idp on tomcat 7

[Bryan Leber]

I have used the Unicon jar for tomcat 7 and have been running in production for some time without any issues. As long as you follow the instructions on the link below, you should be just fine.

Thank you,

Bryan Leber
Implementation Manager
Fischer International Identity
btl at fischerinternational.com
www.fischerinternational.com
Office: +1 239-436-2713
Cell: +1 239-963-5267

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Paul B. Henson
Sent: Monday, February 17, 2014 12:07 AM
To: users at shibboleth.net
Subject: idp on tomcat 7

We've migrated pretty much all of our other jsp based apps to tomcat 7, our shibboleth idp is the last remaining on tomcat 6. While I don't think we need the SOAP traffic, I've been reluctant to lose that functionality just in case.

However, I found out a month or two ago that Unicon has ported tomcat6-dta-ssl to tomcat 7:

https://github.com/Unicon/shibboleth-tomcat-dta-ssl/tree/master/tomcat7

I'm considering going ahead and migrating our idp to tomcat 7, but was curious if anyone else had used this package and had any feedback about it, or tips about any other potential issues with tomcat 7 and the idp?

Other than using this version of the tomcat6-dta-ssl package, it looks like the only other thing that needs to be done is explicitly add -Djava.endorsed.dirs= to the tomcat config, as unlike version 6, version
7 no longer appears to include that out of the box.

Assuming the unicon package doesn't have any issues, perhaps the wiki for setting up tomcat could up updated to point to it? I know jetty is the new preferred container for the upcoming version of the idp, but given many if not most people are using tomcat with the current version it would be nice for the wiki to document using a more recent version of tomcat.

Thanks...


--
Paul B. Henson  |  (909) 979-6361  |  http://www.csupomona.edu/~henson/ Operating Systems and Network Analyst  |  henson at csupomona.edu California State Polytechnic University  |  Pomona CA 91768
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net