...
This configuration information is for Windows installations that use Apache. IIS is described below.
- Download the Shibboleth SP installer.
- Run the installer. The installer will prompt for an install path (you cannot have spaces in this path, e.g. "\Program Files\"), change default configuration files as appropriate for Windows, and set various environment variables for you. A default
shibd
service can also be installed, or you can install it manually using the instructions in this guide. - Edit
httpd.conf
:- Shibboleth bundles configuration directives in the files
/opt/shibboleth/etc/shibboleth/apache.config
,/opt/shibboleth/etc/shibboleth/apache2.config
, and/opt/shibboleth/etc/shibboleth/apache22.config
which must be Included inhttpd.conf
. Select and use only the one that matches your version of Apache, e.g.apache22.config
for Apache 2.2.x. Be wary of placing the configuration in the wrongVirtualHost
. - The
UseCanonicalName
directive should be set toOn
. On some Apache builds including the RedHat distribution, this defaults toOff
which will cause problems in resource mapping. - Ensure that the
ServerName
directive is properly set, and that Apache is being started with SSL enabled.
- Shibboleth bundles configuration directives in the files
- By default, the Shibboleth module is configured to log information on behalf of Apache to
/var/log/httpd/native.log
, though this can be changed by modifying the.logger
files pointed to by the configuration. For this log to be created, Apache must have permission to write to this file, which may require that the file be manually created and permissions assigned to whatever user Apache is configured to run under. If the file does not appear when Apache runs with the modules loaded, check for permission problems or change the location used. shibd
creates its own separate logs at/var/log/shibboleth/shibd.log
and must have appropriate write permissions itself.
...