Shibboleth IdPv3 administrative urls

[Cantor, Scott]

On 10/22/15, 11:33 AM, "users on behalf of Peter Schober" <users-bounces at shibboleth.net on behalf of peter.schober at univie.ac.at> wrote:

>* Michael A Grady <mgrady at unicon.net> [2015-10-22 16:58]:
>> So the following appears to work:
>> 
>>  ../idp/profile/admin/reload-service?id=shibboleth.AttributeResolverService
>> 
>> I guessed that the corresponding argument/value set for reloading
>> metadata would be the 'id' of the MetadataProvider
>> 
>>   ./idp/profile/admin/reload-metadata?id=MyLocalMetadataFile
>> 
>> and that appears to have worked. Is the above correct, and anything
>> else interesting about using the above endpoints that may not
>> otherwise be obvious without looking at the code?

No, we still need to fully document the command line layer. There are lots of command line switches relative to how to actually run the scripts, though the endpoints themselves are just simple. The metadata part wasn't actually documented yet I don't think.

>All of this is documented, at
>https://wiki.shibboleth.net/confluence/display/IDP30/ReloadableServices

All but the metadata, and I didn't get around to actually documenting all the options, though there's a help switch.

>I later did add a listener on port 80 on the loopback interface only,
>to make the scripts work as documented. Seems easy enough and allows
>anyone following the docs to reload stuff, w/o local knowhow.

We'll probably get around to replacing the use of java.net.URL, which is why the current code doesn't have a way to bypass the cert checking on 443 if you just use localhost with that.

There's also a new environment option in the next version to set the base URL for all the scripts.

>Reloading works wonderfully and at least on Tomcat8 is absolutely
>essential, as restarting the IDP (or context) would take ages, so that
>would be absolutely prohibitive for testing purposes.

That's diagnosed now, you just have to let it unpack the war. It doesn't take appreciably longer than on Jetty.

-- Scott