[SciFed] Tomcat 6 requirement for Shib IDP

Nate Klingenstein ndk at internet2.edu
Wed Jan 25 18:19:32 GMT 2012


I asked the lead developer of the IdP for details as to why Tomcat 5 is 
not supported.  Apparently Tomcat 5 has a problem parsing 
specification-compliant cookies that they have chosen to not fix, with 
the suggested remedy of "upgrade to 6."  As a result, we can only 
support Tomcat 6.

Tomcat 6 packages are available directly from the Tomcat project's website:


Future distributions of the IdP with an embedded servlet container would 
hopefully reduce the amount of package management you'll need to do.

Hope this answers your question,

On 1/25/2012 17:37, Dhiva wrote:
> >> https://wiki.shibboleth.net/confluence/display/SHIB2/IdPInstall
> >> The Shibboleth Identity Provider, version 2, is a standard Java web 
> application based on the Servlet 2.4 specification.
> >> 
> https://wiki.shibboleth.net/confluence/display/SHIB2/IdPApacheTomcatPrepare
> >> Apache Tomcat 6.0.17 or greater (NOT 7)
> >> Java 5 or greater (Java 6 recommended )
> My issue here is that Redhat/CentOS machines does have Tomcat 5 
> packages, but NOT tomcat 6.
> But the servlet specification is indeed 2.4, which matches with Shib 
> requirement.
> I have used jpackage.repo in the past, but it is not consistently 
> providing tomcat 6 packages for Redhat/CentOS.
> I would like to stay with Redhat/CentOS Package Repository, so i 
> wanted to know if Tomcat 5 along with the OpenJDK.
> thanks
> dhiva

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120125/dcebfe65/attachment.html 

More information about the users mailing list