idp on tomcat 7

[Paul B. Henson]

We've migrated pretty much all of our other jsp based apps to tomcat 7,
our shibboleth idp is the last remaining on tomcat 6. While I don't
think we need the SOAP traffic, I've been reluctant to lose that
functionality just in case.

However, I found out a month or two ago that Unicon has ported
tomcat6-dta-ssl to tomcat 7:

https://github.com/Unicon/shibboleth-tomcat-dta-ssl/tree/master/tomcat7

I'm considering going ahead and migrating our idp to tomcat 7, but was
curious if anyone else had used this package and had any feedback about
it, or tips about any other potential issues with tomcat 7 and the idp?

Other than using this version of the tomcat6-dta-ssl package, it looks
like the only other thing that needs to be done is explicitly add
-Djava.endorsed.dirs= to the tomcat config, as unlike version 6, version
7 no longer appears to include that out of the box.

Assuming the unicon package doesn't have any issues, perhaps the wiki
for setting up tomcat could up updated to point to it? I know jetty is
the new preferred container for the upcoming version of the idp, but
given many if not most people are using tomcat with the current version
it would be nice for the wiki to document using a more recent version of
tomcat.

Thanks...


-- 
Paul B. Henson  |  (909) 979-6361  |  http://www.csupomona.edu/~henson/
Operating Systems and Network Analyst  |  henson at csupomona.edu
California State Polytechnic University  |  Pomona CA 91768