Can env vars be referenced in shibboleth2.xml?

[Wessel, Keith]

Circling back on this with one more question. Is it possible to use env vars in the values of content settings set with the ShibRequestSetting directive? It's not working, and I've tried a few different ways.

It seems that use of env vars (both from the OS and internal to Apache) is directive or module specific. There's one way to do it with mod_rewrite directives, another way with LogFormat directives, and still another with mod_proxy directives. So, it seems to be something handled by each respective module. Since the mod_shib documentation doesn't mention anything about env vars, I'm guessing this isn't possible. But I wanted to make sure I'm not missing something.

If this is the case, I think I'm back on modifying shibboleth2.xml on container boot with a couple of sed commands; not as nifty, but still fine.

Keith


-----Original Message-----
From: Wessel, Keith 
Sent: Tuesday, September 29, 2020 3:02 PM
To: Shib Users <users at shibboleth.net>
Subject: RE: Can env vars be referenced in shibboleth2.xml?

That would work as would the discovery URL. But, since I have two containers running together to separate out shibd and Apache, I also need to dynamically set the TCPListener address and acl list. There's no way to set those externally, is there?

Keith


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: Tuesday, September 29, 2020 2:37 PM
To: Shib Users <users at shibboleth.net>
Subject: Re: Can env vars be referenced in shibboleth2.xml?

No, but the entityID can be controlled with Apache with the entityIDSelf setting, and Apache can probably do something with environment variables.

-- Scott


-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net