Changes between Version 29 and Version 30 of idpiam2018


Ignore:
Timestamp:
Sep 13, 2018, 8:34:17 AM (6 years ago)
Author:
admin
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • idpiam2018

    v29 v30  
    186186   Create the file `/etc/apache2/sites-available/idp-ssl.conf` as follows:
    187187
    188 {{{
     188{{{#!apache
    189189   <IfModule mod_ssl.c>
    190190      SSLStaplingCache        shmcb:/var/run/ocsp(128000)
    … …  
    236236}}}
    237237   
    238 {{{
     238{{{#!apache
    239239   <VirtualHost *:80>
    240240        ServerName "idp.instXY.ac.lk"
    … …  
    263263   vim /etc/apache2/site-available/idp.conf
    264264}}}
    265 {{{
     265{{{#!apache
    266266   <VirtualHost *:80>
    267267     ServerName idp.instXY.ac.lk
    … …  
    355355     Comment out the Connector 8080 (HTTP):
    356356   
    357 {{{
     357{{{#!xml
    358358     <!-- A "Connector" represents an endpoint by which requests are received
    359359          and responses are returned. Documentation at :
    … …  
    372372
    373373     Enable the Connector 8009 (AJP):
    374 {{{
     374{{{#!xml
    375375     <!-- Define an AJP 1.3 Connector on port 8009 -->
    376376     <Connector port="8009" protocol="AJP/1.3" redirectPort="443" address="127.0.0.1" enableLookups="false" tomcatAuthentication="false"/>
    … …  
    389389   sudo vim /etc/tomcat8/Catalina/localhost/idp.xml
    390390}}}
    391 {{{
     391{{{#!xml
    392392<Context docBase="/opt/shibboleth-idp/war/idp.war"
    393393         privileged="true"
    … …  
    400400   vim /etc/apache2/sites-available/idp-proxy.conf
    401401}}} 
    402 {{{
     402{{{#!apache
    403403     <IfModule mod_proxy.c>
    404404       ProxyPreserveHost On
    … …  
    584584}}}
    585585* log in to your MySQL Server with `mysql -u root -p` and continue. Make sure to replace `##ROOT-DB-PASSWORD##`, `##USERNAME##`, `##PASSWORD##` with your own
    586 {{{
     586{{{#!sql
    587587    SET NAMES 'utf8';
    588588
    … …  
    654654   vim /opt/shibboleth-idp/conf/saml-nameid.xml
    655655}}}     
    656 Remove the comment from the line containing:
    657 *
    658 {{{
     656   Remove the comment from the line containing:
     657{{{#!xml
    659658     <ref bean="shibboleth.SAML2PersistentGenerator" />
    660659}}}
    … …  
    663662   vim /opt/shibboleth-idp/conf/c14n/subject-c14n.xml
    664663}}}     
    665 Remove the comment to the bean called "'''c14n/SAML2Persistent'''".       
    666 {{{
     664   Remove the comment to the bean called "'''c14n/SAML2Persistent'''".       
     665{{{#!xml
    667666     <ref bean="c14n/SAML2Persistent" />
    668667}}}       
    66966827. Enable '''JPAStorageService''' for the '''!StorageService''' of the user consent:
    670 * `vim /opt/shibboleth-idp/conf/global.xml` and add this piece of code to the tail before the ending \</beans\>:
    671 
    672 {{{
     669* `vim /opt/shibboleth-idp/conf/global.xml` and add this piece of code to the tail before the ending </beans>:
     670
     671{{{#!xml
    673672     <!-- A DataSource bean suitable for use in the idp.persistentId.dataSource property. -->
    674673     <bean id="MyDataSource" class="org.apache.commons.dbcp.BasicDataSource"
    … …  
    705704
    706705* Modify the IdP configuration file:
    707 *
     706   *
    708707{{{
    709708   vim /opt/shibboleth-idp/conf/idp.properties
    … …  
    761760(If you decide to use the Solution 2, you have to remove (or comment out) the following code from your Attribute Resolver file:
    762761     
    763 {{{
     762{{{#!xml
    764763       </dc:FilterTemplate>
    765764       <!--
    … …  
    781780   vim /opt/shibboleth-idp/conf/logback.xml
    782781}}}
    783 {{{
     782{{{#!xml
    784783     <!-- Logs LDAP related messages -->
    785784     <logger name="org.ldaptive" level="${idp.loglevel.ldap:-WARN}"/>
    … …  
    794793}}}
    795794* Modify `services.xml` file: `vim /opt/shibboleth-idp/conf/services.xml`
    796 {{{
     795{{{#!xml
    797796      <value>%{idp.home}/conf/attribute-resolver.xml</value>
    798797}}}
    799798must become:
    800799
    801 {{{
     800{{{#!xml
    802801      <value>%{idp.home}/conf/attribute-resolver-v1-LEARN.xml</value>
    803802}}}
    … …  
    810809   vim /opt/shibboleth-idp/metadata/metadata.xml
    811810}}}
    812 {{{
     811{{{#!xml
    813812      <IDPSSODescriptor> SECTION:
    814813        – From the list of "protocolSupportEnumeration" remove:
    … …  
    876875   vim metadata-providers.xml
    877876}}}
    878 {{{
     877{{{#!xml
    879878      <MetadataProvider
    880879            id="HTTPMD-LEARN-Federation"
    … …  
    932931   vim /opt/shibboleth-idp/conf/services.xml
    933932}}}
    934 {{{
     933{{{#!xml
    935934      <bean id="Default-Filter" class="net.shibboleth.ext.spring.resource.FileBackedHTTPResource"
    936935            c:client-ref="shibboleth.FileCachingHttpClient"