Upgrade Docker Image to Shibboleth 4
Julien Cochennec
julien.cochennec at ac-orleans-tours.fr
Mon Sep 7 13:22:33 UTC 2020
Ok, forget about the previous message, it worked when I created the file.
And now the IDP has started.
I just have two errors I don't really understand, first one is about
opt/shibboleth-idp/credentials/idp-signing-rs.jwk but I found nothing
about it yet.
shib_idp_container | java.io.FileNotFoundException: class path
resource [opt/shibboleth-idp/credentials/idp-signing-rs.jwk] cannot be
opened because it does not exist
shib_idp_container | at
org.springframework.core.io.ClassPathResource.getInputStream(ClassPathResource.java:180)
shib_idp_container | 2020-09-07 13:03:27,443 - - WARN
[net.shibboleth.ext.spring.context.FilesystemGenericApplicationContext:558]
- Exception encountered during context initialization - cancelling
refresh attempt:
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'profileResponders': Cannot resolve reference to bean
'OIDC.SSO' while setting bean property 'sourceMap'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'OIDC.SSO' defined in file
[/opt/shibboleth-idp/conf/oidc-relying-party.xml]: Cannot resolve
reference to bean 'shibboleth.oidc.DefaultSecurityConfiguration' while
setting bean property 'securityConfiguration'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.DefaultSecurityConfiguration' defined in
file [/opt/shibboleth-idp/conf/oidc-relying-party.xml]: Cannot resolve
reference to bean '#{'shibboleth.oidc.SigningConfiguration'.trim()}'
while setting bean property 'signatureSigningConfiguration'; nested
exception is org.springframework.beans.factory.BeanCreationException:
Error creating bean with name 'shibboleth.oidc.SigningConfiguration'
defined in file [/opt/shibboleth-idp/conf/oidc-relying-party.xml]:
Cannot resolve reference to bean 'shibboleth.oidc.SigningCredentials'
while setting bean property 'signingCredentials'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.SigningCredentials': Cannot resolve
reference to bean 'shibboleth.oidc.DefaultRSSigningCredential' while
setting bean property 'sourceList' with key [0]; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.DefaultRSSigningCredential' defined in
file [/opt/shibboleth-idp/conf/credentials-oidc.xml]: Invocation of init
method failed; nested exception is
org.springframework.beans.FatalBeanException: Could not decode provided
KeyFile class path resource
[opt/shibboleth-idp/credentials/idp-signing-rs.jwk]; nested exception is
java.io.FileNotFoundException: class path resource
[opt/shibboleth-idp/credentials/idp-signing-rs.jwk] cannot be opened
because it does not exist
shib_idp_container | 2020-09-07 13:03:27,452 - - ERROR
[net.shibboleth.utilities.java.support.service.AbstractReloadableService:182]
- Service 'shibboleth.RelyingPartyResolverService': Initial load failed
shib_idp_container |
net.shibboleth.utilities.java.support.service.ServiceException:
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'profileResponders': Cannot resolve reference to bean
'OIDC.SSO' while setting bean property 'sourceMap'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'OIDC.SSO' defined in file
[/opt/shibboleth-idp/conf/oidc-relying-party.xml]: Cannot resolve
reference to bean 'shibboleth.oidc.DefaultSecurityConfiguration' while
setting bean property 'securityConfiguration'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.DefaultSecurityConfiguration' defined in
file [/opt/shibboleth-idp/conf/oidc-relying-party.xml]: Cannot resolve
reference to bean '#{'shibboleth.oidc.SigningConfiguration'.trim()}'
while setting bean property 'signatureSigningConfiguration'; nested
exception is org.springframework.beans.factory.BeanCreationException:
Error creating bean with name 'shibboleth.oidc.SigningConfiguration'
