Question about Scripted attribute in attribute-resolver.xml

[Peter Schober]

Emilie Boulard <boulard at cines.fr> [2024-03-01 16:18 CET]:
> We wanted to install the IDPv5 but the RHEL9.3 repository does not
> offer the required tomcat version.

If you buy extra JBoss Web Server subscriptions you apparently can get
Tomcat 10.1 from Red Hat today :-\
https://access.redhat.com/documentation/en-us/red_hat_jboss_web_server/6.0/html-single/installation_guide/index#attach_subscriptions

> We tend to avoid install things like tomcat from sources in our
> production environment.

Right, which is why we recommend against RHEL, CentOS, Alma, Rocky,
etc. in our own local IDP documentation and have done so for years
now.  Though TBH we are documenting use of Debian stable (which has
had appropriate/acceptable Tomcat version) and that's still ignoring
the fact that the Shibboleth project doesn't...

> officially support any "packaged" containers provided by OS vendors

anyway[1]. (So any issues related to OS-provided Java Servlet Containers
would potentially needed to be reproduced on an officially supported
software stack.)

> Soon as RHEl provide the required tomcat version we will update our
> IDP servers. We hope RHEL will provide it very soon.

IDP v4 goes out of support in exactly 6 months so good luck with that.

Best,
-peter

[1] https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199511079/SystemRequirements