[java-identity-provider] branch master updated: IDP-1180 - MessageReplay Storage Failures

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to branch master
in repository java-identity-provider.

View the commit online:
http://git.shibboleth.net/view/?p=java-identity-provider.git;a=commit;h=979bb3847d8e330d404e0f77aa321e27e465c6c0

The following commit(s) were added to refs/heads/master by this push:
       new  979bb38   IDP-1180 - MessageReplay Storage Failures
979bb38 is described below

commit 979bb3847d8e330d404e0f77aa321e27e465c6c0
Author: Scott Cantor <cantor.2 at osu.edu>
AuthorDate: Wed Sep 5 18:35:19 2018 -0400

    IDP-1180 - MessageReplay Storage Failures
    
    https://issues.shibboleth.net/jira/browse/IDP-1180
    
    Add property for strictness.
---
 idp-conf/src/main/resources/conf/idp.properties           | 1 +
 idp-conf/src/main/resources/system/conf/global-system.xml | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/idp-conf/src/main/resources/conf/idp.properties b/idp-conf/src/main/resources/conf/idp.properties
index f14d3e7..72a8d84 100644
--- a/idp-conf/src/main/resources/conf/idp.properties
+++ b/idp-conf/src/main/resources/conf/idp.properties
@@ -163,6 +163,7 @@ idp.authn.flows = Password
 
 # Set to custom bean for alternate storage of replay cache
 #idp.replayCache.StorageService = shibboleth.StorageService
+#idp.replayCache.strict = true
 
 # Toggles whether to allow outbound messages via SAML artifact
 #idp.artifact.enabled = true
diff --git a/idp-conf/src/main/resources/system/conf/global-system.xml b/idp-conf/src/main/resources/system/conf/global-system.xml
index e685188..e55a519 100644
--- a/idp-conf/src/main/resources/system/conf/global-system.xml
+++ b/idp-conf/src/main/resources/system/conf/global-system.xml
@@ -267,7 +267,8 @@
     </bean>
 
     <bean id="shibboleth.ReplayCache" class="org.opensaml.storage.ReplayCache" depends-on="shibboleth.LoggingService"
-        p:storage-ref="#{'%{idp.replayCache.StorageService:shibboleth.StorageService}'.trim()}" p:strict="true" />
+        p:storage-ref="#{'%{idp.replayCache.StorageService:shibboleth.StorageService}'.trim()}"
+        p:strict="%{idp.replayCache.strict:true}" />
 
     <bean id="shibboleth.SAMLArtifactMap" depends-on="shibboleth.StorageService"
         class="org.opensaml.saml.common.binding.artifact.impl.StorageServiceSAMLArtifactMap"

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.