Deploy Shib2 IdP in Glassfish 3

[Cantor, Scott]

On 6/19/13 11:36 AM, "Farrukh Najmi" <farrukh at wellfleetsoftware.com> wrote:

>The org.opensaml.xml.parse.BasicParserPool class is configured to use
>above class in internal.xml spring config. As an aside, I wonder whether
>the explicit xerces dependency is necessary or whether use of standard
>JAXP API would suffice.

There is no standard API for a security manager, that I'm aware, so no
matter what you do, you have a hardcoded bean in the XML file.

That's independent of the fact that we require endorsement of Xerces/Xalan.

>I have gathered so far is that direct use of xerces classes in opensaml
>(and possibly IdP) is not a good fit with Glassfish which expects that
>JAXP implementation provided by the JDK to be used. The kludge /
>workaround I list above seems to work though I need
> to test this further. The open question is whether Shib projects can and
>should consider removing the explicit dependency on xerces and instead
>rely on standard JAXP API.

The implementation of JAXP has historically been a broken mess. In the
last few years that may be cleaned up, but we aren't going to spend time
testing that assumption until 3.0.

-- Scott