MDQ server on shibboleth.net (Was: Re: Build failed in Jenkins: java-identity-provider-nightly #634)

Brent Putman putmanb at georgetown.edu
Fri Mar 20 18:17:02 EDT 2015



On 3/3/15 10:56 AM, Brent Putman wrote:
>
> On 3/3/15 10:43 AM, Tom Zeller wrote:
>> On Tue, Mar 3, 2015 at 9:37 AM, Ian Young <ian at iay.org.uk> wrote:
>>> If you're interested enough in fixing this, I could point you at the things you'd need to put a static deployment on shibboleth.net. It's a Spring Boot application, so pretty simple to set up.
>> Sure, I'll take the pointers. It's low priority, though.
> It's been on my TODO list also.  Just other things more important. 
> With the 2.x release out and code freeze for 3.1.0, this seems like the
> time to look into this.  I'll look at it tomorrow, unless Tom or
> someone else beats me to it.


FYI, I finally have a functioning and "productionalized" test instance
of mdq-server running up on shibboleth.net, port 9000 (port chosen
arbitrarily). I have switched the opensaml and IdP unit tests over to
use it rather than Ian's server.  We'll see how it goes.
There's just 1 entity in there right now, but more could easily be
added.  It's just pulling those from an externalized EntitiesDescriptor
file.

If you want to see it in action:

http://shibboleth.net:9000/entities

http://shibboleth.net:9000/entities/https%3A%2F%2Ffoo1.example.org%2Fidp%2Fshibboleth

Depending on your email client, you'll probably need to actually
copy/paste that second encoded URL into your browser to preserve the
URL-encoding of the entityID.  For me in Thunderbird, if I just click
on it, it doesn't work, b/c it gets URL-decoded first, and then goes
out over the wire un-encoded, which violates the MDQ spec.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20150320/802b17c9/attachment.html 


More information about the dev mailing list