Is it possible to turn off plugin check at startup for shib 5?

[tomas.stenlund at telia.com]

Hi,

I am installing some plugins for shib 5 when building our image and it is done in an environment without direct access to internet. No problems there, the online documentation explains how to do that.

./bin/plugin.sh -i plugins/idp-plugin-nashorn-jdk-dist-2.0.0.tar.gz --noCheck --noPrompt --noRebuild
./bin/plugin.sh -i plugins/java-plugin-jdbc-storage-2.0.0.tar.gz --noCheck --noPrompt --noRebuild
./bin/build.sh -t /opt/shibboleth-idp

But when I start up the image I get this:

2023-11-03 07:01:56,941 -  - DEBUG [net.shibboleth.idp.admin.impl.ReportModuleStatus:80] - Checking required modules for plugin net.shibboleth.idp.plugin.nashorn
2023-11-03 07:01:56,942 -  - DEBUG [net.shibboleth.idp.admin.impl.ReportModuleStatus:80] - Checking required modules for plugin net.shibboleth.plugin.storage.jdbc
2023-11-03 07:01:56,975 -  - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:51] - Shibboleth IdP Version 5.0.0
2023-11-03 07:01:56,976 -  - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:52] - Java version='17.0.9' vendor='Red Hat, Inc.'
2023-11-03 07:01:56,977 -  - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:67] - Plugins:
2023-11-03 07:01:56,977 -  - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:69] -                 net.shibboleth.idp.plugin.nashorn : v2.0.0
2023-11-03 07:01:56,977 -  - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:69] -                 net.shibboleth.plugin.storage.jdbc : v2.0.0
2023-11-03 07:01:56,982 -  - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:85] - Enabled Modules:
2023-11-03 07:01:56,983 -  - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:87] -                 Core IdP Functions (Required)
2023-11-03 07:01:56,983 -  - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:87] -                 Command Line Scripts
2023-11-03 07:01:56,983 -  - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:87] -                 Overlay Tree for WAR Build
2023-11-03 07:01:56,983 -  - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:87] -                 Password Authentication
2023-11-03 07:01:56,983 -  - INFO [net.shibboleth.idp.admin.impl.LogImplementationDetails:87] -                 Hello World
2023-11-03 07:01:57,003 -  - INFO [org.apache.hc.client5.http.impl.classic.HttpRequestRetryExec:113] - Recoverable I/O exception (java.net.SocketException) caught when
processing request to {s}->https://shibboleth.net:443
2023-11-03 07:01:57,005 -  - INFO [net.shibboleth.profile.installablecomponent.InstallableComponentSupport:159] - HTTPResource [https://shibboleth.net/downloads/identit
y-provider/plugins/idp-versions.properties] could not be located
2023-11-03 07:01:57,100 -  - INFO [net.shibboleth.profile.installablecomponent.InstallableComponentSupport:159] - HTTPResource [http://plugins.shibboleth.net/idp-versio
ns.properties] could not be located
2023-11-03 07:01:57,100 -  - ERROR [net.shibboleth.profile.installablecomponent.InstallableComponentSupport:169] - Could not locate any active update servers
2023-11-03 07:01:57,101 -  - WARN [net.shibboleth.idp.admin.impl.ReportUpdateStatus:128] - Could not locate IdP update information

Obviously it is because the environment do not allow shib 5 to fetch the property files, the same thing as the plugin command without the noCheck has. Is there a way to turn that check off? I have set the idp.updateCheck.enable=false but that makes no difference.

Shib 5 works as it should, so it is not a fatal thing, but I just would like to get rid of the error and the check.

Thanks,

Tomas

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20231103/1545dbf2/attachment.htm>