IDP3.2.1 Unable to decode incoming request

Cantor, Scott cantor.2 at osu.edu
Mon Jul 18 09:01:37 EDT 2016


> About the need to tune the config files of jetty 9.3.10 to get the IDP to work
> as well as it did with 9.3.6, here's a list of what I did:
> 
> -) add the java startup parameter "-Djava.security.egd=file:/dev/./urandom"
> to line 353 of jetty.sh to get rid of startup delay

Not a Jetty thing, and certainly not specific to any one version.

> -) copy the keystore file to jetty/etc/keystore and save it's passwords into
> the appropriate places of jetty-ssl-context.xml

There should be no difference in how you approach this with any 9.3 version, and we provide examples that don't use keystores at all, and use properties to locate the PKCS12 files.

> -) copy block from
> https://wiki.shibboleth.net/confluence/display/IDP30/ECPConfiguration into
> jetty.xml to allow JAAS to function:

That is not necessary with V3 as a rule. The JAAS layer is inside the IdP.

-- Scott




More information about the users mailing list