Multiple ResourceFilters

Marvin S. Addison marvin.addison at gmail.com
Thu Jul 25 09:48:59 EDT 2013


We're working on refactoring our IdP configuration and we'd like to 
distill environment configuration in two properties files:

1. Information common to all tiers
2. Sensitive information specific to a particular host/tier

The service.xml snippet to go with:

<srv:ConfigurationResource
         file="/opt/shibboleth-idp/conf/attribute-resolver.xml"
         xsi:type="resource:FilesystemResource">
     <ResourceFilter xsi:type="PropertyReplacement"
                     xmlns="urn:mace:shibboleth:2.0:resource"
                     propertyFile="/path/to/idp.properties"/>
     <ResourceFilter xsi:type="PropertyReplacement"
                 xmlns="urn:mace:shibboleth:2.0:resource"
                 propertyFile="/path/to/idp-env.properties"/>
</srv:ConfigurationResource>

Unfortunately it appears that the resource schema allows exactly one 
ResourceFilter element:

     <complexType name="ResourceType" abstract="true">
         <sequence>
             <element ref="res:ResourceFilter" minOccurs="0"/>
         </sequence>
     </complexType>

Am I reading that right? Assuming yes, has anyone created an extension 
to provide support for multiple resource filters? If there's no such 
beast, would anyone hazard a work/difficulty estimate on developing that 
functionality? At first glance 
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPExtResFilter was 
a little intimidating for something so seemingly simple.

Looking at alternatives, could I leverage the Spring beans schema to 
wire up a PropertyPlaceholderConfigurer which naturally supports 
multiple property file locations?

Thanks,
Marvin


More information about the users mailing list