IdP v3: reload-service.sh

Kirk Turner-Rustin ktrustin at owu.edu
Tue Sep 29 14:38:16 EDT 2015


On Tue, 29 Sep 2015, Cantor, Scott wrote:

>> Container's access log registered an HTTP redirect (302) for my curl
>> attempt, i.e.:
>
> Then that's the problem. The IdP doesn't return that.

Just to put closure on this:

We have tomcat configured to force (redirect) connections to port 8443. 
The reload-service.sh doesn't follow redirects (nor IMO should it need 
to), and the curl command line I unsuccessfully used didn't follow 
redirects either. So naturally I never got past the container's HTTP 
connector.

These commands worked just fine:

     Follow the redirect, ignoring SSL cert exchange requirements:

     # curl -kL \
 	http://localhost/idp/profile/admin/reload-service?id=[serviceId]

     Don't futz with redirects but go directly to the service URL,
     respecting SSL cert requirements.

     # JAVA_HOME=/usr ./reload-service.sh -id [serviceId] \
 	-ts /etc/pki/java/tomcat.keystore \
 	-tp [keystore-password] \
 	-u https://idp.owu.edu:8443

Thanks again to all.

Cheers,
Kirk

-- 
   Kirk Turner-Rustin SCJP  | Senior Systems Analyst
   Ohio Wesleyan University | Information Services
   http://www.owu.edu       | http://infoserv.owu.edu


More information about the users mailing list