IdP v4.1 unattendended plugin install error: INFO - Key import barred by user

Pete Birkinshaw pete at digitalidentitylabs.com
Wed Apr 28 12:04:20 UTC 2021


I hit the same issue last week: I looked for a -y option and then resorted to using the yes command.

I think a -y option might encourage a too-casual approach to security, but if you're using yes to answer the prompt you know you're cheating a bit.

Unfortunately running yes | plugin.sh -i https://whatever.com/plugin.tgz causes a nullpointer error - I don't think Java handles piped STDIN properly by default. I'd rather yes worked than -y, but I'd be happy with -y.

I did a manual install and then copied the plugin truststore keys into the credentials directory instead and that worked fine.

If this is a good time to ask for more features, I'd like the option to delay rebuilding the .war file after installing a plugin - if a number of plugins are installed together I'd rather the .war was only built once. But it's not a big deal. The new plugin and module features in 4.1 are *very* helpful!

Pete

--
Pete Birkinshaw
Digital Identity Ltd | http://www.digitalidentity.ltd.uk
Registered in England and Wales No. 7121888

-----Original Message-----
From: Lipscomb, Gary via users <users at shibboleth.net>
Reply: Shib Users <users at shibboleth.net>
Date: 28 April 2021 at 11:59:24
To: 'Shib Users' <users at shibboleth.net>, Rod Widdowson <rdw at steadingsoftware.com>
Cc: Lipscomb, Gary <glipscomb at csu.edu.au>
Subject:  Re: IdP v4.1 unattendended plugin install error: INFO - Key import barred by user

> Hi Rod,
> Had read that bit.
> From what I have worked out you can't do an unattended install as the first install of the  
> plugin. You need to respond to the prompt for the key for the install to complete.
> After that you can gather the required info to plug into the build process so additional  
> servers can be completed unattended.
> I was hoping for a -y qualifier to be associated with the --noPrompt qualifier.
> Doing the semi manual build and capturing the required info will work for our process.  
> Regards
> Gary
>  
>



More information about the users mailing list