Re: [Unity-idm-discuss] IdP metadata are not reloaded correct

[Krzysztof B. <kb...@un...>]

Hi Sander,

W dniu 19.04.2017 o 11:34, Sander Apweiler pisze:
> Hi Krzysztof,
>
> I got a problem report by an user about broken login with his home IdP.
> The IdP changed his certificate and it was not trusted by unity.
>
> [2017-04-19 07:32:47,210 [qtp304966690-1742]
> WARN  unity.server.saml.SAMLRetrievalUI  - SAML response verification or
> processing failed
> pl.edu.icm.unity.server.authn.AuthenticationException: The SAML response
> is either invalid or is issued by an untrusted identity provider.]
>
> This IdP comes with eduGain metadata. The Metadata URL is updated once
> per hour. Reloading SAML authenticator did not solve the problem. A
> restart solved the problem. But restarts during the the working time are
> not very welcome. Is there another solution to solve this problem?

I'll look into it - likely some cache is not purged after metadata reload.

Thanks for the info
KB