shibboleth RPM and "/etc/init.d/shibd"

[Peter Schober]

* Sami Silén <Sami.Silen at csc.fi> [2011-08-12 13:46]:
> But is there some way to prevent this same problem with
> "/etc/init.d/shibd" script. In our situation we're not running shibd
> process under root ownership, we're using different user. After each
> upgrade ownership changes back to root and then we have to go thru
> all service providers and fix them.

That could be worked around by changing the packaging to get the user
(and group) shibd should run as from /etc/sysconfig/shibd, so
/etc/init.d/shibd wouldn't have to be changed.

Other than that, if you manage many systems there's probably no way
around some kind of managment tool for that (cfengine, puppet, etc.).
-peter