[java-identity-provider COMMIT] in /trunk/idp-conf/src/main/resources: conf/idp.properties system/conf/global-system....

[noreply at shibboleth.net]

Author: scantor
Date: Wed Jun 18 15:58:44 2014
New Revision: 6114

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=6114&view=rev
Log:
Default more properties.

Modified:
    trunk/idp-conf/src/main/resources/conf/idp.properties
    trunk/idp-conf/src/main/resources/system/conf/global-system.xml
    trunk/idp-conf/src/main/resources/system/conf/session-manager.xml
    trunk/idp-conf/src/main/resources/system/flows/authn/authn-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/saml/saml-abstract-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/saml/saml1/artifact-resolution-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/saml/saml1/attribute-query-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/saml/saml1/sso-abstract-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/saml/saml2/artifact-resolution-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/saml/saml2/attribute-query-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/saml/saml2/sso-abstract-beans.xml

Modified: trunk/idp-conf/src/main/resources/conf/idp.properties
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/idp.properties?rev=6114&r1=6113&r2=6114&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/idp.properties (original)
+++ trunk/idp-conf/src/main/resources/conf/idp.properties Wed Jun 18 15:58:44 2014
@@ -1,8 +1,7 @@
 # Use the XML Parser SecurityManager appropriate for the chosen parser
-# Sun/Oracle, use com.sun.org.apache.xerces.internal.util.SecurityManager
+# Sun/Oracle, comment out
 # Xerces, use org.apache.xerces.util.SecurityManager
 #idp.xml.securityManager = org.apache.xerces.util.SecurityManager
-idp.xml.securityManager = com.sun.org.apache.xerces.internal.util.SecurityManager
 
 # Set the entityID of the IdP
 idp.entityID = https://idp.example.org
@@ -25,20 +24,20 @@
 #idp.encryption.cert.2 = ${idp.home}/creds/idp-encryption-old.crt
 
 # Configures the primary server-side storage plugin
-idp.storage.StorageService = org.opensaml.storage.impl.MemoryStorageService
-idp.storage.cleanupInterval = PT10M
+#idp.storage.StorageService = org.opensaml.storage.impl.MemoryStorageService
+#idp.storage.cleanupInterval = PT10M
 
 # Configures the primary client-side storage plugin
-idp.storage.ClientStorageService = org.opensaml.storage.impl.ServletRequestScopedStorageService
+#idp.storage.ClientStorageService = org.opensaml.storage.impl.ServletRequestScopedStorageService
 
 # Set to false to disable the IdP session layer
-idp.session.enabled = true
+#idp.session.enabled = true
 
 # Set to true to expose more detailed errors in responses to SPs
-#idp.errors.detailed = true
+#idp.errors.detailed = false
 
 # Set to false to skip signing of SAML response messages that signal errors
-idp.errors.signed = true
+#idp.errors.signed = true
 
 # Set to "shibboleth.StorageService" for server-side storage
 idp.session.StorageService = shibboleth.ClientStorageService
@@ -64,24 +63,24 @@
 idp.nameid.saml1.default = urn:mace:shibboleth:1.0:nameIdentifier
 
 # Size of session IDs
-idp.session.idSize = 32
+#idp.session.idSize = 32
 # Bind sessions to IP addresses
-idp.session.consistentAddress = true
+#idp.session.consistentAddress = true
 # Inactivity timeout
-idp.session.timeout = PT60M
+#idp.session.timeout = PT60M
 # Extra time to store sessions for logout
-idp.session.slop = 0
+#idp.session.slop = 0
 # Tolerate storage-related errors
-idp.session.maskStorageFailure = false
+#idp.session.maskStorageFailure = false
 # Track information about SPs logged into
-idp.session.trackSPSessions = false
+#idp.session.trackSPSessions = false
 # Support lookup by SP for SAML logout
-idp.session.secondaryServiceIndex = false
+#idp.session.secondaryServiceIndex = false
 # Length of time to track SP sessions
-idp.session.defaultSPlifetime = PT2H
+#idp.session.defaultSPlifetime = PT2H
 
-# Select implementation for step that determines what results are active
-idp.session.activeResultExtraction = net.shibboleth.idp.session.impl.ExtractActiveAuthenticationResults
+# Select alternate implementation for step that determines what results are active
+#idp.session.activeResultExtraction = net.shibboleth.idp.session.impl.ExtractActiveAuthenticationResults
 
 # Regular expression matching login flows to enable 
 #idp.authn.flows = IPAddress|JAAS
@@ -93,7 +92,7 @@
 
 # Whether to prioritize "active" results when an SP requests more than
 # one possible matching login method (V2 behavior was to favor them)
-idp.authn.favorSSO = false
+#idp.authn.favorSSO = true
 
 # Reload "failfast" (stop the IdP if a configuration is bad)
 # and reload check interval (0 == never reload).
@@ -101,24 +100,24 @@
 idp.service.logging.checkInterval=PT5M
 
 # Relying Party resolver
-#idp.service.relyingparty.failFast=true
+#idp.service.relyingparty.failFast=false
 idp.service.relyingparty.checkInterval=PT5M
 
 # Metadata resolver
-#idp.service.metadata.failFast=true
+#idp.service.metadata.failFast=false

[... 293 lines stripped ...]