-
Configuring Shibboleth SP 2 on CentOS to the ukfederation w/ Godaddy certs
Part 2. Shibboleth Config (6 hours)
cd /etc/shibboleth wget http://metadata.ukfederation.org.uk/ukfederation.pem wget http://metadata.ukfederation.org.uk/ukfederation-metadata.xml
Edit shibboleth2.xml
Replace all instances of sp.example.org with your Entity ID ie sp.yourdomain.comSearch for ApplicationDefaults
Add homeURL=”https://sp.domainz.com/ahomeurl” under entityID – homeURL is the first url of the resource if none is specified.
Search for <sessions
Before the default example (Reading Default example directs to a speci… ” Insert:
<SessionInitiator isDefault="true" id="UKFederation" Location="/WAYF/UKFederation" type="WAYF" defaultACSIndex="5" URL="https://wayf.ukfederation.org.uk/WAYF" />
Search for exportLocation
Under exportLocation replace http://localhost with https://localhost
Replace all instances of root@localhost with the technical support email address
Search for MetadataProvider
This bit gets messy so pay close attention…..
After the line reading Insert
<MetadataProvider type="XML" uri="http://metadata.ukfederation.org.uk/ukfederation-metadata.xml" backingFilePath="/etc/shibboleth/ukfederation-metadata.xml" reloadInterval="14400"> <MetadataFilter type="RequireValidUntil" maxValidityInterval="2592000"/> <SignatureMetadataFilter certificate="ukfederation.pem"/> </MetadataProvider>
Search for the line Delete it or comment it out.
Directly below it paste the following:
/etc/shibboleth/sp.key /etc/shibboleth/sp.crt
Don’t forget to replace yourpassword with your key password if you have set one!
For now we are done in shibboleth2.xml
Run ./keygen.sh to generate your new key pair
mv sp-key.pem sp.key mv sp-cert.pem sp.crt
Now we must configure Apache for shibboleth
Related posts:
- Configuring Apache for Shibboleth on CentOS to the ukfederation w/ Godaddy certs Part 3. Apache config. (1 hour) The above will create...
- Testing Shibboleth SP 2 on CentOS to the ukfederation w/ Godaddy certs Part 4. Testing (2 hours) Shibboleth can be started using...
- Installing Shibboleth SP 2 on CentOS to the ukfederation w/ Godaddy certs Internet 2 give some “creative” documentation for this procedure so...
- Shibboleth WAYFless URLs UKFederation Shibboleth is a single sign on method used by UK...
- Installing shibboleth SP 2.3 on CentOS Press y 3 times. Done. Proceed to configuration.. Report Post...
Pingback: Installing Shibboleth SP 2 on CentOS to the ukfederation w/ Godaddy certs | John McLear's School Technology
Pingback: Installing shibboleth SP 2.3 on CentOS | John McLear's School Technology