defined in file [/opt/shibboleth-idp/conf/oidc-relying-party.xml]:
Cannot resolve reference to bean 'shibboleth.oidc.SigningCredentials'
while setting bean property 'signingCredentials'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.SigningCredentials': Cannot resolve
reference to bean 'shibboleth.oidc.DefaultRSSigningCredential' while
setting bean property 'sourceList' with key [0]; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.DefaultRSSigningCredential' defined in
file [/opt/shibboleth-idp/conf/credentials-oidc.xml]: Invocation of init
method failed; nested exception is
org.springframework.beans.FatalBeanException: Could not decode provided
KeyFile class path resource
[opt/shibboleth-idp/credentials/idp-signing-rs.jwk]; nested exception is
java.io.FileNotFoundException: class path resource
[opt/shibboleth-idp/credentials/idp-signing-rs.jwk] cannot be opened
because it does not exist
shib_idp_container | at
net.shibboleth.ext.spring.service.ReloadableSpringService.doReload(ReloadableSpringService.java:377)
shib_idp_container | Caused by:
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'profileResponders': Cannot resolve reference to bean
'OIDC.SSO' while setting bean property 'sourceMap'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'OIDC.SSO' defined in file
[/opt/shibboleth-idp/conf/oidc-relying-party.xml]: Cannot resolve
reference to bean 'shibboleth.oidc.DefaultSecurityConfiguration' while
setting bean property 'securityConfiguration'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.DefaultSecurityConfiguration' defined in
file [/opt/shibboleth-idp/conf/oidc-relying-party.xml]: Cannot resolve
reference to bean '#{'shibboleth.oidc.SigningConfiguration'.trim()}'
while setting bean property 'signatureSigningConfiguration'; nested
exception is org.springframework.beans.factory.BeanCreationException:
Error creating bean with name 'shibboleth.oidc.SigningConfiguration'
defined in file [/opt/shibboleth-idp/conf/oidc-relying-party.xml]:
Cannot resolve reference to bean 'shibboleth.oidc.SigningCredentials'
while setting bean property 'signingCredentials'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.SigningCredentials': Cannot resolve
reference to bean 'shibboleth.oidc.DefaultRSSigningCredential' while
setting bean property 'sourceList' with key [0]; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.DefaultRSSigningCredential' defined in
file [/opt/shibboleth-idp/conf/credentials-oidc.xml]: Invocation of init
method failed; nested exception is
org.springframework.beans.FatalBeanException: Could not decode provided
KeyFile class path resource
[opt/shibboleth-idp/credentials/idp-signing-rs.jwk]; nested exception is
java.io.FileNotFoundException: class path resource
[opt/shibboleth-idp/credentials/idp-signing-rs.jwk] cannot be opened
because it does not exist
shib_idp_container | at
org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:342)
shib_idp_container | Caused by:
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'OIDC.SSO' defined in file
[/opt/shibboleth-idp/conf/oidc-relying-party.xml]: Cannot resolve
reference to bean 'shibboleth.oidc.DefaultSecurityConfiguration' while
setting bean property 'securityConfiguration'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.DefaultSecurityConfiguration' defined in
file [/opt/shibboleth-idp/conf/oidc-relying-party.xml]: Cannot resolve
reference to bean '#{'shibboleth.oidc.SigningConfiguration'.trim()}'
while setting bean property 'signatureSigningConfiguration'; nested
exception is org.springframework.beans.factory.BeanCreationException:
Error creating bean with name 'shibboleth.oidc.SigningConfiguration'
defined in file [/opt/shibboleth-idp/conf/oidc-relying-party.xml]:
