<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0">
<base href="https://issues.shibboleth.net/jira">
<title>Message Title</title>
</head>
<body class="jira" style="color: #333333; font-family: Arial, sans-serif; font-size: 14px; line-height: 1.429">
<table id="background-table" cellpadding="0" cellspacing="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; background-color: #f5f5f5; border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt" bgcolor="#f5f5f5">
<!-- header here -->
<tbody>
<tr>
<td id="header-pattern-container" style="padding: 0px; border-collapse: collapse; padding: 10px 20px">
<table id="header-pattern" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="header-avatar-image-container" valign="top" style="padding: 0px; border-collapse: collapse; vertical-align: top; width: 32px; padding-right: 8px" width="32"> <img id="header-avatar-image" class="image_fix" src="cid:jira-generated-image-avatar-25e520ce-95d3-41c8-a750-cc93415cd4fc" height="32" width="32" border="0" style="border-radius: 3px; vertical-align: top"> </td>
<td id="header-text-container" valign="middle" style="padding: 0px; border-collapse: collapse; vertical-align: middle; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px"> <a class="user-hover" rel="wkiyxkscr4bax/2pq5dvxwse0ei=@https://aai-logon.switch.ch/idp/shibboleth" id="email_wkiyxkscr4bax/2pq5dvxwse0ei=@https://aai-logon.switch.ch/idp/shibboleth" href="https://issues.shibboleth.net/jira/secure/ViewProfile.jspa?name=wkiyxkscr4bax%2F2pq5dvxwse0ei%3D%40https%3A%2F%2Faai-logon.switch.ch%2Fidp%2Fshibboleth" style="color:#3b73af;; color: #3b73af; text-decoration: none">Lukas Haemmerle</a> <strong>commented</strong> on <a href="https://issues.shibboleth.net/jira/browse/SSPCPP-350" style="color: #3b73af; text-decoration: none"><img src="cid:jira-generated-image-avatar-50a29db5-2a56-4ecb-b728-8542986778aa" height="16" width="16" border="0" align="absmiddle" alt="New Feature"> SSPCPP-350</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="email-content-container" style="padding: 0px; border-collapse: collapse; padding: 0 20px">
<table id="email-content-table" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; border-spacing: 0; border-collapse: separate">
<tbody>
<tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<td class="email-content-rounded-top mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 15px; background-color: #ffffff; border-left: 1px solid #cccccc; border-top: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom: 0; border-top-right-radius: 5px; border-top-left-radius: 5px; height: 10px; line-height: 10px; padding: 0 15px 0 16px; mso-line-height-rule: exactly" height="10" bgcolor="#ffffff"> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table class="page-title-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td style="vertical-align: top;; padding: 0px; border-collapse: collapse; padding-right: 5px; font-size: 20px; line-height: 30px; mso-line-height-rule: exactly" class="page-title-pattern-header-container"> <span class="page-title-pattern-header" style="font-family: Arial, sans-serif; padding: 0; font-size: 20px; line-height: 30px; mso-text-raise: 2px; mso-line-height-rule: exactly; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/SSPCPP-350" style="color: #3b73af; text-decoration: none">Re: Better modulariziation in vhosted environments</a> </span> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="text-paragraph-pattern-top" class="email-content-main mobile-expand comment-top-pattern" style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff; border-bottom: none; padding-bottom: 0" bgcolor="#ffffff">
<table class="text-paragraph-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 2px">
<tbody>
<tr>
