Usual directory for Shib SP 2.5.x for local backing copy of metadata?

[Michael A Grady]

First, this is in reference to installing 2.5.1 using yum on a RedHat 5 system.

So the Shib 2.5 SP installs mostly ready to be run as a non-root user (shibd), and changes a number of file permissions to do so. But it leaves /etc/shibboleth as owned by root:root, and that seemed to be a pretty standard place for the file-backed copy of federation metadata to go. Are you changing permissions on  that directory manually, or now writing (maybe you always did?) the local copy of the federation metadata into an alternate directory? One of the Shibboleth-specific /var directories that get created and are owned by shibd?

--
Michael A. Grady
Senior IAM Consultant, Unicon, Inc.