AccessControlConfiguration Service Defaults

[Marvin Addison]

In working on IDP-615, I noted the following in services-system.xml:

p:failFast="%{idp.service.access.failFast:true}"

That's in contrast to all the other services that have failFast=false and
it's in conflict with the docs at
https://wiki.shibboleth.net/confluence/display/IDP30/ReloadableServices
 (and services.properties) that says the default is false. Perhaps it's a
simple typo, but it occurred to me that the access control service could
reasonably have a different default since misconfiguration could lead to
unintended access to the IdP and therefore defaulted to fail-fast behavior.

M
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20150513/7b8aea17/attachment.html>