idp 2.4.0 tomcat 8 startup problems

[Cantor, Scott]

On 2/5/15, 2:47 AM, "Baron Fujimoto" <baron at hawaii.edu> wrote:


>
>The Xerces reference reminded me of the endorsed library directory, so
>after copying the jar files from the shib install directory to a
>${tomcat_base}/lib/endorsed directory, I tried again and that seems to
>have done the trick.

That's not the right solution. We documented that in the last security 
advisory explaining how to migrate to the proper settings and secure 
Tomcat.

>FWIW, I wasn't able to find good references to setting up the endorsed
>library directory in the Shib IdP docs.

Because it is no longer correct to do it and doing so makes your system 
vulnerable. There should be no references whatsoever to it so if any are 
left, I missed them.

But the logging issue I think is a bug in the V2 logging config. It's 
turning Spring logging OFF, which does not seem good to me, but it's 
possible having it on logs spurious errors, otherwise I don't know why 
Chad would have done it. That obviously made this much harder to debug 
than it should have been.

-- Scott