Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
en:aai:mdq [2021/07/14 13:40] – [Weitere Hinweise und bekannte Probleme] translated section Silke Meyeren:aai:mdq [2024/02/02 09:44] (current) – Wolfgang Pempe
Line 1: Line 1:
-FIXME **This page is not fully translated, yet.** 
- 
 ====== Metadata Query Service (MDQ) ====== ====== Metadata Query Service (MDQ) ======
  
Line 12: Line 10:
 A Metadata Query Service has to meet high requirements in terms of availability and resilience. DFN-AAI's pilot lets us gain experience and improve the service for production. A Metadata Query Service has to meet high requirements in terms of availability and resilience. DFN-AAI's pilot lets us gain experience and improve the service for production.
  
-Please note  +Please see the section on [[en:aai:mdq#further_hints_and_known_issues|further hints and known issues]] below.
- +
-Beachten Sie bitte auch die [[de:aai:mdq#weitere_hinweise_und_bekannte_probleme|weiteren Hinweise]] unten.+
  
 **Important notice:** The MDQ service does not deliver **any** [[de:metadata_local|local metadata]]! You still have to include them via a static metadata provider, type ''FileBackedHTTPMetadataProvider'' for Shibboleth IdPs, type ''XML'' for Shibboleth SPs. **Important notice:** The MDQ service does not deliver **any** [[de:metadata_local|local metadata]]! You still have to include them via a static metadata provider, type ''FileBackedHTTPMetadataProvider'' for Shibboleth IdPs, type ''XML'' for Shibboleth SPs.
Line 24: Line 20:
  
 **Certificate for the validation of the signature of DFN-AAI MDQ Metadata** (PEM format) \\ **Certificate for the validation of the signature of DFN-AAI MDQ Metadata** (PEM format) \\
-SHA256 Fingerprint: 73:5B:9E:76:8A:A6:33:73:4D:3E:C6:D2:1E:98:B3:D9:03:74:B9:87:16:52:16:53:32:26:9A:B2:55:FC:CA:D2 \\ +SHA256 Fingerprint: 75:18:98:F6:E8:23:21:E8:B1:DC:71:6B:D0:AB:50:F0:C2:DB:9D:CE:4B:2B:A1:88:B1:42:DB:99:13:DB:0D:E9 \\ 
-https://www.aai.dfn.de/fileadmin/metadata/dfn-aai-mdq.pem +https://www.aai.dfn.de/metadata/dfn-aai-mdq.pem 
  
 ===== Examples ===== ===== Examples =====
Line 53: Line 49:
 </file> </file>
  
-We are happy to document further filter mechanisms [[hotline@aai.dfn.de|on demand]]. 
  
 ==== Shibboleth SP 3.2.x ==== ==== Shibboleth SP 3.2.x ====
Line 72: Line 67:
 </file> </file>
  
-=== Ausschließlich IdPs aus DFN-AAI Advanced === +We are happy to document further filter mechanisms [[hotline@aai.dfn.de|on demand]].
-(Zur Unterscheidung zwischen "Advanced" und "Basic" siehe die Erläuterungen zu den [[de:degrees_of_reliance|Verlässlichkeitsklassen]]) +
- +
-**Wichtig:** damit der u.g. Filter funktioniert, muss im Root-Element ''SPConfig'' der Datei ''shibboleth2.xml'' der Namespace ''xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"'' gesetzt sein. +
- +
-<file xml /etc/shibboleth/shibboleth2.xml> +
-    <MetadataProvider type="MDQ" id="dfn_aai_mdq_advanced_only" ignoreTransport="true" +
-                  cacheDirectory="mdq-aai-dfn-de" +
-                  maxCacheDuration="3600" minCacheDuration="600" +
-                  baseUrl="https://mdq.aai.dfn.de"> +
-           <MetadataFilter type="Signature" certificate="/etc/ssl/aai/dfn-aai-mdq.pem"/> +
-           <MetadataFilter type="Include" matcher="EntityAttributes"> +
-               <saml:Attribute Name="http://aai.dfn.de/loa/degree-of-reliance" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"> +
-                 <saml:AttributeValue>advanced</saml:AttributeValue> +
-               </saml:Attribute> +
-           </MetadataFilter> +
-    </MetadataProvider> +
-</file> +
- +
-Weitere Filtermöglichkeiten werden gerne auf [[hotline@aai.dfn.de|Anfrage]] dokumentiert. +
- +
-\\+
  
 ===== Further hints and known issues ===== ===== Further hints and known issues =====
  • Last modified: 3 years ago