Configuring login in IDP 3 alpha with Tomcat

[Edwards, Wendy A]

I¹ve been setting up Shib IDP v3 alpha with Tomcat, and was a little
unclear about how to set up the login.  For initial testing/debugging, I
was planning to use the test LDAP server
(ldaps://idp.training.incommon.org) used in the installfest class:

https://spaces.internet2.edu/display/ShibInstallFest/Shibboleth+Workshop+Se
ries+-+Linux+Identity+Provider+%28Centos+6.5%29

I assumed that I needed to modify the conf/authn/jaas.config file to look
like 

ShibUserPassAuth {
 
// Shibboleth Installfest LDAP Server
// See: 
https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass
 
   edu.vt.middleware.ldap.jaas.LdapLoginModule required
      ldapUrl="ldaps://idp.training.incommon.org:636/"
      baseDn="ou=people,dc=example,dc=org"
      bindDn="uid=IdPServiceAcct,ou=people,dc=example,dc=org"
      bindCredential="password"
      userFilter="uid={0}";
 
};

It¹s a little less clear how to translate the other instructions to Shib
3, e.g the modifications to handler.xml and relying party.xml. It does
look like conf/authn/ldap-authn-config.xml will probably need to be
edited.  The idp.properties file is already set to idp.authn.flows =
IPAddress|Password .

  In fact, I wondered if it might be useful to have a walkthrough document
about how to get Shib 3 up and running using the example LDAP server and
talking to sp.testshib.org, since those services are already in place and
working.  Not that people would want to use that for production, but it
might be a good starting point where people could see *something* working.
 I¹d be happy to document what I did if/when I get our local example
running.

Thanks,
Wendy