Changes between Version 17 and Version 18 of idpiam2018

Timestamp:

Sep 12, 2018, 10:43:34 AM (7 years ago)

Author:

admin

Comment:

--

idpiam2018

@@ -610 +610 @@
     quit
 }}}     
-* Restart mysql service: `service mysql restart'
-26. Enable the generation of the `persistent-id` (this replace the deprecated attribute //eduPersonTargetedID//)
+* Restart mysql service: `service mysql restart`
+26. Enable the generation of the `persistent-id` 
 * 
 {{{
@@ -647 +647 @@
      <ref bean="c14n/SAML2Persistent" />
 }}}       
-27. Enable '''JPAStorageService''' for the '''StorageService''' of the user consent:
+27. Enable '''JPAStorageService''' for the '''!StorageService''' of the user consent:
 * `vim /opt/shibboleth-idp/conf/global.xml` and add this piece of code to the tail before the ending \</beans\>:
 
@@ -726 +726 @@
 }}}
 
-* Solution 2: LDAP + TLS:
-
-{{{
-       idp.authn.LDAP.authenticator = bindSearchAuthenticator
-       idp.authn.LDAP.ldapURL = ldaps://ldap.example.org:636
-       idp.authn.LDAP.useStartTLS = false
-       idp.authn.LDAP.useSSL = true
-       idp.authn.LDAP.sslConfig = certificateTrust
-       idp.authn.LDAP.trustCertificates = %{idp.home}/credentials/ldap-server.crt
-       idp.authn.LDAP.baseDN = ou=people,dc=example,dc=org
-       idp.authn.LDAP.userFilter = (uid={user})
-       idp.authn.LDAP.bindDN = cn=admin,dc=example,dc=org
-       idp.authn.LDAP.bindDNCredential = ###LDAP_ADMIN_PASSWORD###
-       idp.attribute.resolver.LDAP.trustCertificates   = %{idp.authn.LDAP.trustCertificates:undefined}
-}}}
-* Solution 3: plain LDAP
+
+* Solution 2: plain LDAP
   
 {{{
@@ -753 +739 @@
        idp.authn.LDAP.bindDNCredential = ###LDAP_ADMIN_PASSWORD###
 }}}       
-(If you decide to use the Solution 3, you have to remove (or comment out) the following code from your Attribute Resolver file:
+(If you decide to use the Solution 2, you have to remove (or comment out) the following code from your Attribute Resolver file:
       
 {{{
@@ -765 +751 @@
        </resolver:DataConnector>
 }}}
-'''UTILITY FOR OPENLDAP ADMINISTRATOR:''' *`ldapsearch -H ldap:// -x -b "dc=example,dc=it" -LLL dn`* the baseDN ==> `ou=people, dc=example,dc=org` (branch containing the registered users) * the bindDN ==> `cn=admin,dc=example,dc=org` (distinguished name for the user that can made queries on the LDAP)
+'''UTILITY FOR OPENLDAP ADMINISTRATOR:''' 
+`ldapsearch -H ldap:// -x -b "dc=instXY,dc=ac,dc=lk" -LLL dn` 
+* the baseDN ==> `ou=people, dc=instXY,dc=ac,dc=lk` (branch containing the registered users)
+* the bindDN ==> `cn=admin,dc=instXY,dc=ac,dc=lk` (distinguished name for the user that can made queries on the LDAP)
 
 29. Enrich IDP logs with the authentication error occurred on LDAP:
@@ -826 +815 @@
         - Uncomment SingleLogoutService:
         
-          <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://identity.thilinapathirana.xyz/idp/profile/SAML2/Redirect/SLO"/>
-          <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://identity.thilinapathirana.xyz/idp/profile/SAML2/POST/SLO"/>
-          <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://identity.thilinapathirana.xyz/idp/profile/SAML2/POST-SimpleSign/SLO"/>
-          <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://identity.thilinapathirana.xyz/idp/profile/SAML2/SOAP/SLO"/>
+          <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.YOUR-DOMAIN/idp/profile/SAML2/Redirect/SLO"/>
+          <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.YOUR-DOMAIN/idp/profile/SAML2/POST/SLO"/>
+          <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.YOUR-DOMAIN/idp/profile/SAML2/POST-SimpleSign/SLO"/>
+          <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.YOUR-DOMAIN/idp/profile/SAML2/SOAP/SLO"/>
 
 
@@ -911 +900 @@
 
 
-== Configure Attribute Filters to release the mandatory attributes to the default IDEM Resources: ==
+== Configure Attribute Filters to release the mandatory attributes to the default LEARN Resources: ==
 
 37. Make sure that you have the "`tmp/httpClientCache`" used by "`shibboleth.FileCachingHttpClient`":