[prev in list] [next in list] [prev in thread] [next in thread] 

List:       shibboleth-users
Subject:    Re: Reloadable Services
From:       Nate Klingenstein <ndk () sudonym ! me>
Date:       2018-09-28 22:05:19
Message-ID: CA+eXai4=+5muwaFgFmysANBdW7N4eka3hgELkrbTZLfWgqtrVA () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Lille,

When you call the reload, you want to use the service ID, not the bean
name.  (shibboleth.NameIdentifierGenerationService)

You can reload saml-nameid.xml dynamically, but depending on what you're
trying to accomplish, it may depend on other things that aren't dynamically
reloaded.  I would try a dynamic reload using the service ID, see if you
get errors/expected behavior, then restart if necessary.

Hope this helps,
Nate.

On Fri, Sep 28, 2018 at 9:58 PM, Lille M <lillemacdoe@gmail.com> wrote:

> Is 'saml-nameid.xml' a reloadable service -- https://wiki.shibboleth.net/
> confluence/display/IDP30/ReloadableServices?
>
> I thought it could be via shibboleth.NameIdentifierGenerationResources?
> But received an error message.
>
> From 'services.xml':
>
> <util:list id ="shibboleth.NameIdentifierGenerationResources">
>         <value>%{idp.home}/conf/saml-nameid.xml</value>
>         <value>%{idp.home}/system/conf/saml-nameid-system.xml</value>
>     </util:list>
>
> I have to make an update to the file  -- can I just update in the tomcat
> without restarting tomcat?
>
> Thanks.
>
> (rant: dealing with an extremely annoying non-standard vendor whom I
> rather not name)
>
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/
> confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe@shibboleth.net
>

[Attachment #5 (text/html)]

<div dir="ltr"><div>Lille,</div><div><br></div><div>When you call the reload, you \
want to use the service ID, not the bean name.   \
(shibboleth.NameIdentifierGenerationService)</div><div><br></div><div>You can reload \
saml-nameid.xml dynamically, but depending on what you&#39;re trying to accomplish, \
it may depend on other things that aren&#39;t dynamically reloaded.   I would try a \
dynamic reload using the service ID, see if you get errors/expected behavior, then \
restart if necessary.</div><div><br></div><div>Hope this \
helps,</div><div>Nate.<br></div></div><div class="gmail_extra"><br><div \
class="gmail_quote">On Fri, Sep 28, 2018 at 9:58 PM, Lille M <span dir="ltr">&lt;<a \
href="mailto:lillemacdoe@gmail.com" \
target="_blank">lillemacdoe@gmail.com</a>&gt;</span> wrote:<br><blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div \
dir="ltr">Is &#39;saml-nameid.xml&#39; a reloadable service -- <a \
href="https://wiki.shibboleth.net/confluence/display/IDP30/ReloadableServices" \
target="_blank">https://wiki.shibboleth.net/<wbr>confluence/display/IDP30/<wbr>ReloadableServices</a>?</div><div \
dir="ltr"><br></div><div>I thought it could be via \
shibboleth.<wbr>NameIdentifierGenerationResour<wbr>ces? But received an error \
message.</div><div><br></div><div>From \
&#39;services.xml&#39;:</div><div><br></div><div>&lt;util:list id \
=&quot;shibboleth.<wbr>NameIdentifierGenerationResour<wbr>ces&quot;&gt;<br>           \
&lt;value&gt;%{idp.home}/conf/saml-<wbr>nameid.xml&lt;/value&gt;<br>               \
&lt;value&gt;%{idp.home}/system/<wbr>conf/saml-nameid-system.xml&lt;/<wbr>value&gt;<br> \
&lt;/util:list&gt;</div><div><br></div><div>I have to make an update to the file   -- \
can I just update in the tomcat without restarting \
tomcat?</div><div><br></div><div>Thanks.</div><div><br></div><div>(rant: dealing with \
an extremely annoying non-standard vendor whom I rather not \
name)</div></div></div></div> <br>-- <br>
For Consortium Member technical support, see <a \
href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" \
target="_blank">https://wiki.shibboleth.net/<wbr>confluence/x/coFAAg</a><br> To \
unsubscribe from this list send an email to <a \
href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br></blockquote></div><br></div>




-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net

[prev in list] [next in list] [prev in thread] [next in thread]