Cherokee Webserver and Protocol between mod_shib and shibd

Cantor, Scott cantor.2 at
Tue Sep 13 18:36:54 BST 2011

On 9/13/11 1:25 PM, "Lukas Haemmerle" <lukas.haemmerle at> wrote:
>Other question: Assuming a developer would want to directly communicate
>with the daemon shibd, would he find information on the protocol used
>(other than in the source code)? Am I right to assume that this the
>Shibboleth team does not recommend at all to use this protocol and
>communicate directly with shibd?

The protocol is undocumented because the actual messages exchanged are not
public and aren't versioned or managed in a way that would act as an API.
Both halves of the communication are written as a single piece of code
that is communicating with itself, so when it changes, it's changing in

That's also why both halves have to be restarted after an upgrade.

Actually implementing an alternative module in a different web server is
either quite simple if the server API is adequate or impossible if it's
not. It doesn't involve any communication with shibd, that's handled by
the library.

-- Scott

More information about the users mailing list