<html><body><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal">I get a warning like the following when my IdP v4.0.1 services CAS requests:</span></font><div><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><br></span></font></div><div><p style="margin:0px;font-stretch:normal;line-height:normal"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures">00:15:09:542 WARN [72.35.110.140] org.opensaml.saml.metadata.resolver.impl.AbstractDynamicHTTPMetadataResolver:354 > Metadata Resolver FunctionDrivenDynamicHTTPMetadataResolver URL</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(255,255,255);background-color:rgb(0,0,0)">MDQ</span><span style="font-variant-ligatures:no-common-ligatures">_incommon: Non-ok status code '404' returned from remote metadata source: <a href="https://mdq.incommon.org/entities/uid-services" class="linkified" target="_blank">https://mdq.incommon.org/entities/uid-services</a></span></span></font></p><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><br class="Apple-interchange-newline"></span></font></div><div><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><br></span></font></div><div><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal">cas-protocol.xml configuration should, AFAIK, avoid triggering MDQ or InCommon use:</span></font></div><div><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><br></span></font></div><div><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(180,36,25)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(200,20,201)">util</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">list </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">id</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"shibboleth.CASServiceRegistries"</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">></span></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(180,36,25)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><ref </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">bean</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"shibboleth.CASServiceRegistry"</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> /></span></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(46,174,187)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures"></</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(200,20,201)">util</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span style="font-variant-ligatures:no-common-ligatures">list></span></span></font></p><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><br class="Apple-interchange-newline"></span></font></div><div><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="color:rgb(46,174,187)">The only places where the group name is used are in the CAS registry in cas-protocol.xml:</span><br></span></font></div><div><span style="color:rgb(46,174,187);font-style:normal"><font face=".AppleSystemUIFont" size="2"><br></font></span></div><div><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(180,36,25)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><bean </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">class</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"net.shibboleth.idp.cas.service.ServiceDefinition"</span></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(180,36,25)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">c</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">regex</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"^https?://epay\.alaska\.edu(:\d+)?(/.*)?$"</span></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(46,174,187)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">p</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">group</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0);background-color:rgb(135,138,4)">uid-</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">services"</span></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(46,174,187)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">p</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">authorizedToProxy</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"false"</span><span style="font-variant-ligatures:no-common-ligatures"> /></span></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(46,174,187)"><span style="font-variant-ligatures:no-common-ligatures;font-style:normal"><font face=".AppleSystemUIFont" size="2"><br></font></span></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(46,174,187)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal">in relying-party.xml</span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(46,174,187)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><br></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(64,11,217)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures"><!-- CAS services needing UID as CAS username --></span></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(180,36,25)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><bean </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">parent</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"RelyingPartyByGroup"</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">c</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">groupNames</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0);background-color:rgb(135,138,4)">uid-</span><span style="font-variant-ligatures:no-common-ligatures">services"</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">></span></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(180,36,25)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><property </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">name</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"profileConfigurations"</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">></span></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><list></span></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(180,36,25)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><bean </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">parent</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"CAS.LoginConfiguration"</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> /></span></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(180,36,25)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><bean </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">parent</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"CAS.ValidateConfiguration"</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">p</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">userAttribute</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"uid"</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">/></span></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"></list></span></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"></property></span></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"></bean></span></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(46,174,187)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><br class="Apple-interchange-newline" style="color:rgb(0,0,0)"></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(46,174,187)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal">and in attribute-filter.xml</span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(46,174,187)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><br></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(180,36,25)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><AttributeFilterPolicy </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">id</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"releaseToCASuidServcies"</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">></span></span></font></p><p style="color:rgb(46,174,187);margin:0px;font-stretch:normal;line-height:normal"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures"><PolicyRequirementRule </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">xsi</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(64,11,217)">:</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">type</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"InEntityGroup"</span><span style="font-variant-ligatures:no-common-ligatures"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(47,180,29)">groupID</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0);background-color:rgb(135,138,4)">uid-</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">services"</span><span style="font-variant-ligatures:no-common-ligatures">/></span></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(47,180,29)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"><AttributeRule </span><span style="font-variant-ligatures:no-common-ligatures">attributeID</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"uid"</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)"> </span><span style="font-variant-ligatures:no-common-ligatures">permitAny</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(180,36,25)">"true"</span><span style="font-variant-ligatures:no-common-ligatures;color:rgb(46,174,187)">/></span></span></font></p><p style="color:rgb(46,174,187);margin:0px;font-stretch:normal;line-height:normal"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures;color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures"></AttributeFilterPolicy></span></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(46,174,187)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><br class="Apple-interchange-newline" style="color:rgb(0,0,0)"></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(46,174,187)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal">Seems one of those is triggering am MDQ query to the InCommon metadata for </span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(46,174,187)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal">mysterious (to me) reason. </span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(46,174,187)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><br></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(46,174,187)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal">How do I prevent those needless remote queries?</span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(46,174,187)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal"><br></span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(46,174,187)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal">David St. Pierre Bantz</span></font></p><p style="margin:0px;font-stretch:normal;line-height:normal;color:rgb(46,174,187)"><font face=".AppleSystemUIFont" size="2"><span style="font-style:normal">U Alaska IAM</span></font></p></div></body></html>