[cpp-sp] 35/37: Update TestShib instructions

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to annotated tag debian/2.5.5+dfsg1-1
in repository cpp-sp.

View the commit online:
http://git.shibboleth.net/view/?p=cpp-sp.git;a=commit;h=1cb6750a1787f845433c04e70b9100148c475e2d

commit 1cb6750a1787f845433c04e70b9100148c475e2d
Author: Ferenc Wágner <wferi at niif.hu>
AuthorDate: Tue Jan 26 20:36:53 2016 +0100

    Update TestShib instructions
---
 debian/libapache2-mod-shib2.README.Debian | 39 +++++++++++++++++--------------
 1 file changed, 21 insertions(+), 18 deletions(-)

diff --git a/debian/libapache2-mod-shib2.README.Debian b/debian/libapache2-mod-shib2.README.Debian
index 9cc2fcb..b5c7972 100644
--- a/debian/libapache2-mod-shib2.README.Debian
+++ b/debian/libapache2-mod-shib2.README.Debian
@@ -94,7 +94,7 @@ Changes in Debian Package
     5. Edit /etc/default/shibd to contain
        DAEMON_OPTS="$DAEMON_OPTS -x /etc/shibboleth/catalog.xml:/usr/share/xml/opensaml/saml20-catalog.xml:/usr/share/xml/xmltooling/catalog.xml"
 
-    6. Restart the Shibboleth daemon: /etc/init.d/shibd restart.
+    6. Restart the Shibboleth daemon: service shibd restart.
 
 Testing with TestShib
 
@@ -104,33 +104,36 @@ Testing with TestShib
   the following instructions (but test them against the details on the
   testshib.org web pages in case anything has changed):
 
-  1. Go to <http://testshib.org/>, click on Register, and log in with
-     either OpenIDP or ProtectNetwork.  If you do not have an identity
-     with either, create one following the links on that page.
+  1. Run shib-keygen to generate a certificate for your new SAML entity.
 
-  2. Click on New Service Provider (unless you've already created an entry
-     for this host, in which case select Edit and reuse it).  Enter your
-     hostname, your public certificate, and your first and last name, and
-     then click on Continue.  Verify the information and click on Submit.
+  2. Set the entityID attribute in the ApplicationDefaults element of
+     shibboleth2.xml to a value like https://your.service.tld/shibboleth;
+     it needn't be resolvable, though that might come handy later, see
+     https://wiki.shibboleth.net/confluence/display/CONCEPT/EntityNaming.
 
-  3. Now select Configure, scroll down to Service Provider Configuration,
-     choose Other for the platform, enter your hostname, and click on
-     Create Me.  Save the resulting configuration file as
+  3. Run a2enmod shib2 && apache2ctl restart && service shibd restart.
+
+  4. Go to <http://testshib.org/>, click on Register, and follow the the
+     instructions to obtain your SP metadata and upload it under a unique
+     name.
+
+  5. Now select Configure, scroll down to Service Provider Configuration,
+     choose Other for the platform, enter the hostname of your web server,
+     and click on Create Me.  Save the resulting configuration file as
      /etc/shibboleth/shibboleth2.xml.
 
-  4. Create some part of your web site that's protected with Shibboleth as
+  6. Create some part of your web site that's protected with Shibboleth as
      described above, restart Apache with apache2ctl restart, restart
-     shibd with /etc/init.d/shibd restart, and then go to that URL.  You
-     should be redirected to the testshib.org IdP, and then get a basic
-     auth dialog box prompting for a username and password.  Enter
-     "myself" and "myself".  You should now be redirected back to your
+     shibd with service shibd restart, and then go to that URL.  You
+     should be redirected to idp.testshib.org, and after logging in with
+     one of the offered identities, redirected back to your
      protected page.  The best test page to use is a CGI script that
      prints out the environment; you can then confirm that you see the
      Shibboleth attributes as environment variables.  If this doesn't work
      immediately, wait a few minutes and try again; sometimes the
      testshib.org metadata takes a little bit to update.
 
-  These directions should work as of June 2008, but note that the
+  These directions should work as of Jan 2016, but note that the
   testshib.org service may have changed since then.  TestShib is useful
   *only* for testing, not for any production use.  Those of us who have
   worked on the Debian package are not affiliated with testshib.org, just
@@ -149,4 +152,4 @@ Further Information
 
     https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPConfiguration
 
- -- Russ Allbery <rra at debian.org>, Tue, 18 Jun 2013 14:50:43 -0700
+ -- Ferenc Wágner <wferi at niif.hu>, Tue, 26 Jan 2016 21:08:43 +0100

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.