Shibboleth2.xml - internal use skeleton: Difference between revisions

From RavenWiki
Jump to navigationJump to search
(Note that 2.4 may simplify this)
(Additionally link to a 2.5-compatible version for the skeleton)
Line 1: Line 1:
The main configuration for the Shibboleth SP is a file called shibboleth2.xml. You'll find this in the main Shibboleth configuration directory whose location varies from installation to installation. Try /etc/shibboleth, /opt/shibboleth-sp/etc/shibboleth, C:\opt\shibboleth-sp\etc\shibboleth or similar.
The main configuration for the Shibboleth SP is a file called shibboleth2.xml. You'll find this in the main Shibboleth configuration directory whose location varies from installation to installation. Try /etc/shibboleth, /opt/shibboleth-sp/etc/shibboleth, C:\opt\shibboleth-sp\etc\shibboleth or similar.


A skeleton file is available, suitable for use with an SP that only wants to work within the University and only wants to authenticate Raven users. It can be collected from
Various skeleton versions of this file are available, suitable for use with an SP that only wants to work within the University and only wants to authenticate Raven users. This one is well tested and believed to work with versions 2.3 and 2.4 of the SP software:


   http://raven.cam.ac.uk/project/shibboleth/files/config/shibboleth2.xml-UCAMSKEL
   http://raven.cam.ac.uk/project/shibboleth/files/config/shibboleth2.xml-UCAMSKEL


Note that this file is for version 2.3 of the SP software - it may require minor modification to work with earlier versions. Version 2.4 of the software introduces a number of simplifications to the configuration file - this skeleton does not yet take advantage of these.
Version 2.4 of the SP software introduced a number of simplifications to the configuration file, and version 2.5 of the software stopped accepting some features that used to work in version 2.4. This skeleton files is believed to work with versions 2.4 and 2.5 of the SP software, but has not jet been well tested:
 
  http://raven.cam.ac.uk/project/shibboleth/files/config/shibboleth2.xml-UCAMSKEL-2.5


Make a copy of it and rename it shibboleth2.xml. Search it for all occurrences of 'FIX-ME' and apply the edits described in the adjacent comments. Try not to disturb anything you are not explicitly told to alter - see [[Editing XML]] for tips on editing XML files. You can check it for major mistakes by running  
Make a copy of it and rename it shibboleth2.xml. Search it for all occurrences of 'FIX-ME' and apply the edits described in the adjacent comments. Try not to disturb anything you are not explicitly told to alter - see [[Editing XML]] for tips on editing XML files. You can check it for major mistakes by running  

Revision as of 16:09, 5 August 2013

The main configuration for the Shibboleth SP is a file called shibboleth2.xml. You'll find this in the main Shibboleth configuration directory whose location varies from installation to installation. Try /etc/shibboleth, /opt/shibboleth-sp/etc/shibboleth, C:\opt\shibboleth-sp\etc\shibboleth or similar.

Various skeleton versions of this file are available, suitable for use with an SP that only wants to work within the University and only wants to authenticate Raven users. This one is well tested and believed to work with versions 2.3 and 2.4 of the SP software:

 http://raven.cam.ac.uk/project/shibboleth/files/config/shibboleth2.xml-UCAMSKEL

Version 2.4 of the SP software introduced a number of simplifications to the configuration file, and version 2.5 of the software stopped accepting some features that used to work in version 2.4. This skeleton files is believed to work with versions 2.4 and 2.5 of the SP software, but has not jet been well tested:

 http://raven.cam.ac.uk/project/shibboleth/files/config/shibboleth2.xml-UCAMSKEL-2.5

Make a copy of it and rename it shibboleth2.xml. Search it for all occurrences of 'FIX-ME' and apply the edits described in the adjacent comments. Try not to disturb anything you are not explicitly told to alter - see Editing XML for tips on editing XML files. You can check it for major mistakes by running

 <some path>/shibd -t (Unix)
 <some path>\shibd.exe -check (Windows)

The path to shibd varies from installation to installation - try /sbin, /opt/shibboleth-sp/sbin, C:\opt\shibboleth-sp\sbin or similar.