Shibboleth Developers

[Chad La Joie <>]

On 1/7/11 3:42 AM, Lukas Hämmerle wrote:
> One of our universities would like to use resolvertest in order to do
> account checking (using the persistentId as NameID). Their production SP
> uses a FileBackedHTTPMetadataProvider. Therefore, the resolvertest
> reloads and verifies metadata each time it is fired up. This of course
> is quite inefficient.

Then they should upgrade to 2.4 which retains the metadata cache and 
ETag across restarts.  So it should only be doing a conditional GET.

> One solution to this problem would be if it was possible to point the
> resolvertest script to another shibboleth2.xml configuration, which
> would use a local metadataprovider and other special configuration
> options. On
> https://spaces.internet2.edu/display/SHIB2/NativeSPresolvertest I could
> not find anything on this subject but maybe there is already an
> undocumented feature for this :-)
>
> Otherwise, I would create a feature request for this unless there is
> something that speaks against this. Or unless there is a better way to
> query a user's attributes with an AttributeQuery without the user's
> interaction.

It seems like a useful feature, regardless of the metadata provider 
issue, so I'd say go ahead and file a request.
--
Chad La Joie
http://itumi.biz
trusted identities, delivered