Setting idp.home

Tom Zeller tzeller at dragonacea.biz
Thu Jul 7 11:27:38 EDT 2016


> On Jul 7, 2016, at 2:27 AM, Rod Widdowson <rdw at steadingsoftware.com> wrote:
> 
>> <context-param>
>>    <param-name>idp.home</param-name>
>>    <param-value>/home/shib/idp</param-value>
>> </context-param>
> 
> I seem to recall that when I tested it you needed to be careful to put that
> Stanza in the correct place.  But I have no further details to mind.  I know
> others have got this to work in production so I rely on them to chip in.

Not in production, but adding the above <context-param> either before of after the other <context-param>s at the top of web.xml worked for me.

Also, noting that the above <context-param> needs to be _added_ to web.xml. What I did was copy $idp.home/webapp/WEB-INF/web.xml to $idp.home/edit-webapp/WEB-INF/web.xml, and then add the above <context-param> to $idp.home/edit-webapp/WEB-INF/web.xml. The purpose of edit-webapp is to preserve changes like this during IdP upgrades.

>> Confusingly, I noticed the expanded warfile now has two copies of web.xml:
>> /WEB-INF/web.xml
>> ./web.xml
> 
> So how the rebuild works is that it copies edit-webapp into webapp and
> builds the war file from webapp.  This means that files that are added to
> edit-webapp and then removed will be sticky in the resultant war.  You could
> try removing the rogue file from /webapp and rebuilding.  Or move webapp aay
> and copy it in again from the distro.

So, trying to be clear, the last suggestion is to replace $idp.home/webapp with shibboleth-identity-provider-<version>/webapp from the unpacked IdP software package. 

FWIW web.xml is also available as source, for example :

http://svn.shibboleth.net/view/java-identity-provider/tags/3.2.1/idp-war/src/main/webapp/WEB-INF/web.xml?view=markup






More information about the users mailing list