<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0" /> <base href="https://issues.shibboleth.net/jira" />
<title>Message Title</title>
</head>
<body class="jira" style="color: #333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<!-- header here -->
<tr>
<td id="header-pattern-container" style="padding: 0px; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0px; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px"> <img id="header-avatar-image" class="image_fix" src="cid:jira-generated-image-avatar-cphillips@canarie.ca-41374c00-05ce-415b-8e51-fa55eb71b5aa" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top" />
</td>
<td id="header-text-container" valign="middle" style="padding: 0px; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="cphillips@canarie.ca" id="email_cphillips@canarie.ca" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=cphillips%40canarie.ca" style="color:#3b73af;; color: #3b73af; text-decoration: none">Chris Phillips</a> <strong>created</strong> an issue
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0px; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-spacing: 0; border-collapse: separate">
<tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0px; border-collapse: collapse; color: #fff; padding: 0 15px 0 16px; height: 15px; background-color: #fff; border-left: 1px solid #ccc; border-top: 1px solid #ccc; border-right: 1px solid #ccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly">
</td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #ccc; border-right: 1px solid #ccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #fff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td class="page-title-pattern-first-line " style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; padding-top: 10px"> <a href="https://issues.shibboleth.net/jira/browse/IDP" style="color: #3b73af; text-decoration: none">Identity Provider</a> / <a href="https://issues.shibboleth.net/jira/browse/IDP-706" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-static-bug-08c85887-8945-44b2-90fe-58c8e7496ff4" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom" /></a> <a href="https://issues.shibboleth.net/jira/browse/IDP-706" style="color: #3b73af; text-decoration: none">IDP-706</a>
</td>
</tr>
<tr>
<td style="vertical-align: top;; padding: 0px; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-706" style="color: #3b73af; text-decoration: none">command line idp.scope not observed and applied from installer as expected</a> </span>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td class="email-content-main mobile-expand wrapper-special-margin" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #ccc; border-right: 1px solid #ccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #fff; padding-top: 10px; padding-bottom: 5px">
<table class="keyvalue-table" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Issue Type:
</th>
<td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-static-bug-08c85887-8945-44b2-90fe-58c8e7496ff4" height="16" width="16" border="0" align="absmiddle" alt="Bug" style="vertical-align: text-bottom" /> Bug
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Affects Versions:
</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top">
3.1.1
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Assignee:
</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="rdw@iay.org.uk" id="email_rdw@iay.org.uk" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=rdw%40iay.org.uk" style="color:#3b73af;; color: #3b73af; text-decoration: none">Rod Widdowson</a>
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Components:
</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top">
Installer
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Created:
</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top">
24/Apr/15 11:39 AM
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Environment:
</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top">
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">CentOS7, Oracle JdK <br /> java version "1.8.0_25"<br /> Java(TM) SE Runtime Environment (build 1.8.0_25-b17</p>
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Priority:
</th>
<td class="has-icon" style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <img src="cid:jira-generated-image-static-major-a533eced-e9a1-498c-aef3-2e2ef5c6d230" height="16" width="16" border="0" align="absmiddle" alt="Major" style="vertical-align: text-bottom" /> Major
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Reporter:
</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top"> <a class="user-hover" rel="cphillips@canarie.ca" id="email_cphillips@canarie.ca" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=cphillips%40canarie.ca" style="color:#3b73af;; color: #3b73af; text-decoration: none">Chris Phillips</a>
</td>
</tr>
<tr>
<th style="color: #707070; font: normal 14px/20px Arial, sans-serif; text-align: left; vertical-align: top; padding: 2px 0">
Security Level:
</th>
<td style="padding: 0px; border-collapse: collapse; font: normal 14px/20px Arial, sans-serif; padding: 2px 0 2px 5px; vertical-align: top">
Standard (Standard bug, may impact functionality but does not represent a security vulnerability )
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td class="email-content-main mobile-expand issue-description-container" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #ccc; border-right: 1px solid #ccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #fff; padding-top: 5px; padding-bottom: 10px">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0px; border-collapse: collapse; padding: 0 0 10px 0">
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">When attempting to set idp.scope as a switch on the command line, it is not being observed and not updating idp.properties as expected.</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">Here's my test on CentOS7:</p>
<ol>
<li>
more shib-inst.sh<br /> cd /opt/shibboleth-identity-provider<br /> export JAVA_HOME=/usr/java/default<br /> sh bin/install.sh -Didp.src.dir=./ -Didp.target.dir=/opt/shibboleth-idp -Didp.host.name=fakehost.example.com -Didp.scope=TESTSCOPE.example.com -Didp.keystore.password=changeme <br /> -Didp.sealer.password=changeme2
</li>
<li>
./shib-inst.sh<br /> SAML EntityID: <a href="https://fakehost.example.com/idp/shibboleth" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">https://fakehost.example.com/idp/shibboleth</a>
</li>
