Thanks for all the replies to my metadata query - this is a great list! Thought I'd share the cause of our problems at Swansea...
According to our network people the company looking after the current upgrade of the all-Wales academic network had configured the routing tables incorrectly and so requests for the federation metadata were getting stuck in an endless router loop which strangely resulted in only some of the metadata servers' IPs being unreachable.
The problem seems to have been resolved following communication with the company and we can now access the metadata - hooray.
Our comms guys informed me that the issue should have affected anyone trying to access the metadata in Wales which is a bit worrying as theoretically every IdP in Wales should have had out of date metadata since the 11th June which is when we first noticed something strange was going on.
Just out of interest has anyone else in Wales had a problem accessing the metadata in the last month?
AL
Mr. Alexander Roberts
Web Development Officer
Library and Information Services
Swansea University/Prifysgol Abertawe
+44 (0)1792 513239
-----Original Message-----
From: Discussion list for Shibboleth developments [mailto:[log in to unmask]] On Behalf Of Ian Young
Sent: 22 July 2008 13:41
To: [log in to unmask]
Subject: Re: federation metadata refresh fail
Roberts A.L. wrote:
> Is it me or are other people getting error messages that the federation
> metadata cannot be accessed? We update ours every hour so I’m getting a
> lot of messages. I can’t access it via a browser here either.
It's working for me, for what that's worth.
There was a brief period earlier today when the available metadata
wasn't validating for some people, but I'm not aware of anything that
would have stopped it downloading.
If people do have problems, probably the most critical thing to
ascertain is the IP address you're not getting the file from... there
are at least three well-connected, high-spec machines serving this stuff
up (four most of the time) so it could in theory work for some people
but not others. A traceroute might help, too.
-- Ian
|