<td class="text-paragraph-pattern-container mobile-resize-text " style="padding: 0px; border-collapse: collapse; padding: 0 0 10px 0"> <p style="margin: 10px 0 0 0; margin-top: 0">They have currently about 100 SPs (about 20-50 per server) and 150-300 will follow in the coming years. The process to create new SPs/web servers is automated. Currently the use a config like the following one where for each virtual SP everything is typicallz the same except hostname, entityID and certificate:</p> <p style="margin: 10px 0 0 0"><code><br> <SPConfig><br> <RequestMapper type="Native"><br> <RequestMap applicationId="default"><br> <Host name="ew-stage.geo.example-org.ch"<br> applicationId="ew-stage.geo.example-org.ch" /><br> <Host name="ew-stage.aegyptologie.philhist.example-org.ch"<br> applicationId="ew-stage.aegyptologie.philhist.example-org.ch" /><br> <Host name="ew-stage.philnat.example-org.ch"<br> applicationId="ew-stage.philnat.example-org.ch" /><br> <Host name="ew-stage.nursing.example-org.ch"<br> applicationId="ew-stage.nursing.example-org.ch" /><br> </RequestMap><br> </RequestMapper><br> <ApplicationDefaults id="default"<br> metadataAttributePrefix="Meta-"<br> REMOTE_USER="persistent-id targeted-id uniqueID"<br> signing="back"<br> requireTransportAuth="false"<br> entityID="https://its-web-012.its.example-org.ch/shibboleth"<br> homeURL="https://its-web-012.its.example-org.ch/Shibboleth.sso/Session"><br> <Sessions lifetime="28800"<br> timeout="3600"<br> relayState="ss:mem"<br> checkAddress="false"<br> consistentAddress="true"<br> handlerSSL="false"<br> cookieProps="http"><br> <SSO discoveryProtocol="SAMLDS"<br> discoveryURL="https://wayf.switch.ch/SWITCHaai/WAYF">SAML2</SSO><br> <Logout>Local</Logout><br> <span class="error">[...]</span><br> </Sessions><br> <Errors access="accessError.html"<br> helpLocation="https://www.switch.ch/aai/help"<br> logoLocation="https://www.switch.ch/aai/design/images/SWITCHaai.gif"<br> styleSheet="https://www.switch.ch/aai/design/shib-error.css"<br> supportContact="wsym-its@example-org.ch" /><br> <MetadataProvider type="XML"<br> validate="true"<br> uri="http://metadata.aai.switch.ch/metadata.switchaai.xml"<br> backingFilePath="metadata.switchaai.xml"<br> reloadInterval="3600"><br> <MetadataFilter type="RequireValidUntil"<br> maxValidityInterval="604800" /><br> <MetadataFilter type="Signature"><br> <TrustEngine type="StaticPKIX"<br> certificate="SWITCHaaiRootCA.crt.pem"<br> verifyDepth="2"<br> checkRevocation="fullChain"<br> policyMappingInhibit="true"<br> anyPolicyInhibit="true"><br> <TrustedName>SWITCHaai Metadata Signer</TrustedName><br> <PolicyOID>2.16.756.1.2.6.7</PolicyOID><br> </TrustEngine><br> </MetadataFilter><br> </MetadataProvider><br> <span class="error">[...]</span><br> <ApplicationOverride id="ew-stage.geo.example-org.ch"<br> entityID="https://ew-stage.geo.example-org.ch/shibboleth"><br> <Sessions lifetime="28800"<br> timeout="3600"<br> relayState="ss:mem"<br> checkAddress="false"<br> consistentAddress="true"<br> handlerSSL="false"<br> cookieProps="http"><br> </Sessions><br> <CredentialResolver type="File"<br> keyName="Active"<br> key="/etc/shibboleth/ew-stage.geo.example-org.ch.sp-key.pem"<br> certificate="/etc/shibboleth/ew-stage.geo.example-org.ch.sp-cert.pem" /><br> </ApplicationOverride><br> <ApplicationOverride id="ew-stage.aegyptologie.philhist.example-org.ch"<br> entityID="https://ew-stage.aegyptologie.philhist.example-org.ch/shibboleth"><br> <Sessions lifetime="28800"<br> timeout="3600"<br> relayState="ss:mem"<br> checkAddress="false"<br> consistentAddress="true"<br> handlerSSL="false"<br> cookieProps="http"><br> </Sessions><br> <CredentialResolver type="File"<br> keyName="Active"<br> key="/etc/shibboleth/ew-stage.aegyptologie.philhist.example-org.ch.sp-key.pem"<br> certificate="/etc/shibboleth/ew-stage.aegyptologie.philhist.example-org.ch.sp-cert.pem" /><br> </ApplicationOverride><br> <ApplicationOverride id="ew-stage.philnat.example-org.ch"<br> entityID="https://ew-stage.philnat.example-org.ch/shibboleth"><br> <Sessions lifetime="28800"<br> timeout="3600"<br> relayState="ss:mem"<br> checkAddress="false"<br> consistentAddress="true"<br> handlerSSL="false"<br> cookieProps="http"><br> </Sessions><br> <CredentialResolver type="File"<br> keyName="Active"<br> key="/etc/shibboleth/ew-stage.philnat.example-org.ch.sp-key.pem"<br> certificate="/etc/shibboleth/ew-stage.philnat.example-org.ch.sp-cert.pem" /><br> </ApplicationOverride><br> <ApplicationOverride id="ew-stage.nursing.example-org.ch"<br> entityID="https://ew-stage.nursing.example-org.ch/shibboleth"><br> <Sessions lifetime="28800"<br> timeout="3600"<br> relayState="ss:mem"<br> checkAddress="false"<br> consistentAddress="true"<br> handlerSSL="false"<br> cookieProps="http"><br> </Sessions><br> <CredentialResolver type="File"<br> keyName="Active"<br> key="/etc/shibboleth/ew-stage.nursing.example-org.ch.sp-key.pem"<br> certificate="/etc/shibboleth/ew-stage.nursing.example-org.ch.sp-cert.pem" /><br> </ApplicationOverride><br> </ApplicationDefaults><br> <span class="error">[...]