...
Keep your metadata up to date
| Panel |
|---|
| Warning |
|---|
You should must ensure that your SP's copy of the MIT metadata is kept up to date. The current metadata is available in http://web.mit.edu/touchstone/shibboleth/config/metadata/MIT-metadata.xml. The easiest way to maintain the metadata is by configuring a <MetadataProvider> element in shibboleth2.xml which points at this URL. (This will be set up for you automatically if you use the gen-shib2 procedure with the shibboleth2.xml.in template, as discussed above). The Shibboleth 2.x SP software will automatically refresh the metadata periodically. If you are running Shibboleth 1.3, or prefer not to have Shibboleth refresh the metadata automatically for some reason, then you must use a cron job (or other regularly scheduled procedure) which runs a script to download and install the latest metadata. A sample of such a script is available in http://web.mit.edu/touchstone/shibboleth/config/metadata/update-metadata.sh-example. Adjust it as necessary for your installation; in particular, if you did not install from the stock RPMs from Internet2, you will probably need to adjust the setting for the Shibboleth etc directory at the top of the script. The Shibboleth SP software detects and loads the updated metadata automatically; there is no need to restart the web server or shibd. |
|
...