Can env vars be referenced in shibboleth2.xml?

[Wessel, Keith]

Well, Chris, at least on docker-compose, both containers are running on the same server. Same afaik with AWS Fargate when both containers are part of the same task which is the goal here; deploy an Apache instance with its own SP instance as a sidecar.

It's working fine locally, and I expect it will in AWS, too.

I'm setting the SP entity ID and discovery URL via Apache content settings as Scott suggested yesterday, and those can get pulled into Apache using env vars.

For those who remember my institution talking about its Shib in a Box which would simplify what I'm trying to do here, I would have used that, but it seems like overkill for when I just need a single SP and won't be doing any horizontal cluster scaling. That project is still in the works here and is being used by a couple of services. The developer on it got moved elsewhere, and it's still not quite production ready for the masses, but I hope it will be soon.

Keith


-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Christopher Bongaarts via users
Sent: Wednesday, September 30, 2020 10:53 AM
To: users at shibboleth.net
Cc: Christopher Bongaarts <cab at umn.edu>
Subject: Re: Can env vars be referenced in shibboleth2.xml?

On 9/29/2020 6:49 PM, Peter Schober wrote:
> * Peter Schober <peter.schober at univie.ac.at> [2020-09-30 01:30]:
>> (Or maybe sharing the Unix domain socket from the shibd container to
>> the httpd one via a volume mount.)
> @Keith: Wouldn't that avoid all the issues in a simpler way?

I don't think that would work generally unless all your containers and 
the mount are on the same physical host...

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%

-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net