From: Sander A. <sa....@fz...> - 2022-03-30 07:11:22
Attachments:
smime.p7s
|
Good morning, we encountered a problem using unity.saml.requester.metadataSource.*.refreshInterval. Because the refresh of eduGAIN metadata takes up to 3-4 minutes and slows down the login, we decided to update it every 12 hours instead of every hour. For this we set unity.saml.requester.metadataSource.edugain.refreshInterval=43200 and restartet unity. But instead of expected reload at 7 a.m and 7 p.m. the metadata is updated ever hour. It seems that this parameter is not taken from the config file. Best regards, Sander -- Federated Systems and Data Juelich Supercomputing Centre phone: +49 2461 61 8847 fax: +49 2461 61 6656 email: sa....@fz... ----------------------------------------------------------------------- ----------------------------------------------------------------------- Forschungszentrum Juelich GmbH 52425 Juelich Sitz der Gesellschaft: Juelich Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498 Vorsitzender des Aufsichtsrats: MinDir Volker Rieke Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender), Karsten Beneke (stellv. Vorsitzender), Prof. Dr. Astrid Lambrecht, Prof. Dr. Frauke Melchior ----------------------------------------------------------------------- ----------------------------------------------------------------------- |
From: Krzysztof B. <kb...@un...> - 2022-03-30 10:33:11
|
Hi Sander, W dniu 30.03.2022 o 09:11, Sander Apweiler pisze: > Good morning, > we encountered a problem using > unity.saml.requester.metadataSource.*.refreshInterval. Because the > refresh of eduGAIN metadata takes up to 3-4 minutes and slows down the > login, we decided to update it every 12 hours instead of every hour. > For this we set > unity.saml.requester.metadataSource.edugain.refreshInterval=43200 > and restartet unity. But instead of expected reload at 7 a.m and 7 p.m. > the metadata is updated ever hour. It seems that this parameter is not > taken from the config file. I guess it is, but the algorithm there is bit simplified, i.e. refreshing takes place at the lowest refresh interval of your all saml metadata sources. I will open a ticket to improve that, shouldn't be hard. Cheers, Krzysztof |
From: Krzysztof B. <kb...@un...> - 2022-03-30 10:47:30
|
W dniu 30.03.2022 o 09:11, Sander Apweiler pisze: > Good morning, > we encountered a problem using > unity.saml.requester.metadataSource.*.refreshInterval. Because the > refresh of eduGAIN metadata takes up to 3-4 minutes and slows down the > login, we decided to update it every 12 hours instead of every hour. > For this we set > unity.saml.requester.metadataSource.edugain.refreshInterval=43200 > and restartet unity. But instead of expected reload at 7 a.m and 7 p.m. > the metadata is updated ever hour. It seems that this parameter is not > taken from the config file. And BTW in 3.9 refresh of edugain metadata should be in seconds. E.g. on my last test it was 19s, out of which more than a half was metadata download, which is not blocking anything. Cheers, Krzysztof |
From: Sander A. <sa....@fz...> - 2022-03-31 05:56:11
Attachments:
smime.p7s
|
Good morning Krzysztof, thanks for all the information. We updated our second metadata file to the 12 hour interval. Best regards, Sander On Wed, 2022-03-30 at 12:47 +0200, Krzysztof Benedyczak wrote: > W dniu 30.03.2022 o 09:11, Sander Apweiler pisze: > > Good morning, > > we encountered a problem using > > unity.saml.requester.metadataSource.*.refreshInterval. Because the > > refresh of eduGAIN metadata takes up to 3-4 minutes and slows down > > the > > login, we decided to update it every 12 hours instead of every > > hour. > > For this we set > > unity.saml.requester.metadataSource.edugain.refreshInterval=43200 > > and restartet unity. But instead of expected reload at 7 a.m and 7 > > p.m. > > the metadata is updated ever hour. It seems that this parameter is > > not > > taken from the config file. > > > And BTW in 3.9 refresh of edugain metadata should be in seconds. E.g. > on > my last test it was 19s, out of which more than a half was metadata > download, which is not blocking anything. > > Cheers, > Krzysztof > -- Federated Systems and Data Juelich Supercomputing Centre phone: +49 2461 61 8847 fax: +49 2461 61 6656 email: sa....@fz... ----------------------------------------------------------------------- ----------------------------------------------------------------------- Forschungszentrum Juelich GmbH 52425 Juelich Sitz der Gesellschaft: Juelich Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498 Vorsitzender des Aufsichtsrats: MinDir Volker Rieke Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender), Karsten Beneke (stellv. Vorsitzender), Prof. Dr. Astrid Lambrecht, Prof. Dr. Frauke Melchior ----------------------------------------------------------------------- ----------------------------------------------------------------------- |