<div dir="ltr">Hi,<div><br></div><div>This is "Amit Thukral" here. I have recently subscribed to this mailing list as I started working on implementing/integrating Shibboleth SP with our product.</div><div style>
Need your expert inputs to help me with my doubts explained in the end of this mail.</div><div>
<br></div><div style>Since, i am new to this domain, so, following is what I did to understand how Shibboleth SP works with apache and an Idp setup.</div><div>1) After downloading Shibboleth SP 2.5.1 code, I configured for apache, apr etc. and compiled it.<br>
</div><div>2) Did required configuration on Apache</div><div>3) configured shibboleth2.xml with IDP entityID (ADFS) and metadata url. </div><div>4) As I am using ADFS as an IDP, did required configuration for Shibboleth SP metadata etc. on ADFS setup also. created a user on ADFS setup.</div>
<div><br></div><div>Made it run and I could see challenge page coming from ADFS first time. provided username and passwd details and it authenticated successfully and showed the page (secured resource) i had kept on Apache under /secure.</div>
<div>SSO works after that.</div><div><br></div><div>Following is what I need to do now:</div><div>1) we can't use Apache and aprs. The product on which I am working is a firewall product and there is a module (stm) which works as a webserver. </div>
<div>I need to integrate Shibboleth SP to work with this module (stm). what should be my approach ?</div><blockquote style="margin:0px 0px 0px 40px;border:none;padding:0px"><div style>Following is the approach I followed it till now:</div>
<div style>I had put gdb in mod_shib to understand for reference that how is it working with Apache but couldnot understand much as I saw lot of things happening with Apr.</div><div style>I saw at apache startup, following mod_shib functions getting called. </div>
<div style> create_shib_dir_config, create_shib_server_config, shib_table_set(sets requiresession=1 ), shib_child_init</div><div style>They might be initializing startup configuration. </div></blockquote>
<div><br></div><div style>On sending request from browser to /secure resource:</div><div style>shib_post_read, shib_validuser_check_authz, shib_base_check_authz, shib_check_user, ApacheRequestMapper::getSettings, shib_fixups, shib_handler <br>
</div><div><br></div><div>2) I would like to understand how can i make the authentication and authorization work.<br></div><div style>I could see something like: </div><div style>pair<bool,long> res = psta->getServiceProvider().doAuthorization(*psta) in shib_auth_checker. </div>
<div style>Can i follow this approach ? </div><div style>Will authentication and authorization work in this way with my stm module or is there anything else also, i would need to do ?<br></div><div style><br></div><div style>
Please provide your expert suggestions and inputs to help me proceed with this implementation.</div><div style><br></div><div style>Thanks and Regards,<br></div><div style>Amit Thukral</div><div><br></div><div><br></div><div>
<br></div></div>