IdP 3.2 installation - conf file permissions

[John Horne]

Hello,

I started looking at installing IdP 3.1.2 onto a test server a couple
of days ago. With the release of 3.2, I did a fresh install today. Upon
starting the IdP though I got a permission error logged:

=================
13:50:55.251 - WARN [org.eclipse.jetty.webapp.WebAppContext:527] -
Failed startup of context
o.e.j.w.WebAppContext at 78186a70{/idp,[file:///opt/shibboleth-idp/jetty
-base/tmp/jetty-0.0.0.0-8443-idp.war-_idp-any
-7470239360479751800.dir/webi
nf/, jar:file:///opt/shibboleth
-idp/war/idp.war!/],STARTING}{/opt/shibboleth-idp/war/idp.war}

org.springframework.beans.factory.parsing.BeanDefinitionParsingExceptio
n: Configuration problem: Failed to import bean definitions from
relative location [../../conf/global.xml]

Offending resource: file [/opt/shibboleth-idp/system/conf/global
-system.xml]; nested exception is
org.springframework.beans.factory.BeanDefinitionStoreException:
IOException parsing XML document from file [/opt/shibboleth
-idp/system/con
f/../../conf/global.xml]; nested exception is
java.io.FileNotFoundException: /opt/shibboleth
-idp/system/conf/../../conf/global.xml (Permission denied)
=================

It seems that the '/opt/shibboleth-idp/conf' files have been installed
with (Linux) permissions of 600. Checking the 3.1.2 installation, those
files were installed with permissions of 644.

I changed the files in 'conf', and within its subdirectories, to 644
permissions, and restarted the software. It came up with no errors. I
could find no other obvious permission discrepancies between 3.1.2 and
3.2.




John.

-- 
John Horne                   Tel: +44 (0)1752 587287
Plymouth University, UK