IdP v4.1 unattendended plugin install error: INFO - Key import barred by user
Pete Birkinshaw
pete at digitalidentitylabs.com
Wed Apr 28 12:04:20 UTC 2021
I hit the same issue last week: I looked for a -y option and then resorted to using the yes command.
I think a -y option might encourage a too-casual approach to security, but if you're using yes to answer the prompt you know you're cheating a bit.
Unfortunately running yes | plugin.sh -i https://whatever.com/plugin.tgz causes a nullpointer error - I don't think Java handles piped STDIN properly by default. I'd rather yes worked than -y, but I'd be happy with -y.
I did a manual install and then copied the plugin truststore keys into the credentials directory instead and that worked fine.
If this is a good time to ask for more features, I'd like the option to delay rebuilding the .war file after installing a plugin - if a number of plugins are installed together I'd rather the .war was only built once. But it's not a big deal. The new plugin and module features in 4.1 are *very* helpful!
Pete
--
Pete Birkinshaw
Digital Identity Ltd | http://www.digitalidentity.ltd.uk
Registered in England and Wales No. 7121888
-----Original Message-----
From: Lipscomb, Gary via users <users at shibboleth.net>
Reply: Shib Users <users at shibboleth.net>
Date: 28 April 2021 at 11:59:24
To: 'Shib Users' <users at shibboleth.net>, Rod Widdowson <rdw at steadingsoftware.com>
Cc: Lipscomb, Gary <glipscomb at csu.edu.au>
Subject: Re: IdP v4.1 unattendended plugin install error: INFO - Key import barred by user
> Hi Rod,
> Had read that bit.
> From what I have worked out you can't do an unattended install as the first install of the
> plugin. You need to respond to the prompt for the key for the install to complete.
> After that you can gather the required info to plug into the build process so additional
> servers can be completed unattended.
> I was hoping for a -y qualifier to be associated with the --noPrompt qualifier.
> Doing the semi manual build and capturing the required info will work for our process.
> Regards
> Gary
>
>
More information about the users
mailing list