<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body dir="auto">
<div dir="ltr"></div>
<div dir="ltr">Look at the downloaded IdP metadata and check for a 'validUntil' attribute in the EntityDescriptor element, see if it's 14 days from when you download it.</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">If it's there, you can either manually delete that until you get mdq working, or find an alternate source from the provider.</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">- Steve</div>
<div dir="ltr"><br>
<blockquote type="cite">On Sep 23, 2022, at 19:12, Marina Krenz <mvkrenz@ren-isac.net> wrote:<br>
<br>
</blockquote>
</div>
<blockquote type="cite">
<div dir="ltr">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style>@font-face { font-family: "Cambria Math"; }
@font-face { font-family: Calibri; }
@font-face { font-family: Geneva; }
p.MsoNormal, li.MsoNormal, div.MsoNormal { margin: 0in; font-size: 11pt; font-family: Calibri, sans-serif; }
span.EmailStyle20 { font-family: Calibri, sans-serif; color: windowtext; }
.MsoChpDefault { font-size: 10pt; }
@page WordSection1 { size: 8.5in 11in; margin: 1in; }
div.WordSection1 { page: WordSection1; }</style>
<div class="WordSection1">
<p class="MsoNormal">14 days sounds about right. I could not get shibboleth embedded discovery service to pull the IdP list. I cannot get mdq working, the list is just blank.<o:p></o:p></p>
<p class="MsoNormal">So I have downloaded an IdP metadata file and read that file from the file system not remotely.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">From: </span></b><span style="font-size:12.0pt;color:black">users <users-bounces@shibboleth.net> on behalf of "Mak, Steven via users" <users@shibboleth.net><br>
<b>Reply-To: </b>Shib Users <users@shibboleth.net><br>
<b>Date: </b>Friday, September 23, 2022 at 4:48 PM<br>
<b>To: </b>Shib Users <users@shibboleth.net><br>
<b>Cc: </b>"Mak, Steven" <makst@upenn.edu><br>
<b>Subject: </b>Re: Shib SP error : Unknown or Unusable Identity Provider<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Is the IdP metadata expiring? Are you rebooting about every 14 days?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">- Steve<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">On Sep 23, 2022, at 16:34, Marina Krenz <mvkrenz@ren-isac.net> wrote:<br>
<o:p></o:p></p>
</blockquote>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal"><span style="color:black">Hi,</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black">I have setup shibboleth SP and it seems that I need to keep rebooting it. </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black">After a specific period of time I get an error</span><o:p></o:p></p>
<p class="MsoNormal"><b><span style="font-size:14.0pt;font-family:"Geneva",sans-serif;color:black">Unknown or Unusable Identity Provider</span></b><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black">After rebooting shibd it does away.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black">Are there any settings I need to make to keep it up?</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black">Thank you</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black">Marina</span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">-- <br>
For Consortium Member technical support, see https://urldefense.com/v3/__https://shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!IBzWLUs!RUfgbJF4eYxZeBoV_OkZmkVFlhhoXHQ9i3ibH8dU4wsxN0ACNxf7WSOPrDX1HP_CHNWz1dKO8tbtJ6Rw$ <br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<o:p></o:p></p>
</div>
</blockquote>
<p class="MsoNormal">-- For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net
<o:p></o:p></p>
</div>
<span>-- </span><br>
<span>For Consortium Member technical support, see https://urldefense.com/v3/__https://shibboleth.atlassian.net/wiki/x/ZYEpPw__;!!IBzWLUs!TzfWcDqx-QkNAej2vFOebqZZNhuUlRy9lqlADVE6lzFszrChVrupy49P4P5qqtchaXJ9tJUaK61KXvKs$ </span><br>
<span>To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net</span><br>
</div>
</blockquote>
</body>
</html>