregate Metadata. Does the tool provided by John can be trusted enough to be used in production ?<br><br><br><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">
That is not a model that I design for. The SP is designed to run with<br>
applications, not separately from them.<br></blockquote><div><br></div><div>ShibbolethSP is working hand to hand with Apache. I use this Apache as a load balancer and to authenticate users via Shibboleth.<br>Maybe I'm wrong and Shibboleth should be running on each web app that are behind the load balancer ?<br>
<br><br><blockquote style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex" class="gmail_quote">If you mean the configuration itself, you can specify it, but unless you<br>
mean a file share or something, that's not going to help you<br></blockquote><div> </div><div>I don't really understand. What would solve my issue would update my shibboleth configuration (adding removing MetadataProviders) from distant calls.<br>
</div><div>The only way I could find since now was editing the shibboleth2.xml file.<br></div><div> </div><br></div><div>Thank you<br></div></div></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">2014-08-20 16:03 GMT+02:00 Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="">On 8/20/14, 4:36 AM, "Paolo de vathaire" <<a href="mailto:paolodv@free.fr">paolodv@free.fr</a>> wrote:<br>
><br>
>I have an application where administrators can upload their Idp Metadata<br>
>so we can trust it and allow their users to login.<br>
<br>
</div>So does testshib, but there is no effective way to do that today other<br>
than by building or using tools to assemble metadata and updating it<br>
whereever it's being loaded from.<br>
<br>
Or you can write a plugin for a new metadata source, which I doubt you<br>
have any interest in doing.<br>
<div class=""><br>
>I saw that in Shib 3.5, I could specify a folder where to look for<br>
>Metadata files but I'm stuck on Debian Squeeze so I'm stuck on Shib 2.3.1<br>
>and anyway Metadata files in this folder are not automatically loaded as<br>
>them are created.<br>
<br>
</div>testshib addresses that by triggering a configuration reload, but that<br>
model only works if the number of files in the folder is something<br>
reasonable, it was not designed to handle hundreds of files.<br>
<div class=""><br>
>My application server doesn't have any access to the Apache/Shib server<br>
>so it cannot edit the shibboleth2.xml file.<br>
<br>
</div>That is not a model that I design for. The SP is designed to run with<br>
applications, not separately from them.<br>
<div class=""><br>
> I believe it's impossible to specify a distant or even a different path<br>
>for this file unless I rebuild the sources.<br>
<br>
</div>If you mean the configuration itself, you can specify it, but unless you<br>
mean a file share or something, that's not going to help you.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</div></div></blockquote></div><br></div>