[cpp-sp] 29/47: Document how to reenable WS-Trust.xsd

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to annotated tag debian/2.1.dfsg1-1
in repository cpp-sp.

View the commit online:
http://git.shibboleth.net/view/?p=cpp-sp.git;a=commit;h=43c6606f63b0986c1102d7018d3594a11f3f8236

commit 43c6606f63b0986c1102d7018d3594a11f3f8236
Author: Ferenc Wagner <wferi at niif.hu>
AuthorDate: Thu Sep 25 15:22:45 2008 +0200

    Document how to reenable WS-Trust.xsd
---
 debian/changelog                          |  4 ++--
 debian/libapache2-mod-shib2.README.Debian | 21 +++++++++++++++++++++
 2 files changed, 23 insertions(+), 2 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index e79ea50..3044320 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -17,9 +17,9 @@ shibboleth-sp2 (2.1.dfsg1-1) UNRELEASED; urgency=low
   * Add directory /var/log/shibboleth to libapache2-mod-shib2 (thanks to Peter
     Schober for noticing)
   * Comment out the reference to WS-Trust.xsd from the catalog.xml file in
-    shibboleth-sp2-schemas.
+    shibboleth-sp2-schemas and document how to enable it again.
 
- -- Ferenc Wagner <wferi at niif.hu>  Thu, 25 Sep 2008 14:42:04 +0200
+ -- Ferenc Wagner <wferi at niif.hu>  Thu, 25 Sep 2008 15:20:24 +0200
 
 shibboleth-sp2 (2.0.dfsg1-3) unstable; urgency=low
 
diff --git a/debian/libapache2-mod-shib2.README.Debian b/debian/libapache2-mod-shib2.README.Debian
index f745e49..7ee8a73 100644
--- a/debian/libapache2-mod-shib2.README.Debian
+++ b/debian/libapache2-mod-shib2.README.Debian
@@ -70,6 +70,27 @@ Changes in Debian Package
   for more details.  If you want the other parts of Shibboleth to also log
   to syslog, change the other /etc/shibboleth/*.logger files similarly.
 
+  The WS-Trust.xsd schema, which is needed if you use the ADFS support
+  and turn on schema validation, was removed from the Debian package for
+  license reasons.  To enable it again, do the following:
+
+    1. Download the original source from
+       http://shibboleth.internet2.edu/downloads/shibboleth/cppsp/latest/
+
+    2. Extract schemas/WS-Trust.xsd to some convenient location, for
+       example to /etc/shibboleth/WS-Trust.xsd.
+
+    3. Copy /usr/share/xml/shibboleth/catalog.xml into /etc/shibboleth.
+
+    4. Uncomment the WS-Trust line and set its uri attribute:
+       <system systemId="http://schemas.xmlsoap.org/ws/2005/02/trust"
+               uri="/etc/shibboleth/WS-Trust.xsd"/>
+
+    5. Edit /etc/default/shibd to contain
+       DAEMON_OPTS="-x /etc/shibboleth/catalog.xml:/usr/share/xml/opensaml/saml20-catalog.xml:/usr/share/xml/xmltooling/catalog.xml"
+
+    6. Restart the Shibboleth daemon: /etc/init.d/shibd restart.
+
 Testing with TestShib
 
   If you don't have a local Shibboleth Federation you can easily join but

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.