shibboleth RPM and "/etc/init.d/shibd"

[Cantor, Scott]

On 8/17/11 6:05 PM, "Peter Schober" <peter.schober at univie.ac.at> wrote:
>
>That could be worked around by changing the packaging to get the user
>(and group) shibd should run as from /etc/sysconfig/shibd, so
>/etc/init.d/shibd wouldn't have to be changed.

No, but the file ownership issues alone make it impractical with the
package as it is now. It's not just changing that one file.

I will be anouncing a prerelease package (labeled 2.5, but only the
packaging has been worked on) in the next day or two hopefully that
includes fixes for the shib.conf issue and installs shibd to run as
"shibboleth".

I haven't moved the changeable bits in the init script out to a sysconfig
file, but that is on my list also. If we put a full set of chown commands
into the init script, then it is possible in theory to install the package
to run as shibboleth by default but have it reset ownership of the
critical files every time it starts to whatever user is set in sysconfig.

-- Scott