Scott Williams

> I'm out of my depth, here. Ditto. :-)

I'm using haste server behind an nginx proxy. I didn't have to do anything elaborate (haste is running locally on 7777): ``` server{ listen 80; server_name the.listening.domain; location /{ proxy_pass...

The missing dist might be related to https://github.com/Unicon/shib-cas-authn3/issues/39 as well.

Removing dist still complains about the missing class. I assume I'll also need to update the classpath as well.

It looks like setting this in runclass.sh allowed it to work: `LOCALCLASSPATH="$LOCATION/../webapp/WEB-INF/lib/*":$LOCALCLASSPATH`

I was able to override it for now by overwriting the runclass.sh during docker build. Our automated tests against aacli.sh are working again. Many thanks. For now, we'll compare for...

Note that 3.4.6 is required for the latest version of shib-cas-authn: https://github.com/Unicon/shib-cas-authn3/releases/tag/3.3.0 . 3.4.6 is necessary to fix a security flow problem with ExternalAuthentication, such as via CAS.

Good to know. The other option is seeing how much effort it would be to migrate to the TIER Shibboleth IdP containers. https://hub.docker.com/r/tier/shib-idp https://spaces.at.internet2.edu/plugins/servlet/mobile?contentId=140181885#content/view/140181885

@netscruff - I prefer these images as well. It looks like there's a broken link in the Dockerfile in the repo for updating to 3.4.6. If Unicon isn't going to...

I got our images fully ported over to the TIER images. I have to agree with @netscruff that jetty with the simple overlay is a better architecture for containerization. There...