Shibboleth Developers

["Scott Cantor" <>]

> mdquery does not find anything unless I add the -nostrict option.  Then
> it finds the IdP just fine.  Very promising.  How would I go about
> translating that -nostrict into shibboleth2.xml settings?

You don't, that means you're reading expired metadata. The InCommon metadata
doesn't (yet) have an expiration date in it, so my guess is there's a
porting problem causing libsaml to slap a bogus expiration date on it.

There are some ugly macros in saml/internal.h defining SAMLTIME_MAX. That's
probably the source of the problem.

The comments in the file may lead you somewhere, but I guess I'd check on
what some of the dependent macros are. It may be guessing sizeof(time_t)
wrong. The single biggest 64-bit problem in the code is that time_t isn't
always 64-bit, and when it is, the native data type is platform dependent.

My guess is the code's overflowing
(saml/saml2/metadata/XMLMetadataProvider.cpp).

-- Scott