Cannot resolve reference to bean 'shibboleth.oidc.SigningCredentials'
while setting bean property 'signingCredentials'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.SigningCredentials': Cannot resolve
reference to bean 'shibboleth.oidc.DefaultRSSigningCredential' while
setting bean property 'sourceList' with key [0]; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.DefaultRSSigningCredential' defined in
file [/opt/shibboleth-idp/conf/credentials-oidc.xml]: Invocation of init
method failed; nested exception is
org.springframework.beans.FatalBeanException: Could not decode provided
KeyFile class path resource
[opt/shibboleth-idp/credentials/idp-signing-rs.jwk]; nested exception is
java.io.FileNotFoundException: class path resource
[opt/shibboleth-idp/credentials/idp-signing-rs.jwk] cannot be opened
because it does not exist
shib_idp_container | at
org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:342)
shib_idp_container | Caused by:
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.DefaultSecurityConfiguration' defined in
file [/opt/shibboleth-idp/conf/oidc-relying-party.xml]: Cannot resolve
reference to bean '#{'shibboleth.oidc.SigningConfiguration'.trim()}'
while setting bean property 'signatureSigningConfiguration'; nested
exception is org.springframework.beans.factory.BeanCreationException:
Error creating bean with name 'shibboleth.oidc.SigningConfiguration'
defined in file [/opt/shibboleth-idp/conf/oidc-relying-party.xml]:
Cannot resolve reference to bean 'shibboleth.oidc.SigningCredentials'
while setting bean property 'signingCredentials'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.SigningCredentials': Cannot resolve
reference to bean 'shibboleth.oidc.DefaultRSSigningCredential' while
setting bean property 'sourceList' with key [0]; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.DefaultRSSigningCredential' defined in
file [/opt/shibboleth-idp/conf/credentials-oidc.xml]: Invocation of init
method failed; nested exception is
org.springframework.beans.FatalBeanException: Could not decode provided
KeyFile class path resource
[opt/shibboleth-idp/credentials/idp-signing-rs.jwk]; nested exception is
java.io.FileNotFoundException: class path resource
[opt/shibboleth-idp/credentials/idp-signing-rs.jwk] cannot be opened
because it does not exist
shib_idp_container | at
org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:342)
shib_idp_container | Caused by:
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.SigningConfiguration' defined in file
[/opt/shibboleth-idp/conf/oidc-relying-party.xml]: Cannot resolve
reference to bean 'shibboleth.oidc.SigningCredentials' while setting
bean property 'signingCredentials'; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.SigningCredentials': Cannot resolve
reference to bean 'shibboleth.oidc.DefaultRSSigningCredential' while
setting bean property 'sourceList' with key [0]; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.DefaultRSSigningCredential' defined in
file [/opt/shibboleth-idp/conf/credentials-oidc.xml]: Invocation of init
method failed; nested exception is
org.springframework.beans.FatalBeanException: Could not decode provided
KeyFile class path resource
[opt/shibboleth-idp/credentials/idp-signing-rs.jwk]; nested exception is
java.io.FileNotFoundException: class path resource
[opt/shibboleth-idp/credentials/idp-signing-rs.jwk] cannot be opened
because it does not exist
shib_idp_container | at
org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:342)
shib_idp_container | Caused by:
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.SigningCredentials': Cannot resolve
reference to bean 'shibboleth.oidc.DefaultRSSigningCredential' while
setting bean property 'sourceList' with key [0]; nested exception is
