SYNOPSIS

mdquery -e entity [-a app] [-nostrict]

mdquery -e entity -r role -p protocol [-a app]
    [-ns namespace] [-nostrict]

DESCRIPTION

mdquery queries and displays Shibboleth SP metadata. It is primarily a debugging tool to use in conjunction with advice from the Shibboleth mantaininers. It can display either the metadata for an entity or the metadata for a particular role.

OPTIONS

-a app

Specifies the application ID for which to retrieve metadata. If not given the default is "default".

-e entity

Specifies the entity ID for which to show metadata. Normally this is the entity descriptor ID for an entity with which one is having a problem (such as the entity ID for the local SP).

-nostrict

Relax the strictness of checking (such as of expiration dates).

-ns namespace

When retrieving metadata for a particular role, specify the namespace. If not given, the default is the SAML20MD namespace.

-p protocol

Specify a protocol when retrieving metadata for a particular role. Normally one would use the -saml10, -saml11, or -saml2 options to specify the protocol name, but this option allows an arbitrary protocol to be specified.

-saml10

Specify a protocol of SAML 1.0.

-saml11

Specify a protocol of SAML 1.1.

-saml2

Specify a protocol of SAML 2.0.

-r role

Retrieve the metadata for a particular role. Normally one would use the -idp, -aa, -pdp, or -sp options to specify the role name, but this option allows an arbitrary role to be specified.

-idp

Specify a role of IDPSSODescriptor.

-aa

Specify a role of AttributeAuthorityDescriptor.

-pdp

Specify a role of PDPDescriptor.

-sp

Specify a role of SPSSODescriptor.

AUTHOR

This manual page was written by Russ Allbery for Debian GNU/Linux.

COPYRIGHT

Copyright 2008 Russ Allbery. This manual page is hereby placed into the public domain by its author.