[JIRA] (IDP-1927) Make Jetty run under its own credentials for windows installs

[Matthew Slowe (Jira)]

Matthew Slowe ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=5c45da4b23f5bf67262143c7 ) *commented* on IDP-1927 ( https://shibboleth.atlassian.net/browse/IDP-1927?atlOrigin=eyJpIjoiZjY1NTk2ZTY5YmYwNGFjMDkzNzM5NGNkMDY2YzE2ZDEiLCJwIjoiaiJ9 )

Re: Make Jetty run under its own credentials for windows installs ( https://shibboleth.atlassian.net/browse/IDP-1927?atlOrigin=eyJpIjoiZjY1NTk2ZTY5YmYwNGFjMDkzNzM5NGNkMDY2YzE2ZDEiLCJwIjoiaiJ9 )

Some unsolicited thoughts… tangentialyl… *nix package managers routinely create system users for their services to run as so a MSI creating a local system user isn't too far fetched (dunno if it's common in the windows world). On the other hand, there are bits of Windows software where there is a specific requirement to create a system account ahead of time and provide the credentials for it during setup.

To think slightly further… most Windows deployers will be needing to create an AD Service Account so the IdP application can connect via LDAP so…

* Could you use that service account to run the IdP application? (or leave it up to the deployer to make that call)
* If you're going to prompt for the creds could you also burn them into the {{ {ldap,secrets}

.properties}} files for use later?

( https://shibboleth.atlassian.net/browse/IDP-1927#add-comment?atlOrigin=eyJpIjoiZjY1NTk2ZTY5YmYwNGFjMDkzNzM5NGNkMDY2YzE2ZDEiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-1927#add-comment?atlOrigin=eyJpIjoiZjY1NTk2ZTY5YmYwNGFjMDkzNzM5NGNkMDY2YzE2ZDEiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100207- sha1:b857cee )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20221006/254c3de8/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-6d9e1711-a26e-4bed-9676-bf32803dca32
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221006/254c3de8/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-8a5a9fb6-97aa-4a71-af7e-aaaf86355339
Type: image/png
Size: 457 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221006/254c3de8/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-ca712941-bf67-4883-b973-2ad2534e2c9a
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20221006/254c3de8/attachment-0005.png>