Generating Metadata from CmdLine

[Misagh Moayyed]

Thanks for the quick reply.

There are certainly dependencies to the idp install and deployment process
that make it difficult to properly construct the needed parameters. Too
tied is also the fact that the plugin is ant-based. I realized that at the
heart of it, it's mostly just attempting to pass along the created certs,
entity, scope and a few other things perhaps. Are there any downsides to
simply passing those parameters from the command prompt that I of course
have prepped beforehand? 

To put this question into a bit more context, I am working on a simple
exercise to see if the idp can be deployed without the installer. I'll
have more on this in a little bit to share but in the meantime, one thing
that I of course need is proper generation of metadata. I wrote a
"MetadataGeneratorTool" that very closely mimics what the IdP does so I
would assume as long as the steps and the parameters are the same, it make
sense to be able to run the tool from the commandline. 

-----Original Message-----
From: dev [mailto:dev-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Monday, May 4, 2015 6:57 AM
To: Shib Dev
Subject: Re: Generating Metadata from CmdLine

On 5/4/15, 9:50 AM, "Misagh Moayyed" <mmoayyed at unicon.net> wrote:

>Hi,
>I noticed that most if not all of the ANT tools in v3.1.1 that deal with
generation of certs and keystores can be run from command line. The
exception to this seems to be the metadata generator tool. Are there any
recommended methods to generate metadata using the tool from command line?

The IdP tool doesn't know anything about the actual IdP configuration, so
it has no basis to generate anything in particular. It relies on the
inputs to the installer to generate an example, and is IMHO too tied to
the installation process to be a basis for something more general.

I think any such tool would need to be built from the ground up to
understand how to help manage key rollover and similar use cases, so it's
not just a matter of generating some XML.

The shell script that's included with the SP is probably a simpler
starting point if somebody was looking to generate metadata brute force
right now, though it's fallen a bit out of date. There's nothing in Java
that's comparable to that.

-- Scott

-- 
To unsubscribe from this list send an email to
dev-unsubscribe at shibboleth.net