mdquery - Query Shibboleth metadata

       This manual page was written by Russ Allbery for Debian GNU/Linux.

       Copyright 2008 Russ Allbery.  This manual page is hereby placed into the public domain by its author.

3.5.0                                              2025-01-12                                       MDQUERY.1(1)

mdquery queries and displays Shibboleth SP metadata.  It is primarily a debugging tool to use in
       conjunction with advice from the Shibboleth mantaininers.  It can display either the metadata for an
       entity or the metadata for a particular role.

       mdquery - Query Shibboleth metadata

-aapp
           Specifies the application ID for which to retrieve metadata.  If not given the default is "default".

       -eentity
           Specifies the entity ID for which to show metadata.  Normally this is the entity descriptor ID for an
           entity with which one is having a problem (such as the entity ID for the local SP).

       -nostrict
           Relax the strictness of checking (such as of expiration dates).

       -nsnamespace
           When  retrieving metadata for a particular role, specify the namespace.  If not given, the default is
           the SAML20MD namespace.

       -pprotocol
           Specify a protocol when retrieving metadata for a  particular  role.   Normally  one  would  use  the
           -saml10, -saml11, or -saml2 options to specify the protocol name, but this option allows an arbitrary
           protocol to be specified.

       -saml10
           Specify a protocol of SAML 1.0.

       -saml11
           Specify a protocol of SAML 1.1.

       -saml2
           Specify a protocol of SAML 2.0.

       -rrole
           Retrieve  the  metadata  for  a  particular role.  Normally one would use the -idp, -aa, -pdp, or -sp
           options to specify the role name, but this option allows an arbitrary role to be specified.

       -idp
           Specify a role of IDPSSODescriptor.

       -aa Specify a role of AttributeAuthorityDescriptor.

       -pdp
           Specify a role of PDPDescriptor.

       -sp Specify a role of SPSSODescriptor.

mdquery-eentity [-aapp] [-nostrict]

       mdquery-eentity-rrole-pprotocol [-aapp]
           [-nsnamespace] [-nostrict]