deploying the current Shib v3 snapshot on Tomcat

[Michael Stroucken]

On 02.09.14 13:46, Rod Widdowson wrote:
>> I changed the reference in
>> system/conf/global-system.xml to use the apache version for the
>> shibboleth.XercesSecurityManager, and it works enough for me to get to
>> the status page.
> FYI:
>
> This (editing in system/conf/global-system.xml) is usually a very bad plan,
> since there is no guarantee that changes will survive an upgrade (in quite
> the opposite.  Hence, we *badly* need to know about cases when testers need
> to change these files.
>
> In your case, would it not have been possible to edit idp.properties and set
> the "idp.xml.securityManager" property (towards the very top of the file)?
>
Maybe. I looked for com.sun.org.apache... and found it in the global
configuration file.

Why not use the regular Xerces version, especially if the default config
leads to a casting exception?

30-Aug-2014 00:39:29.996 SEVERE [localhost-startStop-1]
org.apache.catalina.core
.StandardContext.listenerStart Exception sending context initialized
event to li
stener instance of class
org.springframework.web.context.ContextLoaderListener
 org.springframework.beans.factory.BeanCreationException: Error creating
bean wi
th name 'shibboleth.ParserPool' defined in file
[/opt/shibboleth-idp/system/conf
/global-system.xml]: Invocation of init method failed; nested exception
is java.
lang.IllegalArgumentException:
com.sun.org.apache.xerces.internal.util.SecurityM
anager cannot be cast to org.apache.xerces.util.SecurityManager

Greetings,
Michael.