</span><br> </SPConfig><br> </code></p> <p style="margin: 10px 0 0 0">For them it would be great if there was a basic configuration in shibboleth2.xml and external files for each virtual SP (containing the "diff" compared ot the basic config in form of an ApplicationOverride element). But maybe there is also a more elegant solution foreseen in SPv3 .</p> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td class="email-content-main mobile-expand " style="padding: 0px; border-collapse: collapse; border-left: 1px solid #cccccc; border-right: 1px solid #cccccc; border-top: 0; border-bottom: 0; padding: 0 15px 0 16px; background-color: #ffffff" bgcolor="#ffffff">
<table id="actions-pattern" cellspacing="0" cellpadding="0" border="0" width="100%" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 1px">
<tbody>
<tr>
<td id="actions-pattern-container" valign="middle" style="padding: 0px; border-collapse: collapse; padding: 10px 0 10px 24px; vertical-align: middle; padding-left: 0">
<table align="left" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td class="actions-pattern-action-icon-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 0; vertical-align: middle"> <a href="https://issues.shibboleth.net/jira/browse/SSPCPP-350#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none"> <img class="actions-pattern-action-icon-image" src="cid:jira-generated-image-static-comment-icon-68f7b344-6652-466a-9065-af6c0e696069" alt="Add Comment" title="Add Comment" height="16" width="16" border="0" style="vertical-align: middle"> </a> </td>
<td class="actions-pattern-action-text-container" style="padding: 0px; border-collapse: collapse; font-family: Arial, sans-serif; font-size: 14px; line-height: 20px; mso-line-height-rule: exactly; mso-text-raise: 4px; padding-left: 5px"> <a href="https://issues.shibboleth.net/jira/browse/SSPCPP-350#add-comment" target="_blank" title="Add Comment" style="color: #3b73af; text-decoration: none">Add Comment</a> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
<!-- there needs to be content in the cell for it to render in some clients -->
<tr>
<td class="email-content-rounded-bottom mobile-expand" style="padding: 0px; border-collapse: collapse; color: #ffffff; padding: 0 15px 0 16px; height: 5px; line-height: 5px; background-color: #ffffff; border-top: 0; border-left: 1px solid #cccccc; border-bottom: 1px solid #cccccc; border-right: 1px solid #cccccc; border-bottom-right-radius: 5px; border-bottom-left-radius: 5px; mso-line-height-rule: exactly" height="5" bgcolor="#ffffff"> </td>
</tr>
</tbody>
</table> </td>
</tr>
<tr>
<td id="footer-pattern" style="padding: 0px; border-collapse: collapse; padding: 12px 20px">
<table id="footer-pattern-container" cellspacing="0" cellpadding="0" border="0" style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-text" class="mobile-resize-text" width="100%" style="padding: 0px; border-collapse: collapse; color: #999999; font-size: 12px; line-height: 18px; font-family: Arial, sans-serif; mso-line-height-rule: exactly; mso-text-raise: 2px"> This message was sent by Atlassian JIRA <span id="footer-build-information">(v7.4.2#74004-<span title="586975da6d5c632f4f0de24a42c40182e6b9ead0" data-commit-id="586975da6d5c632f4f0de24a42c40182e6b9ead0}">sha1:586975d</span>)</span> </td>
<td id="footer-pattern-logo-desktop-container" valign="top" style="padding: 0px; border-collapse: collapse; padding-left: 20px; vertical-align: top">
<table style="border-collapse: collapse; mso-table-lspace: 0pt; mso-table-rspace: 0pt">
<tbody>
<tr>
<td id="footer-pattern-logo-desktop-padding" style="padding: 0px; border-collapse: collapse; padding-top: 3px"> <img id="footer-pattern-logo-desktop" src="cid:jira-generated-image-static-footer-desktop-logo-0332129c-e771-4e42-8344-26faae9ce97f" alt="Atlassian logo" title="Atlassian logo" width="169" height="36" class="image_fix"> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table> </td>
</tr>
</tbody>
</table>
</body>
</html>