Non TLS ports for the IdP.

Rod Widdowson rdw at steadingsoftware.com
Tue Dec 9 12:35:07 EST 2014


> I've been assuming the idp-distribution jetty-base files are what get
> used, but those clearly wouldn't work for a real install (wrong ports,
> (8)443 bound to localhost, etc.)

It's complicated, but in fact they do.  Kinda.  

Because those files have to work for the test harness we leave those values
in place in SVN, but during install but we edit the ini file as we populate
to overwrite the property values with sensible values.  

http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-installer/sr
c/main/wix/scripts/shib_write_configs.vbs?view=markup

It's all part of the uneasy friction of having configuration files that we
can easily test with but that we can also use for real installations.

/R



More information about the dev mailing list