testshib.org - The file you attempted to upload is too large

[Kim Johnsson]

Hi all,

Not sure this is the right place to ask, but I couldn't find anywhere else so I'll give it a shot.

I'm trying to test our ADFS IdP deployment using testshib.org, but when I upload the metadata I just get this message:
"The file you attempted to upload is too large. Please ensure the file is less than 40k and try again."

?My metadata file is 70KB. It has not been modified in any way, it comes straight from our ADFS web server. What am I doing wrong here? Am I supposed to edit and/or remove some parts of the metadata file??


Best regards

BORGHOLMS KOMMUN
Kim Johnsson
Systems Engineer, Municipal Executive Office?

[Nate Klingenstein]

Borgholms,

Not sure this is the right place to ask, but I couldn't find anywhere else so I'll give it a shot.

It's a great place to ask, incidentally.

I'm trying to test our ADFS IdP deployment using testshib.org<http://testshib.org/>, but when I upload the metadata I just get this message:
"The file you attempted to upload is too large. Please ensure the file is less than 40k and try again."

Wow. I changed the limit to 100k.

​My metadata file is 70KB. It has not been modified in any way, it comes straight from our ADFS web server.

That's very interesting. I'd be curious why it's that large.

What am I doing wrong here? Am I supposed to edit and/or remove some parts of the metadata file?​

In general, you need to make sure that your metadata matches the reality of your deployment. Whether you'd need to edit or remove anything to make that happen depends on what's in there and what you need.

Take care,
Nate.

[Rod Widdowson]

> I'd be curious why it's that large.

Me too. It must take a lot of imagination to make the metadata that big...

--
To unsubscribe from this list send an email to users-unsubscribe-***@public.gmane.org

[Peter Schober]

* Rod Widdowson <rdw-9S9LfY95rg2ttCpgsWEBFlaTQe2KTcn/@public.gmane.org> [2014-10-20 11:25]:
> > I'd be curious why it's that large.
>
> Me too. It must take a lot of imagination to make the metadata that big...

Not even an IDP descriptor plus an Attribute Authority plus an SP
descriptor all in the same entity, each with seperate decryption and
signing keys, would do that!
-peter
--
To unsubscribe from this list send an email to users-unsubscribe-***@public.gmane.org

[Kim Johnsson]

?No worries about the name, you can blame my employer for that one.


Thanks for upping the limit. I just tried uploading again though, but got the same error. Maybe that change will take a while to have effect, or need a daemon reload or something?


Couldn't tell you why it's that large, I am not familiar enough with SAML to even begin dissecting it right now. It's a vanilla ADFS install on Windows Server 2012 R2 though, currently without any relying parties set up. Feel free to take a look: https://adfs.borgholm.se/FederationMetadata/2007-06/FederationMetadata.xml?

Best regards

BORGHOLMS KOMMUN
Kim Johnsson
Systems Engineer, Municipal Executive Office

________________________________
Fr?n: users-bounces-***@public.gmane.org <users-bounces-***@public.gmane.org> f?r Nate Klingenstein <ndk-H4aWS73dXup+***@public.gmane.org>
Skickat: den 20 oktober 2014 11:07
Till: Shib Users
?mne: Re: testshib.org - The file you attempted to upload is too large

Borgholms,

Not sure this is the right place to ask, but I couldn't find anywhere else so I'll give it a shot.

It's a great place to ask, incidentally.

I'm trying to test our ADFS IdP deployment using testshib.org<http://testshib.org/>, but when I upload the metadata I just get this message:
"The file you attempted to upload is too large. Please ensure the file is less than 40k and try again."

Wow. I changed the limit to 100k.

?My metadata file is 70KB. It has not been modified in any way, it comes straight from our ADFS web server.

That's very interesting. I'd be curious why it's that large.

What am I doing wrong here? Am I supposed to edit and/or remove some parts of the metadata file??

In general, you need to make sure that your metadata matches the reality of your deployment. Whether you'd need to edit or remove anything to make that happen depends on what's in there and what you need.

Take care,
Nate.

[Nate Klingenstein]

Kim,

> Thanks for upping the limit. I just tried uploading again though, but got the same error. Maybe that change will take a while to have effect, or need a daemon reload or something?

No, it's just that changes made in visudo are more likely to be written than changes made in vi. *headsmack*

Please try again.

Thanks for the graciousness,
Nate.

--
To unsubscribe from this list send an email to users-unsubscribe-***@public.gmane.org

[Kim Johnsson]

Haha yeah that makes sense. Hate to say this though, but I just tried again and it still fails.


Best regards

BORGHOLMS KOMMUN
Kim Johnsson
Systems Engineer, Municipal Executive Office

________________________________________
Från: users-bounces-***@public.gmane.org <users-bounces-***@public.gmane.org> för Nate Klingenstein <ndk-H4aWS73dXup+***@public.gmane.org>
Skickat: den 20 oktober 2014 11:40
Till: Shib Users
Ämne: Re: testshib.org - The file you attempted to upload is too large

Kim,

> Thanks for upping the limit. I just tried uploading again though, but got the same error. Maybe that change will take a while to have effect, or need a daemon reload or something?

No, it's just that changes made in visudo are more likely to be written than changes made in vi. *headsmack*

Please try again.

Thanks for the graciousness,
Nate.

--
To unsubscribe from this list send an email to users-***@shibboleth.net
--
To unsubscribe from this list send an email to users-***@shibboleth.net