AccessControlConfiguration Service Defaults

[Cantor, Scott]

On 5/13/15, 11:54 AM, "Marvin Addison" <marvin.addison at gmail.com> wrote:


>
>That's in contrast to all the other services that have failFast=false and 
>it's in conflict with the docs at 
>https://wiki.shibboleth.net/confluence/display/IDP30/ReloadableServices
>  (and services.properties) that says the default is false. Perhaps it's 
>a simple typo, but it occurred to me that the access control service 
>could reasonably have a different default since misconfiguration could 
>lead to unintended access to the IdP and therefore
> defaulted to fail-fast behavior.

I suspect that it's a typo, but I'll review it (can you file a bug on 
it?). It's possible I deliberately changed it, but I believe if it didn't 
load, the services relying on it would fail safe by not being able to 
acquire the access plugin to evaluate the request and decide what to do.

-- Scott