How to enable logging about docker-shibboleth-idp

[terrisgit]

I was having a directory permission problems, since the user 'jetty' is running Shibboleth idP rather than 'root.' See also: http://stackoverflow.com/questions/23544282/what-is-the-best-way-to-manage-permissions-for-docker-shared-volumes

(1) On your Docker host, create a user and group both named jetty both with GID/UID = 1000

(2) mkdir -p ~/shibboleth-idp/logs

(3) In the 'docker run' command, add:

-v ~/shibboleth-idp/logs:/opt/shibboleth-idp/logs

Then the logs will be in ~/docker/shibboleth-idp on the Docker host. No need to change any config files.

(4) For every local directory (local to the Docker host) referenced in the -v options in your "docker run" command, run 'chown' on your Docker host:

chown -R jetty:jetty dirname

[terrisgit]

Perhaps update readme?

[terrisgit]

See also moby/moby#7198

[jtgasper3]

@terrisgit, thanks for the report. I'll look into the details that you've posted over the coming days.

Thanks.

[terrisgit]

I eventually also had permission issues with files in /opt/iam-jetty-base/conf . They are owned by root but user 'jetty' needs to read them. Some files had permissions 660 instead of 664. I'm not sure how that happened. I was able to troubleshoot this only after my experience with the log files. I changed run-shibboleth.sh to run chown -R jetty:jetty on /opt/iam-user-base and /opt/shibboleth-idp

[jtgasper3]

I just merged in changes for 3.1.2. Now that this is current, I'll get your changes in place.

[jtgasper3]

The change I made tonight seems to produce logs in both locations: the IDP home and Jetty base.