Add SHIBBOLETH_CACHE_TIMEOUT, SHIBBOLETH_SESSION_TIMEOUT and SHIBBOLE…

…TH_SESSION_LIFETIME env vars
ubc · May 29, 2023 · 0540296 · 0540296
1 parent 93fe708
commit 0540296
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -10,6 +10,9 @@ ENV SHIBD_VERSION=3.2.1-3.1
 ENV SHIBD_REMOTE_USER=somerandomname
 ENV SHIBD_CONSISTENT_ADDRESS=true
 ENV SHIBBOLETH_IDP_METADATA_BACKUPFILE=/var/cache/shibboleth/shibboleth-metadata-idp.xml
+ENV SHIBBOLETH_SESSION_LIFETIME=7200
+ENV SHIBBOLETH_SESSION_TIMEOUT=3600
+ENV SHIBBOLETH_CACHE_TIMEOUT=3600
 
 WORKDIR /etc/shibboleth
 

diff --git a/shibboleth2.xml-template b/shibboleth2.xml-template
@@ -19,7 +19,7 @@
       </ConnectionString>
    </StorageService>
 
-   <SessionCache type="StorageService" StorageService="db" cacheAllowance="3600" inprocTimeout="900" cleanupInterval="900"/>
+   <SessionCache type="StorageService" StorageService="db" cacheAllowance="3600" cacheTimeout="${SHIBBOLETH_CACHE_TIMEOUT}" inprocTimeout="900" cleanupInterval="900"/>
 
    <ReplayCache StorageService="db"/>
 
@@ -29,7 +29,7 @@
       signing="true" encryption="false"
       REMOTE_USER="${SHIBD_REMOTE_USER}">
 
-      <Sessions lifetime="7200" timeout="3600" relayState="ss:db"
+      <Sessions lifetime="${SHIBBOLETH_SESSION_LIFETIME}" timeout="${SHIBBOLETH_SESSION_TIMEOUT}" relayState="ss:db"
          idpHistory="true" idpHistoryDays="7"
          checkAddress="false" handlerSSL="false" cookieProps="http" consistentAddress="${SHIBD_CONSISTENT_ADDRESS}">