.\" -*- mode: troff; coding: utf-8 -*- .\" Automatically generated by Pod::Man 5.01 (Pod::Simple 3.43) .\" .\" Standard preamble: .\" ======================================================================== .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Vb \" Begin verbatim text .ft CW .nf .ne \\$1 .. .de Ve \" End verbatim text .ft R .fi .. .\" \*(C` and \*(C' are quotes in nroff, nothing in troff, for use with C<>. .ie n \{\ . ds C` "" . ds C' "" 'br\} .el\{\ . ds C` . ds C' 'br\} .\" .\" Escape single quotes in literal strings from groff's Unicode transform. .ie \n(.g .ds Aq \(aq .el .ds Aq ' .\" .\" If the F register is >0, we'll generate index entries on stderr for .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index .\" entries marked with X<> in POD. Of course, you'll have to process the .\" output yourself in some meaningful fashion. .\" .\" Avoid warning from groff about undefined register 'F'. .de IX .. .nr rF 0 .if \n(.g .if rF .nr rF 1 .if (\n(rF:(\n(.g==0)) \{\ . if \nF \{\ . de IX . tm Index:\\$1\t\\n%\t"\\$2" .. . if !\nF==2 \{\ . nr % 0 . nr F 2 . \} . \} .\} .rr rF .\" ======================================================================== .\" .IX Title "MDQUERY.1 1" .TH MDQUERY.1 1 2024-02-03 3.4.1 Shibboleth .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .if n .ad l .nh .SH NAME mdquery \- Query Shibboleth metadata .SH SYNOPSIS .IX Header "SYNOPSIS" \&\fBmdquery\fR \fB\-e\fR \fIentity\fR [\fB\-a\fR \fIapp\fR] [\fB\-nostrict\fR] .PP \&\fBmdquery\fR \fB\-e\fR \fIentity\fR \fB\-r\fR \fIrole\fR \fB\-p\fR \fIprotocol\fR [\fB\-a\fR \fIapp\fR] [\fB\-ns\fR \fInamespace\fR] [\fB\-nostrict\fR] .SH DESCRIPTION .IX Header "DESCRIPTION" \&\fBmdquery\fR queries and displays Shibboleth SP metadata. It is primarily a debugging tool to use in conjunction with advice from the Shibboleth mantaininers. It can display either the metadata for an entity or the metadata for a particular role. .SH OPTIONS .IX Header "OPTIONS" .IP "\fB\-a\fR \fIapp\fR" 4 .IX Item "-a app" Specifies the application ID for which to retrieve metadata. If not given the default is \f(CW\*(C`default\*(C'\fR. .IP "\fB\-e\fR \fIentity\fR" 4 .IX Item "-e entity" Specifies the entity ID for which to show metadata. Normally this is the entity descriptor ID for an entity with which one is having a problem (such as the entity ID for the local SP). .IP \fB\-nostrict\fR 4 .IX Item "-nostrict" Relax the strictness of checking (such as of expiration dates). .IP "\fB\-ns\fR \fInamespace\fR" 4 .IX Item "-ns namespace" When retrieving metadata for a particular role, specify the namespace. If not given, the default is the SAML20MD namespace. .IP "\fB\-p\fR \fIprotocol\fR" 4 .IX Item "-p protocol" Specify a protocol when retrieving metadata for a particular role. Normally one would use the \fB\-saml10\fR, \fB\-saml11\fR, or \fB\-saml2\fR options to specify the protocol name, but this option allows an arbitrary protocol to be specified. .IP \fB\-saml10\fR 4 .IX Item "-saml10" Specify a protocol of SAML 1.0. .IP \fB\-saml11\fR 4 .IX Item "-saml11" Specify a protocol of SAML 1.1. .IP \fB\-saml2\fR 4 .IX Item "-saml2" Specify a protocol of SAML 2.0. .IP "\fB\-r\fR \fIrole\fR" 4 .IX Item "-r role" Retrieve the metadata for a particular role. Normally one would use the \&\fB\-idp\fR, \fB\-aa\fR, \fB\-pdp\fR, or \fB\-sp\fR options to specify the role name, but this option allows an arbitrary role to be specified. .IP \fB\-idp\fR 4 .IX Item "-idp" Specify a role of IDPSSODescriptor. .IP \fB\-aa\fR 4 .IX Item "-aa" Specify a role of AttributeAuthorityDescriptor. .IP \fB\-pdp\fR 4 .IX Item "-pdp" Specify a role of PDPDescriptor. .IP \fB\-sp\fR 4 .IX Item "-sp" Specify a role of SPSSODescriptor. .SH AUTHOR .IX Header "AUTHOR" This manual page was written by Russ Allbery for Debian GNU/Linux. .SH COPYRIGHT .IX Header "COPYRIGHT" Copyright 2008 Russ Allbery. This manual page is hereby placed into the public domain by its author.