mdquery - Query Shibboleth metadata
mdquery -e entity [-a app]
[-nostrict]
mdquery -e entity -r role
-p protocol [-a app]
[-ns namespace] [-nostrict]
mdquery queries and displays Shibboleth SP metadata. It is
primarily a debugging tool to use in conjunction with advice from the
Shibboleth mantaininers. It can display either the metadata for an entity or
the metadata for a particular role.
- -a app
- Specifies the application ID for which to retrieve metadata. If not given
the default is "default".
- -e entity
- Specifies the entity ID for which to show metadata. Normally this is the
entity descriptor ID for an entity with which one is having a problem
(such as the entity ID for the local SP).
- -nostrict
- Relax the strictness of checking (such as of expiration dates).
- -ns
namespace
- When retrieving metadata for a particular role, specify the namespace. If
not given, the default is the SAML20MD namespace.
- -p protocol
- Specify a protocol when retrieving metadata for a particular role.
Normally one would use the -saml10, -saml11, or
-saml2 options to specify the protocol name, but this option allows
an arbitrary protocol to be specified.
- -saml10
- Specify a protocol of SAML 1.0.
- -saml11
- Specify a protocol of SAML 1.1.
- -saml2
- Specify a protocol of SAML 2.0.
- -r role
- Retrieve the metadata for a particular role. Normally one would use the
-idp, -aa, -pdp, or -sp options to specify the
role name, but this option allows an arbitrary role to be specified.
- -idp
- Specify a role of IDPSSODescriptor.
- -aa
- Specify a role of AttributeAuthorityDescriptor.
- -pdp
- Specify a role of PDPDescriptor.
- -sp
- Specify a role of SPSSODescriptor.
This manual page was written by Russ Allbery for Debian
GNU/Linux.
Copyright 2008 Russ Allbery. This manual page is hereby placed
into the public domain by its author.