Communication Protocol used by SP with TCPListener-enabled

[César Bernardini]

Ok, thanks

So, it means that shibd is managing all the functionality of shibboleth service provider. mod_shib is only interacting with HTTP/S requests and whenever mod_shib needs to set RelayState, check signatures, decrypt information, it will call shibd for the functionality.

To make this system calls, there seems to be three posibilities:
* TCP socker Listener [not recommended to be used]
* Unix socket listener [recommended? i assume not]
* Some Apache inter process communication

For example, if I am unidentified and I access to the SP. The SP will request via mod_shib who I am and shibd will create an id, request the identity provider name configured in the metadata and eventually creating the relay token.

I insist with one of the previous questions: is there any example that uses the TCP Socket Listener? Unix Socket Listener?

Thanks a lot!

________________________________________
From: dev <dev-bounces at shibboleth.net> on behalf of Cantor, Scott <cantor.2 at osu.edu>
Sent: Wednesday, January 10, 2018 4:42 PM
To: Shib Dev
Subject: Re: Communication Protocol used by SP with TCPListener-enabled

On 1/10/18, 10:38 AM, "dev on behalf of César Bernardini" <dev-bounces at shibboleth.net on behalf of cbernardini at barracuda.com> wrote:

> Could you please tell me what is the point of these listeners? What are they used for in? Are they for debugging?

The entire implementation is in shibd. mod_shib is just a layer in Apache that calls into shibd to do all the real work. All of the session layer is managed in a separate process because Apache is multi-process and storing sessions on the filesystem is not, in my experience, robust or reliable.

-- Scott


--
To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net
________________________________
Barracuda Networks AG
Vorsitzender des Aufsichtsrates/ Chairman of the supervisory board: Dr. Klaus Perktold
Vorstand/ Executive Board: Dr. Wieland Alge, Mag. Guenter Klausner
Sitz der Gesellschaft/ Registered office: 6020 Innsbruck, Austria
Handelsgericht Innsbruck Firmenbuch/ Registration Number: 184392s
UID-Nr/ VAT Number: ATU47509003

Zweigniederlassung Deutschland/ Office Germany: Radlkoferstr. 2, 81373 München
Handelsregister München / Registration Number: HRB 171749
UID-Nr/ VAT Number: DE237607533

===========================================================
Learn how to protect users, data, and applications with security engineered for the public cloud by Barracuda. http://barracuda.com

DISCLAIMER:
This e-mail and any attachments to it contain confidential and proprietary material of Barracuda, its affiliates or agents, and is solely for the use of the intended recipient. Any review, use, disclosure, distribution or copying of this transmittal is prohibited except by or on behalf of the intended recipient. If you have received this transmittal in error, please notify the sender and destroy this e-mail and any attachments and all copies, whether electronic or printed.
===========================================================