Ex: idp 5 disabling RemoteUser/X509 servets

[Paul B. Henson]

On Wed, Mar 27, 2024 at 01:47:47AM +0000, Paul B. Henson via users wrote:
> Being somewhat obsessive compulsive in regards to optimization, I want
> to utilize the new idp5 option to disable unnecessary servlets. Of
> course, I also want to confirm I did so successfully.

For the archives, I was able to determine if the servlets were being
registered by looking in the jetty console logs
(with jetty.server.dumpAfterStart=true), and disabled them by adding:

	<Set name="overrideDescriptor">etc/idp-override-web.xml</Set>

to idp.xml in the webapps directory, and creating the file
idp-override-web.xml:

<?xml version="1.0" encoding="UTF-8"?>
<web-app xmlns="http://java.sun.com/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd" version="3.0">
    <context-param>
        <param-name>net.shibboleth.idp.registerRemoteUserServlet</param-name>
        <param-value>false</param-value>
    </context-param>
    <context-param>
        <param-name>net.shibboleth.idp.registerX509Servlet</param-name>
        <param-value>false</param-value>
    </context-param>
</web-app>

-- 
Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
Operating Systems and Network Analyst  |  henson at cpp.edu
California State Polytechnic University  |  Pomona CA 91768