Page Comparison

ant.home (v4)
idp.installer.homedir (v5)

From where the installer is being run

N/A

Probably not supported, Its here really to pass the “this is home” info across to the installer.
This is also the location from which other input files are located.
I’m considering removing this as a setting entirely in prefernce to either allowing idp.property.files and *.merge.properties to be absolute (or relative to the source dir)idp.property.file

--propertyFile

N/A

The first thing looked it. If present it is used to get other propertiesidp.src.dir

Not as a property

--home
(we’ll set it in the bat/shell file)

$idp.installer.homedir

sourceDir
-s

None

No longer prompted for. You get this property value or idp.installer.homedir.
Possibly no supported (I think windows will need it)This is injected by the install scripts

idp.target.dir

--targetDir
-t

Installation Directory:

idp.noprompt

--noPrompt

If the qualifier is present (or the property set to any value) then if a required value is not available via properties then the install fails (rather than prompting for a value)

idp.entityID

https://$idp.host.name/idp/shibboleth

SAML EntityID:

Written into idp.properties on initial install

idp.host.name

Some nasty hackery with the network

Host Name:

Drives the default entityId
Drives the default scope
Drives the subjectAltName
Drives the metadata
Drives key generation

idp.scope

The host name with the first bit removed

Attribute Scope:

idp.merge.properties

idp.entityID=$idp.entityId
idp.scope=$idp.scope

A property file whose contents are merged into the default idp.properties on an initial install only.
This is either the absolute path or a path relative to the source dir

ldap.merge.properties

no merge

If present this file is merged into ldap.properties

This is either the absolute path or a path relative to the source dir

idp.LDAP.credential

myServicePassword

Used to set idp.authn.LDAP.bindDNCredential in secrets.properties

idp.keystore.password

Backchannel PKCS12 Password:

Password for credentials/idp-backchannel.p12
Are we going to keep om generating this?

idp.sealer.password

Cookie Encryption Key Password:

Password for credentials/sealer.p12

idp.sealer.alias

secret

Alias in credentials/sealer.p12

idp.sealer.keysize

128

New In V5
AES key size for credentials/sealer.p12

idp.keysize

3072

key size for credentials\idp-signing.*, credentials\idp-encryption.* and credentials/idp-backchannel.p12

idp.conf.setmode

true

whether to lock down the installation
bin/*.sh 755
system/* 444
dist/* 444
dist/plugin* 640

New install only:
credentials/* $idp.conf.credentials.filemode
credentials/* group $idp.conf.credentials.group (if present)

idp.conf.credentials.filemode

600

Mode to set credentials/* on a new install if $idp.conf.setmode

idp.conf.credentials.group

If non-null and $idp.conf.setmode, the group to set on credentials/*

idp.no.tidy

false

Debug only if set to anything then any intermdeiate files (like the merge files) are not deleted.

idp.initial.modules

idp.EditWebApp (V5) idp.CommandLine (V5) idp.authn.Password idp.admin.Hello

Comma-separated list of modules to enable on install. If this starts with '+' then the valuse are appended to the list.

ant.home (v4)

From where the installer is being run

N/A

Not available in V5

idp.conf.preoverlay (V4 only)

No longer Used, proposed alternative is to write a plugin and get that installed

idp.initial.edit-webapp (V4 only)

No longer Used, proposed alternative is to write a plugin and get that installed