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.DefaultRSSigningCredential' defined in
file [/opt/shibboleth-idp/conf/credentials-oidc.xml]: Invocation of init
method failed; nested exception is
org.springframework.beans.FatalBeanException: Could not decode provided
KeyFile class path resource
[opt/shibboleth-idp/credentials/idp-signing-rs.jwk]; nested exception is
java.io.FileNotFoundException: class path resource
[opt/shibboleth-idp/credentials/idp-signing-rs.jwk] cannot be opened
because it does not exist
shib_idp_container | at
org.springframework.beans.factory.support.BeanDefinitionValueResolver.resolveReference(BeanDefinitionValueResolver.java:342)
shib_idp_container | Caused by:
org.springframework.beans.factory.BeanCreationException: Error creating
bean with name 'shibboleth.oidc.DefaultRSSigningCredential' defined in
file [/opt/shibboleth-idp/conf/credentials-oidc.xml]: Invocation of init
method failed; nested exception is
org.springframework.beans.FatalBeanException: Could not decode provided
KeyFile class path resource
[opt/shibboleth-idp/credentials/idp-signing-rs.jwk]; nested exception is
java.io.FileNotFoundException: class path resource
[opt/shibboleth-idp/credentials/idp-signing-rs.jwk] cannot be opened
because it does not exist
shib_idp_container | at
org.springframework.beans.factory.support.AbstractAutowireCapableBeanFactory.initializeBean(AbstractAutowireCapableBeanFactory.java:1796)
shib_idp_container | Caused by:
org.springframework.beans.FatalBeanException: Could not decode provided
KeyFile class path resource
[opt/shibboleth-idp/credentials/idp-signing-rs.jwk]; nested exception is
java.io.FileNotFoundException: class path resource
[opt/shibboleth-idp/credentials/idp-signing-rs.jwk] cannot be opened
because it does not exist
shib_idp_container | at
org.geant.idpextension.oidc.profile.spring.factory.BasicJWKCredentialFactoryBean.doCreateInstance(BasicJWKCredentialFactoryBean.java:83)
shib_idp_container | Caused by: java.io.FileNotFoundException: class
path resource [opt/shibboleth-idp/credentials/idp-signing-rs.jwk] cannot
be opened because it does not exist
shib_idp_container | at
org.springframework.core.io.ClassPathResource.getInputStream(ClassPathResource.java:180)
shib_idp_container | 2020-09-07 13:03:46,626 - 127.0.0.1 - ERROR
[org.apache.velocity.loader:351] - ResourceManager: unable to find
resource 'status.vm' in any resource loader.
^CGracefully stopping... (press Ctrl+C again to force)
Le 07/09/2020 à 14:57, Julien Cochennec a écrit :
>
> The CSCFI Image works great, thanks, I just had to add a parameter to
> build.sh to make it silent :
>
> RUN /opt/shibboleth-idp/bin/build.sh -Didp.target.dir=/opt/shibboleth-idp
>
> Now I have another problem that looks like a file or a permission is
> missing (see below for stack trace).
>
> java.io.FileNotFoundException:
> /opt/shibboleth-idp/jetty-base/jetty.state (Permission denied)
>
> Do I have to create this file manually? If so, which permissions
> should I use?
>
>
> Step 16/16 : RUN /opt/jetty-home/bin/jetty.sh restart
> ---> Running in 23f1215149e6
> Stopping Jetty: ERROR: no pid found at /var/run/jetty/jetty.pid
> Starting Jetty: 2020-09-07 12:43:59.480:INFO::main: Logging
> initialized @1198ms to org.eclipse.jetty.util.log.StdErrLog
> 2020-09-07 12:44:00.481:INFO:oejs.SetUIDListener:main: Setting umask=02
> 2020-09-07 12:44:00.554:INFO:oejs.SetUIDListener:main: Opened
> ServerConnector at 7975d1d8{SSL, (ssl, alpn, h2)}{0.0.0.0:8443}
> 2020-09-07 12:44:00.557:INFO:oejs.SetUIDListener:main: Opened
> ServerConnector at 18f8cd79{HTTP/1.1, (http/1.1, h2c)}{0.0.0.0:8080}
> 2020-09-07 12:44:00.558:INFO:oejs.SetUIDListener:main: Setting UID=1000
> 2020-09-07 12:44:00.576:WARN:oejuc.FileNoticeLifeCycleListener:main:
