Changes between Version 32 and Version 33 of idpiam2018

Timestamp:

Sep 13, 2018, 9:32:51 AM (6 years ago)

Author:

admin

Comment:

--

idpiam2018

@@ -13 +13 @@
    
 
-2. Add to or Modify `/etc/hosts`:
+2. Modify `/etc/hosts`:
    {{{
 vim /etc/hosts
@@ -584 +584 @@
 }}}
 * log in to your MySQL Server with `mysql -u root -p` and continue. Make sure to replace `##ROOT-DB-PASSWORD##`, `##USERNAME##`, `##PASSWORD##` with your own
-{{{#!sql
+{{{#!mysql
     SET NAMES 'utf8';
 
@@ -718 +718 @@
        idp.session.secondaryServiceIndex = true
 }}}
-       (This will indicate to IdP to store the data collected by User Consent into the "'''StorageRecords'''" table)
+       (This will indicate to IdP to store the data collected by User Consent into the "'''!StorageRecords'''" table)
 
 
@@ -726 +726 @@
 If you host ldap in a seperate machine, copy the ldap_server.crt to  `/opt/shibboleth-idp/credentials`
 * 
-{{{
+{{{#!sh
    vim /opt/shibboleth-idp/conf/ldap.properties
 }}}
 * Solution 1: LDAP + STARTTLS:
 
-{{{
+{{{#!cfg
        idp.authn.LDAP.authenticator = bindSearchAuthenticator
        idp.authn.LDAP.ldapURL = ldap://idp.instXY.ac.lk:389
@@ -738 +738 @@
        idp.authn.LDAP.sslConfig = certificateTrust
        idp.authn.LDAP.trustCertificates = %{idp.home}/credentials/ldap-server.crt
-       idp.authn.LDAP.baseDN = ou=people,dc=example,dc=org
+       idp.authn.LDAP.baseDN = ou=people,dc=instXY,dc=ac,dc=lk
        idp.authn.LDAP.userFilter = (uid={user})
-       idp.authn.LDAP.bindDN = cn=admin,dc=example,dc=org
+       idp.authn.LDAP.bindDN = cn=admin,dc=instXY,dc=ac,dc=lk
        idp.authn.LDAP.bindDNCredential = ###LDAP_ADMIN_PASSWORD###
+       idp.authn.LDAP.dnFormat = uid=%s,ou=people,dc=instXY,dc=ac,dc=lk
        idp.attribute.resolver.LDAP.trustCertificates   = %{idp.authn.LDAP.trustCertificates:undefined}
 }}}
@@ -753 +754 @@
        idp.authn.LDAP.useStartTLS = false
        idp.authn.LDAP.useSSL = false
-       idp.authn.LDAP.baseDN = ou=people,dc=example,dc=org
+       idp.authn.LDAP.baseDN = ou=people,dc=instXY,dc=ac,dc=lk
        idp.authn.LDAP.userFilter = (uid={user})
-       idp.authn.LDAP.bindDN = cn=admin,dc=example,dc=org
+       idp.authn.LDAP.bindDN = cn=admin,dc=instXY,dc=ac,dc=lk
        idp.authn.LDAP.bindDNCredential = ###LDAP_ADMIN_PASSWORD###
+       idp.authn.LDAP.dnFormat = uid=%s,ou=people,dc=instXY,dc=ac,dc=lk
 }}}       
 (If you decide to use the Solution 2, you have to remove (or comment out) the following code from your Attribute Resolver file: