...
- Glassfish 3.2.2.2 or greater
- Java 6 or later.
| Note |
|---|
Glassfish 3 is not yet formally supported by the Shibboleth team due to impedance mismatch with Glassfish and use of xerces / xalan. Those interested in developing the necessary support to move off xerces/xalan runtime dependencies are welcome to direct questions to the development list. |
Required Configuration Changes
...
- cp ~/shibboleth/shibboleth-identityprovider-2.4.0/endorsed/xercesImpl-2.10.0.jar ~/glassfish3/glassfish/domains/domain1/lib
- Copy xml-apis-*.jar to your domain's lib directory using a command similar to the following:
- cp ~/shibboleth/shibboleth-identityprovider-2.4.0/endorsed/xml-apis-2.10.0.jar ~/glassfish3/glassfish/domains/domain1/lib
- cp ~/shibboleth/shibboleth-identityprovider-2.4.0/endorsed/xml-apis-2.10.0.jar ~/glassfish3/glassfish/domains/domain1/lib
- Manually edit the ~/glassfish3/glassfish/domains/domain1/lib/xercesImpl-2.10.0.jar file to rename the folder /META-INF/services to /META-INF/servicesSAVED
- On Linux OS renaming can be done using Archive Manager or similar application without having to extract and repackage the jar. Any other means including extracting the jar renaming the directory in filesystem and recreating the jar also works.
- The renaming of META-INF/services makes sure that the classes of this jar are not used as plugins by JAXP layer and do not confuse the ClassLoader process
- Add the following parameters to the
JAVA_OPTSenvironment variable (all ### is the amount of memory in megabytes to allow for the option):- -Xmx###m - this is the maximum amount of memory that Tomcat may use, at least 512M is recommended
- -XX:MaxPermSize=128m - (Sun JVM specific option) the maximum amount of memory allowed for the permanent generation object space
- Edit the .../glassfish/domains/domain1/config/domain.xml and make equivalent changes in the <java-config> sections using <jvm-options> tags
Recommended Configuration Changes
- Limit the allowed size of POST submissions to any HTTP connectors. A size of 200K 100K (204800100000) is a reasonable choice. It is unknown how this is actually accomplished, please refer to the Glassfish documentation.
...