Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Shibboleth configuration files will be placed at /etc/shibboleth/ and the necessary Apache configuration in /etc/httpd/conf.d/shib.conf
  • shibd will be installed to /usr/sbin and may be managed using service and chkconfig (on System V platforms) or with systemctl (on systemd platforms, some additional information available)
  • An appropriate version of mod_shib and other pluggable modules will be installed to /usr/lib/shibboleth/ on a 32-bit OS and /usr/lib64/shibboleth on a 64-bit OS

  • Logs will be located in /var/log/httpd/native.log and /var/log/shibboleth

Basic Configuration

  1. In httpd.conf:
    • Use of the <RequestMap> feature is not recommended for use with Apache, but its use requires that the UseCanonicalName directive be set.
    • Ensure that the ServerName directive is properly set, and that Apache is being started with SSL enabled.
  2. Restart Apache.
  3. /usr/sbin/shibd must be independently started and run in order to handle requests. The daemon should be loaded and monitored along with all other major services.

    Code Block
    none
    none
    /sbin/service shibd start
    
  4. By default, the Shibboleth module is configured to log information on behalf of Apache to /var/log/shibboleth-www/native.log
  5. shibd creates its own separate logs at /var/log/shibboleth