[SciFed] Tomcat 6 requirement for Shib IDP
Chad La Joie
lajoie at itumi.biz
Wed Jan 25 18:22:18 GMT 2012
Yes, this specific bug actually affected versions of Tomcat 6, as
well, prior to 6.0.17 (hence the reason that's the minimum supported
So, to be clear, to the best of my knowledge Shib strictly adheres to
the relevant Java and HTTP standards. Tomcat, however, does not and
that causes problems.
On Wed, Jan 25, 2012 at 13:19, Nate Klingenstein <ndk at internet2.edu> wrote:
> I asked the lead developer of the IdP for details as to why Tomcat 5 is not
> supported. Apparently Tomcat 5 has a problem parsing
> specification-compliant cookies that they have chosen to not fix, with the
> suggested remedy of "upgrade to 6." As a result, we can only support Tomcat
> Tomcat 6 packages are available directly from the Tomcat project's website:
> Future distributions of the IdP with an embedded servlet container would
> hopefully reduce the amount of package management you'll need to do.
> Hope this answers your question,
> On 1/25/2012 17:37, Dhiva wrote:
>>> The Shibboleth Identity Provider, version 2, is a standard Java web
>>> application based on the Servlet 2.4 specification.
>>> Apache Tomcat 6.0.17 or greater (NOT 7)
>>> Java 5 or greater (Java 6 recommended )
> My issue here is that Redhat/CentOS machines does have Tomcat 5 packages,
> but NOT tomcat 6.
> But the servlet specification is indeed 2.4, which matches with Shib
> I have used jpackage.repo in the past, but it is not consistently providing
> tomcat 6 packages for Redhat/CentOS.
> I would like to stay with Redhat/CentOS Package Repository, so i wanted to
> know if Tomcat 5 along with the OpenJDK.
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
Chad La Joie
trusted identities, delivered
More information about the users