idpv3 first look

Jim Fox fox at washington.edu
Wed Jul 2 14:02:21 EDT 2014


I switched back to jetty, without my extra jars.

Configured the username/password authn with a k5 connection.

Used my v2 attribute-resolver.xml with anything needing custom jars
removed.  That would be group memberships and eptid.

I put apache in front, with mod_proxy redirecting to jetty.

Configured an SP and it worked, end-to-end.

That's a good start.

One thing:

I'd like to use the http:8080 port for jetty, with my apache
redirecting https->http:8080.  I couldn't find a way for jetty
to listen on an http port.  Assigning http.port=8080 didn't work.

Jim


On Wed, 2 Jul 2014, Tom Zeller wrote:

> Date: Wed, 2 Jul 2014 10:23:24 -0700
> From: Tom Zeller <tzeller at dragonacea.biz>
> To: Shib Dev <dev at shibboleth.net>
> Reply-To: Shib Dev <dev at shibboleth.net>
> Subject: Re: idpv3 first look
> 
>> I don't think we've tried Tomcat at all to this point, so probably that's
>> a bug rather than misconfiguration.
>
> Anecdotally, I did run the IdP via Tomcat and it "worked", but that
> was a couple of weeks ago. My intention was to provide a Tomcat "base"
> directory like Jetty's, but I was not sure how far we wanted to go
> down that path to ease testing.
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net
>


More information about the dev mailing list