Can env vars be referenced in shibboleth2.xml?

[Cantor, Scott]

On 9/29/20, 7:30 PM, "Peter Schober" <peter.schober at univie.ac.at> wrote:

>    To support the most fundamental workings of the software (telling
>    shibd where to listen on and from whom to allow connections, telling
>    Apache httpd where to connect to shibd) I suppose literally extending
>   the SP to take the values of these settings (address, port, acl
>    attributes on the TCPListener) from environment variables would be a
>    sensible way forward.

I don't recall who asked for the address and port to be handled but not the ACL. I would guess it's because most people just ignore the security of all this and don't care about the ACL if they're doing odd things. A RFE for the ACL part is not a big ask, it's in the same area of the code that already falls back to env.

I only even looked because I had some vague recollection of the env enhancement being done but I couldn't have told you I did it until I looked (and it was never documented, it seems).

-- Scott