Uploaded image for project: 'Shibboleth User Interface'
  1. Shibboleth User Interface
  2. SHIBUI-2500

when filesystem MD export is enabled, MD not exported on update

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Minor
    • None
    • None
    • None

    Description

      When configured to export metadata to a file system, the shibui seems to cycle through exporting each metadata file one at a time, every four seconds, instead of exporting the MD when it changes.

      ```

      ...

      shibui  | 2022-12-15 22:00:28.371  INFO 9 — [   scheduling-1] .u.s.EntityDescriptorFilesScheduledTasks : Overwriting entity descriptor file [/usr/local/mcomm/shibboleth-idp/metadata/dynamic/1196e7b85ecfd0bf581861bdeb237fda1aba27f6.xml] for entity id https://testgwst.dsc.umich.edu/unitedway/shibboleth
      shibui  | 2022-12-15 22:00:33.283  INFO 9 — [   scheduling-1] .u.s.EntityDescriptorFilesScheduledTasks : Overwriting entity descriptor file [/usr/local/mcomm/shibboleth-idp/metadata/dynamic/7b0c4b7f6df5263e8e81a973ca0c5f3f25c06a1b.xml] for entity id https://testgwst.dsc.umich.edu/shibboleth
      shibui  | 2022-12-15 22:00:38.142  INFO 9 — [   scheduling-1] .u.s.EntityDescriptorFilesScheduledTasks : Overwriting entity descriptor file [/usr/local/mcomm/shibboleth-idp/metadata/dynamic/846baf5eb0997583c218cc4e9be70fbe6ce1dc29.xml] for entity id https://testing.vialivetext.com/auth/cas/callback
      shibui  | 2022-12-15 22:00:38.215  INFO 9 — [   scheduling-1] .u.s.EntityDescriptorFilesScheduledTasks : Overwriting entity descriptor file [/usr/local/mcomm/shibboleth-idp/metadata/dynamic/c9ab72131dcc8fd6cf42f4820444d7fc80293544.xml] for entity id https://testsite.bus.umich.edu/shibboleth
      shibui  | 2022-12-15 22:00:43.444  INFO 9 — [   scheduling-1] .u.s.EntityDescriptorFilesScheduledTasks : Overwriting entity descriptor file [/usr/local/mcomm/shibboleth-idp/metadata/dynamic/d72d2b1a52156f86f7a76ae5cbdaedccd481bcfe.xml] for entity id https://teststudent–Full.cs20.my.salesforce.com

      ...

      ```

       

      I believe that if the metadata hasn't changed, the file doesn't update, but I also believe that rather than updating the metadata when it's changed, shibui doesn't update the file until it reaches the "appropriate" place in the export loop.

       

      We have close to 1500 SPs registered, so that means any given SP's metadata is only updated every ~100 minutes or so.  I assume the updated metadata would be available immediately if queried via MDQ.

      Attachments

        Issue Links

          Activity

            People

              steven.erickson@at.internet2.edu Steven Erickson (unicon.net)
              liam.hoekenga@at.internet2.edu Liam Hoekenga (umich.edu)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: