Tomcat Config Question

[Christopher Bland]

Hello All,

I am in the process of tracing a login context/previous session issue 
and Chad suggests it an enviroment issue.  My question is, there are two 
sets of docs for Tomcat setup and I am not sure of the differences.

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPApacheTomcatPrepare
Downloadtomcat6-dta-ssl-1.0.0.jar 
<http://shibboleth.internet2.edu/downloads/maven2/edu/internet2/middleware/security/tomcat6/tomcat6-dta-ssl/1.0.0/tomcat6-dta-ssl-1.0.0.jar>(asc 
<http://shibboleth.internet2.edu/downloads/maven2/edu/internet2/middleware/security/tomcat6/tomcat6-dta-ssl/1.0.0/tomcat6-dta-ssl-1.0.0.jar.asc>) 
in to/TOMCAT_HOME/lib//.

<Connector port="8443"
            protocol="org.apache.coyote.http11.Http11Protocol"
            SSLImplementation="edu.internet2.middleware.security.tomcat6.DelegateToApplicationJSSEImplementation"
            scheme="https"
            SSLEnabled="true"
            clientAuth="true"
            keystoreFile="IDP_HOME/credentials/idp.jks"
            keystorePass="PASSWORD"  />


https://spaces.internet2.edu/display/ShibInstallFest/IdP+Step-by-Step

<Connector port="8443"
            address="10.0.1.#"
            maxHttpHeaderSize="8192"
            maxSpareThreads="75"
            scheme="https"
            secure="true"
            clientAuth="want"
            sslProtocol="TLS"
            SSLEnabled="true"
            keystoreFile="/opt/shibboleth-idp/credentials/idp.jks"
            keystorePass="password"
            truststoreFile="/opt/shibboleth-idp/credentials/idp.jks"
            truststorePass="password"
            truststoreAlgorithm="DelegateToApplication"  />


I am unsure of what tomcat6-dta-ssl-1.0.0.jar does and the that mean 
that I don't need the extra parameters?

Also I am using an Apache front-end with mod_proxy configured as 
ProxyPass /idp ajp://localhost:8009/idp.  Are ProxyPassReverse or 
ProxyPassReverseCookiePath required as part of setup also?

Any additional light anyone can shed on the subject would be helpful.

Thanks in advance,

-Chris
-- 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120312/9616d28d/attachment.html