Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Note
titleDeprecated

Note that this page has been deprecated; the information it contains is no longer current. It has been retained for historical purposes only.

Warning

After several months of communication with participants, InCommon Operations removed the legacy metadata download endpoint (currently, a redirect) on Wednesday, February 14, 2018

All metadata clients that attempt to download metadata from this endpoint should have switched to one of the production endpoints noted in: Metadata Aggregates before that date. Failure to update to the production metadata locations has likely caused your SAML deployment to break on February 27, 2018 at approximately 2:44 p.m. US Eastern Time.


For many years, InCommon has supported a redirect from a very old metadata download location:

http://wayf.incommonfederation.org/InCommon/InCommon-metadata.xml

And

https://wayf.incommonfederation.org/InCommon/InCommon-metadata.xml

To the current production (“main”) aggregate location:

http://md.incommon.org/InCommon/InCommon-metadata.xml

On February 14, 2018, InCommon Operations REMOVED this redirect.

It is CRITICAL that all production metadata clients be configured to fetch metadata from http://md.incommon.org/InCommon/InCommon-metadata.xml or one of the other three locations on md.incommon.org.

If you currently fetch metadata from one of the old (wayf.incommonfederation.org) locations noted above, you need to reconfigure your deployment. Failure to do so means that your IdP and/or SPs broke on February 27, 2018.

At the bottom of this page, you will find a list of hosts, updated weekly, that are still downloading metadata from the old location. If you see a host on the list that is at your organization, please contact the relevant systems personnel to arrange to switch metadata consumption to one of the supported aggregates.

Please pass along this information to anyone in your organization who is responsible for running an IdP or SP in InCommon, especially those such as delegated administrators or other systems administrators who may not be subscribed to this mailing list.


Note

The information below was last updated on FridayThursday, March 1629, 2018.

IMPORTANT: The table on the left is a list of root DNS zones with hosts still attempting to access the legacy metadata location. The table on the right is a list of actual hosts still attempting to access the legacy metadata.


REMINDER: When you make a configuration change to target one of the current production metadata aggregate locations, you may need to restart your SAML SP software (shibd/etc) to cause it to re-read the configuration.


