Shibboleth2.xml - internal use skeleton

From RavenWiki
Revision as of 16:09, 5 August 2013 by jw35 (talk | contribs)
Jump to navigationJump to search

The main configuration for the Shibboleth SP is a file called shibboleth2.xml. You'll find this in the main Shibboleth configuration directory whose location varies from installation to installation. Try /etc/shibboleth, /opt/shibboleth-sp/etc/shibboleth, C:\opt\shibboleth-sp\etc\shibboleth or similar.

Various skeleton versions of this file are available, suitable for use with an SP that only wants to work within the University and only wants to authenticate Raven users. This one is well tested and believed to work with versions 2.3 and 2.4 of the SP software:

 http://raven.cam.ac.uk/project/shibboleth/files/config/shibboleth2.xml-UCAMSKEL

Version 2.4 of the SP software introduced a number of simplifications to the configuration file, and version 2.5 of the software stopped accepting some features that used to work in version 2.4. This skeleton files is believed to work with versions 2.4 and 2.5 of the SP software, but has not yet been well tested:

 http://raven.cam.ac.uk/project/shibboleth/files/config/shibboleth2.xml-UCAMSKEL-2.5

Make a copy of it and rename it shibboleth2.xml. Search it for all occurrences of 'FIX-ME' and apply the edits described in the adjacent comments. Try not to disturb anything you are not explicitly told to alter - see Editing XML for tips on editing XML files. You can check it for major mistakes by running

 <some path>/shibd -t (Unix)
 <some path>\shibd.exe -check (Windows)

The path to shibd varies from installation to installation - try /sbin, /opt/shibboleth-sp/sbin, C:\opt\shibboleth-sp\sbin or similar.