Changes between Version 10 and Version 11 of idpiam2018


Ignore:
Timestamp:
Sep 3, 2018, 8:35:45 AM (6 years ago)
Author:
admin
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • idpiam2018

    v10 v11  
    403403}}}
    40440416. Create the Apache2 configuration file for IdP:
    405 *
     405* 
    406406{{{
    407407   vim /etc/apache2/sites-available/idp-proxy.conf
     
    421421}}}
    42242217. Enable '''proxy_ajp''' apache2 module and the new IdP site:
    423 *
     423* 
    424424{{{
    425425   a2enmod proxy_ajp
    426426}}}
    427 *
     427* 
    428428{{{
    429429   a2ensite idp-proxy.conf
    430430}}}
    431 *
     431* 
    432432{{{
    433433   service apache2 restart
    434434}}} 
    43543518. Modify '''context.xml''' to prevent error of //lack of persistence of the session objects// created by the IdP :
    436 *
     436* 
    437437{{{
    438438   vim /etc/tomcat8/context.xml
     
    440440and remove the comment from: `<Manager pathname="" />`   
    44144119. Restart Tomcat8:
    442 *
     442* 
    443443{{{
    444444   service tomcat8 restart
    445445}}}
    44644620. Verify if the IdP works by opening this page on your browser:
    447 *
     447* 
    448448{{{
    449449   https://idp.YOUR-DOMAIN/idp/shibboleth
     
    454454
    45545521. Find out the JARs that can be skipped from the scanning:
    456 *
     456* 
    457457{{{
    458458   cd /opt/shibboleth-idp/
    459459}}}
    460 *
     460* 
    461461{{{
    462462   ls webapp/WEB-INF/lib | awk '{print $1",\\"}'
    463463}}} 
    464464Insert the output list into `/etc/tomcat8/catalina.properties` at the tail of  `tomcat.util.scan.StandardJarScanFilter.jarsToSkip`    Make sure about the  `,\` symbols
    465    
     465
    466466Restart Tomcat 8:
    467 *
     467* 
    468468{{{
    469469   service tomcat8 restart
     
    473473
    47447422. Test IdP by opening a terminal and running these commands:
    475 *
     475* 
    476476{{{
    477477   cd /opt/shibboleth-idp/bin
    478478}}}
    479 *
     479* 
    480480{{{
    481481   ./status.sh
     
    484484
    48548523. Install '''MySQL Connector Java''' and other useful libraries used by Tomcat for MySQL DB (if you don't have them already):
    486 *
     486* 
    487487{{{
    488488   apt-get install mysql-server libmysql-java libcommons-dbcp-java libcommons-pool-java
    489489}}}
    490 *
     490* 
    491491{{{
    492492   cd /usr/share/tomcat8/lib/
    493493}}}
    494 *
     494* 
    495495{{{
    496496   ln -s ../../java/mysql.jar mysql-connector-java.jar
    497497}}}
    498 *
     498* 
    499499{{{
    500500   ln -s ../../java/commons-pool.jar commons-pool.jar
    501501}}}
    502 *
     502* 
    503503{{{
    504504   ln -s ../../java/commons-dbcp.jar commons-dbcp.jar
    505505}}}
    506 *
     506* 
    507507{{{
    508508   ln -s ../../java/tomcat-jbcp.jar tomcat-jbcp.jar
     
    511511
    51251224. Rebuild the '''idp.war''' of Shibboleth with the new libraries:
    513 *
     513* 
    514514{{{
    515515   cd /opt/shibboleth-idp/ ; ./bin/build.sh
     
    586586All done!
    587587}}}
    588 * log in to your MySQL Server: `mysql -u root -p'   
     588* log in to your MySQL Server: `mysql -u root -p'`   
    589589{{{
    590590    SET NAMES 'utf8';
     
    628628* Restart mysql service: `service mysql restart'
    62962926. Enable the generation of the `persistent-id` (this replace the deprecated attribute //eduPersonTargetedID//)
    630 *
     630* 
    631631{{{
    632632   vim /opt/shibboleth-idp/conf/saml-nameid.properties
     
    646646     }}}
    647647* Enable the '''SAML2PersistentGenerator''':
    648 *
     648* 
    649649{{{
    650650   vim /opt/shibboleth-idp/conf/saml-nameid.xml
    651651}}}     
    652 Remove the comment from the line containing:   
     652Remove the comment from the line containing:
     653*
    653654{{{
    654655     <ref bean="shibboleth.SAML2PersistentGenerator" />
    655656}}}
    656 *
     657* 
    657658{{{
    658659   vim /opt/shibboleth-idp/conf/c14n/subject-c14n.xml
     
    700701
    701702* Modify the IdP configuration file:
    702 *
     703* 
    703704{{{
    704705   vim /opt/shibboleth-idp/conf/idp.properties