Hosts still attempting to use legacy metadata endpoint
1137.211.93.208.in-addr.arpa
2141.154.251.23.bc.googleusercontent.com
3204.11.hqserv.co.il
4204.13.hqserv.co.il
5204.7.hqserv.co.il
6216-139-212-28.aus.us.siteprotect.com
472252-00f1-bc01.ucsfmedicalcenter.org
582252-00f1-bc02.ucsfmedicalcenter.org
692408-0c50-bc01.ucsfmedicalcenter.org
7102408-0c50-bc02.ucsfmedicalcenter.org
8115-10-31-155.everestdc.com
9125-10-31-164.everestdc.com
10135-10-31-182.everestdc.com
11145-10-31-214.everestdc.com
121569-168-255-13.brainerd.net
131669-168-255-43.brainerd.net
141769-168-255-62.brainerd.net
1569-196-252-6.blackboard.com
1816ACMWEB06.acm.org
1719ACMWEB10.acm.org
1820al2s-demo.net.internet2.edu
1921aragusa-dev6.grnoc.iu.edu
2022atg-pool.nat.uw.edu
2123borked.wpi.edu
2224cloudvpn2.code42.com
2325cluster1.serialssolutions.com
2426collections.library.illinois.edu
27comphxuawifi.telcom.arizona.edu
2528cp.nursing.jhu.edu
2629crowd-surf.surf.nl
2730crowd-test.surfnet.nl
2831crowd.surfnet.nl
2932ctl.jhsph.edu
3033dhn-c5-efs.duhs.duke.edu
3134docdelivery2.trondent.com
3235dora.uark.edu
3336dpoc.uark.edu
3437ec2-107-22-198-108.compute-1.amazonaws.com
3538ec2-107-22-238-17.compute-1.amazonaws.com
3639ec2-107-23-147-38.compute-1.amazonaws.com
3740ec2-107-23-200-82.compute-1.amazonaws.com
3841ec2-107-23-78-15.compute-1.amazonaws.com
3942ec2-184-72-147-129.compute-1.amazonaws.com
4043ec2-34-226-222-114.compute-1.amazonaws.com
44ec2-34-241-142-178.eu-west-1.compute.amazonaws.com
45ec2-34-242-188-254.eu-west-1.compute.amazonaws.com
46ec2-34-244-22-231.eu-west-1.compute.amazonaws.com
47ec2-34-245-216-146.eu-west-1.compute.amazonaws.com
48ec2-34-250-27-55.eu-west-1.compute.amazonaws.com
4941ec2-50-17-229-101.compute-1.amazonaws.com
4250ec2-52-1-179-223.compute-1.amazonaws.com
4351ec2-52-20-215-192.compute-1.amazonaws.com
4452ec2-52-206-216-95.compute-1.amazonaws.com
4553ec2-52-21-240-124.compute-1.amazonaws.com
54ec2-52-214-28-159.eu-west-1.compute.amazonaws.com
4655ec2-52-6-126-78.compute-1.amazonaws.com
4756ec2-52-7-144-22.compute-1.amazonaws.com
4857ec2-52-91-134-224.compute-1.amazonaws.com
4958ec2-54-146-225-47.compute-1.amazonaws.com
5059ec2-54-147-125-241.compute-1.amazonaws.com
5160ec2-54-164-203-179.compute-1.amazonaws.com
5261ec2-54-175-50-103.compute-1.amazonaws.com
5362ec2-54-186-107-10.us-west-2.compute.amazonaws.com
5463ec2-54-210-41-28.compute-1.amazonaws.com
5564ec2-54-210-58-241.compute-1.amazonaws.com
5665ec2-54-211-88-6.compute-1.amazonaws.com
5766ec2-54-221-238-160.compute-1.amazonaws.com
67ec2-54-229-205-205.eu-west-1.compute.amazonaws.com
6858ec2-54-85-240-29.compute-1.amazonaws.com
5969ec2-54-87-226-206.compute-1.amazonaws.com
6070ec2-54-88-67-127.compute-1.amazonaws.com
6171esappi11.uits.iu.edu
6272esappi12.uits.iu.edu
73eth0-0-fw3-1-ap-q18-va2.blackboard.com
7463eth0-0-fw3-1-ap-q18-va2.mhint
6475eth0-0-fw3-1-ap-r137-3-va3.blackboard.com
6576eth0-0-fw3-1-ap-r137-3-va3.mhint
6677ewebproxy.thomsonreuters.com
6778fischer-gig.fischerinternational.com
6879fischerwall.fisc.com
6980fw-msp--sw-core-msp--4009.code42.com
7081gannicus.las.uic.edu
7182ginger.autonomy.ri.cmu.edu
7283gis.accc.uic.edu
7384git.bmi.osumc.edu
7485gmoc-db.grnoc.iu.edu
7586google2.utsystem.edu
7687gradleaders-vsrx.expedient.com
77gw1-va2.blackboard.com
78host169.dyn153.wfu.edu
8879hq.atomiclearning.com
8089idp.mbl.edu
81intimeclick.com
9082ip-128-239-61-105.v4.wm.edu
8391ip-3020-36-244-173.west.us.northamericancoax.com
84ip-84-36-244-173.west.us.northamericancoax.com
9285ITDEV2.QATAR.CMU.EDU
8693library.proxy.mbl.edu
94mail.ts24.com
9587mblfw.whoi.net
8896net253.is.jhsph.edu
8997net4.jhsph.edu
9098node2150.it.mtu.edu
9199ocw.jhsph.edu
92100ohcininetng-fw01.cengage.com
93101pc4.sdn-test.grnoc.iu.edu
94102proxy-ext3.osumc.edu
95103raweb108.refworks.com
96104sc.vizientinc.com
97105sdg-dev.cites.illinois.edu
98106shib-d1.calnet.berkeley.edu
99107shib-test2.gatech.edu
100108srfseward1shibb-discovery.rfsunymbl.orgedu
101109startrainingsrfseward1.sswrfsuny.washington.eduorg
102110t2pguardian01.t2hosted.com
103111topiawww1.webair.com
104112trln-dev.trln.org
105113trlnr610a.trln.org
106114tshib02.ucmerced.edu
107115vm-bs-158-38-213-170.cl.uninett.no
108116vpn.cloudtricity.com
109117vx26.ucsf.edu
110webmail.atg.travel
111118webmail.imleagues.com