Configuring a file-backed HTTP resource for attribute filters

[Wessel, Keith]

Well, at least it looked simple. :)

After adding it, with the appropriate edits to the URL and backing file, I'm getting the error:

2015-07-20 09:47:37,606 - WARN [net.shibboleth.ext.spring.resource.FileBackedHTTPResource:117] - FileBackedHTTPResource [ 
https://hostname.removed.edu/itrust-af/shib-test-idp.cites.illinois.edu.xml|ServletContext 
 resource [/services/shib-idp/opt/idp/conf/itrust-test-attribute-filter.xml]] HTTP resource was inaccessible for getInputStream(), trying backing file.

And of course the backing file doesn't exist yet.

I can wget this URL fine from the command-line on the IDP. Is there something special I need to do because it's https?

If need be, I can turn my logging up to debug, but I'd suspect I'm just missing something.

Keith

-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Rod Widdowson
Sent: Monday, July 20, 2015 4:40 AM
To: 'Shib Users' <users at shibboleth.net>
Subject: RE: Configuring a file-backed HTTP resource for attribute filters

> The bean definition from the file-backed http resource page on the wiki
> makes sense, but I'm not sure where to put it and how to make it work
> alongside the existing local file resource.

It's entirely up to you how you structure this.

For a one off configuration I'd just bung it inline:

    <util:list id ="shibboleth.AttributeFilterResources">
        <value>%{idp.home}/conf/attribute-filter.xml</value>
        <bean
class="net.shibboleth.ext.spring.resource.FileBackedHTTPResource"
              c:client-ref="shibboleth.FileCachingHttpClient" 
 
c:url="http://another.server.example.org/path/to/different/file.xml"
 
c:resource="/var/shibboleth/caches/resourcecache/differentFile.xml"/>

    </util:list>

But you can have the bean declared in a separate file (global.xml or another
file) and have a <ref bean="whatever"/> inside the <util:list>.  The
service.properties beans are probably of more interest to people setting up
automated installations (like federations).

/R

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net