> java.io.FileNotFoundException:
> /opt/shibboleth-idp/jetty-base/jetty.state (Permission denied)
> at java.base/java.io.FileOutputStream.open0(Native Method)
> at java.base/java.io.FileOutputStream.open(FileOutputStream.java:298)
> at
> java.base/java.io.FileOutputStream.<init>(FileOutputStream.java:237)
> at
> java.base/java.io.FileOutputStream.<init>(FileOutputStream.java:158)
> at java.base/java.io.FileWriter.<init>(FileWriter.java:82)
> at
> org.eclipse.jetty.util.component.FileNoticeLifeCycleListener.writeState(FileNoticeLifeCycleListener.java:44)
> at
> org.eclipse.jetty.util.component.FileNoticeLifeCycleListener.lifeCycleStarting(FileNoticeLifeCycleListener.java:57)
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.setStarting(AbstractLifeCycle.java:204)
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:71)
> at
> org.eclipse.jetty.xml.XmlConfiguration.lambda$main$1(XmlConfiguration.java:1929)
> at java.base/java.security.AccessController.doPrivileged(Native
> Method)
> at
> org.eclipse.jetty.xml.XmlConfiguration.main(XmlConfiguration.java:1878)
> at
> java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native
> Method)
> at
> java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> at
> java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.base/java.lang.reflect.Method.invoke(Method.java:566)
> at org.eclipse.jetty.start.Main.invokeMain(Main.java:218)
> at org.eclipse.jetty.start.Main.start(Main.java:491)
> at org.eclipse.jetty.start.Main.main(Main.java:77)
> 2020-09-07 12:44:00.586:INFO:oejs.Server:main: jetty-9.4.29.v20200521;
> built: 2020-05-21T17:20:40.598Z; git:
> 77c232aed8a45c818fd27232278d9f95a021095e; jvm 11.0.7+11-alpine-r1
> 2020-09-07 12:44:00.613:INFO:oejdp.ScanningAppProvider:main:
> Deployment monitor [file:///opt/shibboleth-idp/jetty-base/webapps/] at
> interval 1
> . . 2020-09-07 12:44:08.127:INFO:oeja.AnnotationConfiguration:main:
> Scanning elapsed time=4429ms
> 2020-09-07 12:44:08.802:INFO:oejshC.idp:main: No Spring
> WebApplicationInitializer types detected on classpath
> 2020-09-07 12:44:09.454:INFO:oejs.session:main:
> DefaultSessionIdManager workerName=node0
> 2020-09-07 12:44:09.456:INFO:oejs.session:main: No SessionScavenger
> set, using defaults
> 2020-09-07 12:44:09.461:INFO:oejs.session:main: node0 Scavenging every
> 600000ms
> 2020-09-07 12:44:09.517:INFO:oejshC.idp:main: Initializing Spring root
> WebApplicationContext
> . . Warning: Nashorn engine is planned to be removed from a future JDK
> release
> . . Warning: Nashorn engine is planned to be removed from a future JDK
> release
> . . 2020-09-07 12:44:31.630:INFO:oejshC.idp:main: Initializing Spring
> DispatcherServlet 'idp'
> 2020-09-07 12:44:34.098:INFO:oejsh.ContextHandler:main: Started
> o.e.j.w.WebAppContext at 29a5f4e7{Shibboleth Identity
> Provider,/idp,[file:///tmp/jetty-0_0_0_0-8443-idp_war-_idp-any-2395631551190150044.dir/webinf/,
> jar:file:///opt/shibboleth-idp/war/idp.war!/],AVAILABLE}{/opt/shibboleth-idp/war/idp.war}
> 2020-09-07 12:44:34.144:INFO:oejus.SslContextFactory:main:
> x509=X509 at 46f77687(jetty,h=[jetty.eclipse.org],w=[]) for
> Server at 74948d11[provider=null,keyStore=file:///opt/shibboleth-idp/jetty-base/etc/keystore,trustStore=file:///opt/shibboleth-idp/jetty-base/etc/keystore]
> 2020-09-07 12:44:34.167:INFO:oejus.SslContextFactory:main:
> x509=X509 at 9aa9e4a(mykey,h=[],w=[]) for
> Server at 74948d11[provider=null,keyStore=file:///opt/shibboleth-idp/jetty-base/etc/keystore,trustStore=file:///opt/shibboleth-idp/jetty-base/etc/keystore]
> 2020-09-07 12:44:34.255:INFO:oejs.AbstractConnector:main: Started
> ServerConnector at 7975d1d8{SSL, (ssl, alpn, h2)}{0.0.0.0:8443}
> 2020-09-07 12:44:34.268:INFO:oejs.AbstractConnector:main: Started
> ServerConnector at 18f8cd79{HTTP/1.1, (http/1.1, h2c)}{0.0.0.0:8080}
