<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
David,</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I see this happen here too. I haven't figured it out yet, so I'm just adding my "me too!"</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks,</div>
<div style="font-family: Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Andy<br>
</div>
<div>
<div id="appendonsend"></div>
<div style="font-family:Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of IAM David Bantz <dabantz@alaska.edu><br>
<b>Sent:</b> Monday, February 8, 2021 1:17 PM<br>
<b>To:</b> Users@shibboleth.net <Users@shibboleth.net><br>
<b>Subject:</b> unexpected MDQ calls & warnings</font>
<div> </div>
</div>
<div>
<p><span style="color:#D73F09">[This email originated from outside of OSU. Use caution with links and attachments.]</span></p>
<div><font size="2" face=".AppleSystemUIFont"><span style="font-style:normal">I get a warning like the following when my IdP v4.0.1 services CAS requests:</span></font>
<div><font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><br>
</span></font></div>
<div>
<p style="margin:0px; font-stretch:normal; line-height:normal"><font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures">00:15:09:542 WARN [72.35.110.140] org.opensaml.saml.metadata.resolver.impl.AbstractDynamicHTTPMetadataResolver:354
> Metadata Resolver FunctionDrivenDynamicHTTPMetadataResolver URL</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(255,255,255); background-color:rgb(0,0,0)">MDQ</span><span style="font-variant-ligatures:no-common-ligatures">_incommon:
Non-ok status code '404' returned from remote metadata source: <a href="https://mdq.incommon.org/entities/uid-services" class="x_linkified" target="_blank">https://mdq.incommon.org/entities/uid-services</a></span></span></font></p>
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><br class="x_Apple-interchange-newline">
</span></font></div>
<div><font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><br>
</span></font></div>
<div><font size="2" face=".AppleSystemUIFont"><span style="font-style:normal">cas-protocol.xml configuration should, AFAIK, avoid triggering MDQ or InCommon use:</span></font></div>
<div><font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><br>
</span></font></div>
<div>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(180,36,25)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"><</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(200,20,201)">util</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(64,11,217)">:</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)">list </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">id</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"shibboleth.CASServiceRegistries"</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)">></span></span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(180,36,25)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"><ref </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">bean</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"shibboleth.CASServiceRegistry"</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"> /></span></span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(46,174,187)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures"></</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(200,20,201)">util</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(64,11,217)">:</span><span style="font-variant-ligatures:no-common-ligatures">list></span></span></font></p>
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><br class="x_Apple-interchange-newline">
</span></font></div>
<div><font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="color:rgb(46,174,187)">The only places where the group name is used are in the CAS registry in cas-protocol.xml:</span><br>
</span></font></div>
<div><span style="color:rgb(46,174,187); font-style:normal"><font size="2" face=".AppleSystemUIFont"><br>
</font></span></div>
<div>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(180,36,25)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"><bean </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">class</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"net.shibboleth.idp.cas.service.ServiceDefinition"</span></span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(180,36,25)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">c</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(64,11,217)">:</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">regex</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"^https?://epay\.alaska\.edu(:\d+)?(/.*)?$"</span></span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(46,174,187)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">p</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(64,11,217)">:</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">group</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(180,36,25)">"</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0); background-color:rgb(135,138,4)">uid-</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(180,36,25)">services"</span></span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(46,174,187)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">p</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(64,11,217)">:</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">authorizedToProxy</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(180,36,25)">"false"</span><span style="font-variant-ligatures:no-common-ligatures"> /></span></span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(46,174,187)">
<span style="font-variant-ligatures:no-common-ligatures; font-style:normal"><font size="2" face=".AppleSystemUIFont"><br>
</font></span></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(46,174,187)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal">in relying-party.xml</span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(46,174,187)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><br>
</span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(64,11,217)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures"><!-- CAS services needing UID as CAS username
--></span></span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(180,36,25)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"><bean </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">parent</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"RelyingPartyByGroup"</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">c</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(64,11,217)">:</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">groupNames</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0); background-color:rgb(135,138,4)">uid-</span><span style="font-variant-ligatures:no-common-ligatures">services"</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)">></span></span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(180,36,25)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"><property </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">name</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"profileConfigurations"</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)">></span></span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal"><font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"><list></span></span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(180,36,25)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"><bean </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">parent</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"CAS.LoginConfiguration"</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"> /></span></span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(180,36,25)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"><bean </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">parent</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"CAS.ValidateConfiguration"</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">p</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(64,11,217)">:</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">userAttribute</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"uid"</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)">/></span></span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal"><font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"></list></span></span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal"><font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"></property></span></span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal"><font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"></bean></span></span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(46,174,187)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><br class="x_Apple-interchange-newline" style="color:rgb(0,0,0)">
</span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(46,174,187)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal">and in attribute-filter.xml</span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(46,174,187)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><br>
</span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(180,36,25)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"><AttributeFilterPolicy </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">id</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures">"releaseToCASuidServcies"</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)">></span></span></font></p>
<p style="color:rgb(46,174,187); margin:0px; font-stretch:normal; line-height:normal">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures"><PolicyRequirementRule </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">xsi</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(64,11,217)">:</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">type</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(180,36,25)">"InEntityGroup"</span><span style="font-variant-ligatures:no-common-ligatures"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(47,180,29)">groupID</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(180,36,25)">"</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0); background-color:rgb(135,138,4)">uid-</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(180,36,25)">services"</span><span style="font-variant-ligatures:no-common-ligatures">/></span></span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(47,180,29)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"><AttributeRule </span><span style="font-variant-ligatures:no-common-ligatures">attributeID</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(180,36,25)">"uid"</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)"> </span><span style="font-variant-ligatures:no-common-ligatures">permitAny</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)">=</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(180,36,25)">"true"</span><span style="font-variant-ligatures:no-common-ligatures; color:rgb(46,174,187)">/></span></span></font></p>
<p style="color:rgb(46,174,187); margin:0px; font-stretch:normal; line-height:normal">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><span style="font-variant-ligatures:no-common-ligatures; color:rgb(0,0,0)"> </span><span style="font-variant-ligatures:no-common-ligatures"></AttributeFilterPolicy></span></span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(46,174,187)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><br class="x_Apple-interchange-newline" style="color:rgb(0,0,0)">
</span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(46,174,187)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal">Seems one of those is triggering am MDQ query to the InCommon metadata for </span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(46,174,187)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal">mysterious (to me) reason. </span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(46,174,187)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><br>
</span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(46,174,187)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal">How do I prevent those needless remote queries?</span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(46,174,187)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal"><br>
</span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(46,174,187)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal">David St. Pierre Bantz</span></font></p>
<p style="margin:0px; font-stretch:normal; line-height:normal; color:rgb(46,174,187)">
<font size="2" face=".AppleSystemUIFont"><span style="font-style:normal">U Alaska IAM</span></font></p>
</div>
</div>
</div>
</div>
</body>
</html>