</ol>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">Warning: /opt/shibboleth-idp/bin does not exist.<br /> Warning: /opt/shibboleth-idp/dist does not exist.<br /> Warning: /opt/shibboleth-idp/doc does not exist.<br /> Warning: /opt/shibboleth-idp/system does not exist.<br /> Warning: /opt/shibboleth-idp/webapp does not exist.<br /> Generating Signing Key, CN = fakehost.example.com URI = <a href="https://fakehost.example.com/idp/shibboleth" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">https://fakehost.example.com/idp/shibboleth</a> ...<br /> ...done<br /> Creating Encryption Key, CN = fakehost.example.com URI = <a href="https://fakehost.example.com/idp/shibboleth" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">https://fakehost.example.com/idp/shibboleth</a> ...<br /> ...done<br /> Creating TLS keystore, CN = fakehost.example.com URI = <a href="https://fakehost.example.com/idp/shibboleth" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">https://fakehost.example.com/idp/shibboleth</a> ...<br /> ...done<br /> Creating cookie encryption key files...<br /> ...done<br /> Rebuilding /opt/shibboleth-idp/war/idp.war ...<br /> ...done</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">BUILD SUCCESSFUL<br /> Total time: 12 seconds</p>
<ol>
<li>
ls -la /opt<br /> total 12<br /> drwxr-xr-x. 4 root root 103 Apr 23 20:36 .<br /> drwxr-xr-x. 17 root root 4096 Apr 23 16:07 ..<br /> lrwxrwxrwx. 1 root root 40 Apr 23 20:21 shibboleth-identity-provider -> /opt/shibboleth-identity-provider-3.1.1/<br /> drwxr-xr-x. 14 root root 4096 Apr 23 20:37 shibboleth-identity-provider-3.1.1<br /> drwxr-xr-x. 17 root root 4096 Apr 23 20:37 shibboleth-idp
</li>
<li>
more /opt/shibboleth-idp/conf/idp.properties
</li>
<li>
Load any additional property resources from a comma-delimited list<br /> idp.additionalProperties= /conf/ldap.properties, /conf/saml-nameid.properties, /conf/services.properties
</li>
</ol>
<ol>
<li>
Set the entityID of the IdP<br /> idp.entityID= <a href="https://fakehost.example.com/idp/shibboleth" class="external-link" rel="nofollow" style="color: #3b73af; text-decoration: none">https://fakehost.example.com/idp/shibboleth</a>
</li>
</ol>
<ol>
<li>
Set the scope used in the attribute resolver for scoped attributes<br /> <b>idp.scope= example.org</b>
</li>
</ol>
<ol>
<li>
General cookie properties (maxAge only applies to persistent cookies)<br /> #idp.cookie.secure = false<br /> #idp.cookie.httpOnly = true<br /> #idp.cookie.domain =<br /> #idp.cookie.path =<br /> #idp.cookie.maxAge = 31536000
</li>
</ol>
<ol>
<li>
Set the location of Velocity view templates<br /> #idp.views = % {idp.home}/views<br /> <br /> # Settings for internal AES encryption key<br /> #idp.sealer.storeType = JCEKS<br /> #idp.sealer.updateInterval = PT15M<br /> #idp.sealer.aliasBase = secret<br /> idp.sealer.storeResource= %{idp.home}
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">/credentials/sealer.jks<br /> idp.sealer.versionResource= %</p> {idp.home}
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">/credentials/sealer.kver<br /> idp.sealer.storePassword= password<br /> idp.sealer.keyPassword= password</p>
</li>
</ol>
<ol>
<li>
Settings for public/private signing and encryption key(s)
</li>
<li>
During decryption key rollover, point the ".2" properties at a second<br /> <span class="error">[root@chris-dev ~]</span># /usr/java/default/bin/java -version<br /> java version "1.8.0_25"<br /> Java(TM) SE Runtime Environment (build 1.8.0_25-b17)<br /> Java HotSpot(TM) 64-Bit Server VM (build 25.25-b02, mixed mode)<br /> <span class="error">[root@chris-dev ~]</span>#
</li>
</ol>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">When the idp.merge.properties is used, THAT appears to work.<br /> When -Didp.scope is ABSENT on the commandline install, but present in a idp.mergeproperty file, the user is interrogated on the command line to offer a scope. (one would expect the merge to superceded this and render asking the user for the value unnecessary..)</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">I am claiming this is a problem because I feel that:<br /> A) if I specify a switch on the commandline that it should be observed and applied.(it is not right now)<br /> B) If I specify an entry in the merge file that it should be applied since it was there and I should not be asked for the value to be entered by hand.<br /> C) the mechanism of applying -D switches AND a merge file to set a variable feels a bit odd if A or B were ok.</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">I can work around this for now with applying the switch on the commandline AND an idp.merge.properties file, but a general user would expect this to work with just one setting.</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">I have not checked this style of problem against other variables.</p>
<p style="margin-top:0;margin-bottom:10px;; margin: 10px 0 0 0">If I'm in error in my report, please advise what I should use on the command line to set the idp.scope.<br /> Thanks!</p>
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #ccc; border-right: 1px solid #ccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #fff">
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0px; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0px; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/IDP-706#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-2ac3744c-83bb-4683-9883-66213522df3b" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle" /> </a>
</td>
<td class="actions-pattern-action-text-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://issues.shibboleth.net/jira/browse/IDP-706#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a>
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0px; border-collapse: collapse; color: #fff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #fff; border-top: 0; border-left: 1px solid #ccc; border-bottom: 1px solid #ccc; border-right: 1px solid #ccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly">
</td>
</tr>
</table>
</td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0px; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0px; border-collapse: collapse; color: #999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px">
This message was sent by Atlassian JIRA <span id="footer-build-information">(v6.4.1#64016-<span title="5d7581434f35c063b7031942e62ed4d72a97fa9c" data-commit-id="5d7581434f35c063b7031942e62ed4d72a97fa9c}">sha1:5d75814</span>)</span>
</td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0px; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0px; border-collapse: collapse; padding-top: 3px"> <img id="footer-pattern-logo-desktop" src="cid:jira-generated-image-static-footer-desktop-logo-2e21bccc-4f23-46e6-8875-789fafea3945" alt="Atlassian logo" title="Atlassian logo" width="169" height="36" class="image_fix" />
</td>
</tr>
</table>
</td>
</tr>
</table>
</td>
</tr>
</table>
</body>
</html>