> 2020-09-07 12:44:34.269:INFO:oejs.Server:main: Started @35987ms
> 2020-09-07 12:44:34.269:WARN:oejuc.FileNoticeLifeCycleListener:main:
> java.io.FileNotFoundException:
> /opt/shibboleth-idp/jetty-base/jetty.state (Permission denied)
> at java.base/java.io.FileOutputStream.open0(Native Method)
> at java.base/java.io.FileOutputStream.open(FileOutputStream.java:298)
> at
> java.base/java.io.FileOutputStream.<init>(FileOutputStream.java:237)
> at
> java.base/java.io.FileOutputStream.<init>(FileOutputStream.java:158)
> at java.base/java.io.FileWriter.<init>(FileWriter.java:82)
> at
> org.eclipse.jetty.util.component.FileNoticeLifeCycleListener.writeState(FileNoticeLifeCycleListener.java:44)
> at
> org.eclipse.jetty.util.component.FileNoticeLifeCycleListener.lifeCycleStarted(FileNoticeLifeCycleListener.java:63)
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.setStarted(AbstractLifeCycle.java:193)
> at
> org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
> at
> org.eclipse.jetty.xml.XmlConfiguration.lambda$main$1(XmlConfiguration.java:1929)
> at java.base/java.security.AccessController.doPrivileged(Native
> Method)
> at
> org.eclipse.jetty.xml.XmlConfiguration.main(XmlConfiguration.java:1878)
> at
> java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native
> Method)
> at
> java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
> at
> java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
> at java.base/java.lang.reflect.Method.invoke(Method.java:566)
> at org.eclipse.jetty.start.Main.invokeMain(Main.java:218)
> at org.eclipse.jetty.start.Main.start(Main.java:491)
> at org.eclipse.jetty.start.Main.main(Main.java:77)
>
>
> Le 07/09/2020 à 11:20, Ian Young a écrit :
>>> On 2020-09-07, at 09:25, Julien Cochennec<julien.cochennec at ac-orleans-tours.fr> wrote:
>>>
>>> Hi, Id 'like to test the Docker image for Shibboleth IDP 4.
>>>
>>> I'm using this :https://hub.docker.com/r/unicon/shibboleth-idp/dockerfile
>>>
>> This particular image, from Unicon, doesn't seem to be maintained any more. As you've noted, it is in any case for IdP V3 and not even the most recent version of that.
>>
>>
>>> Can I change those values to build an IDP V4 Docker image?
>> Perhaps in principle. As Alan says, you need to fix all the prerequisites, not just the IdP version.
>>
>> Given that this image no longer seems to be maintained, though, it might be easier to start with one of the forks, e.g. the one from csc.fi:
>>
>> Image:https://hub.docker.com/r/cscfi/shibboleth-idp
>> Source:https://github.com/CSCfi/shibboleth-idp-dockerized
>>
>> There's also the InCommon TIER image:
>>
>> https://hub.docker.com/r/tier/shib-idp
>>
>> Read this page for more details:
>>
>> https://spaces.at.internet2.edu/display/ITAP/InCommon+Trusted+Access+Platform+Release
>>
>> These are actively maintained and kept pretty well up to date.
>>
>>
>>> If so, what will I need to do to build a v4 SP from thishttps://hub.docker.com/r/unicon/shibboleth-sp/dockerfile ?
>>>
>> Version numbers for the IdP and SP are not connected. The latest version of the SP is 3.1.0; there is no V4 at this time.
>>
>>
>> -- Ian
>>
>>
>>
>>
>>
> --
> Julien Cochennec
> Pôle de compétences - gestion des identités
>
> Méljulien.cochennec at ac-orleans-tours.fr
> Tél 02 38 83 48 88
>
> DSI - Rectorat d'Orléans-Tours
> 10 Rue Molière
> 45000 Orléans
> www.ac-orleans-tours.fr
>
--
Julien Cochennec
Pôle de compétences - gestion des identités
Mél julien.cochennec at ac-orleans-tours.fr
Tél 02 38 83 48 88
DSI - Rectorat d'Orléans-Tours
10 Rue Molière
45000 Orléans
www.ac-orleans-tours.fr
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/dev/attachments/20200907/2ab4c49d/attachment-0001.htm>
More information about the dev
mailing list