Report of success with SP and IdP test servers, apache 1.3, nginx and SSL off-loading

[Cantor, Scott]

On 4/24/12 3:50 AM, "Gernot Hassenpflug" <ha4h-grnt at asahi-net.or.jp> wrote:
>
>I don't think this works, since libsaml-devel wants to pull in
>libsaml7 which I had to remove initially anyway.

I don't know what you're seeing, but you shouldn't have to remove anything
old to do builds, the old libs coexist with the new ones.

> I started out with
>the shibboleth repo packages installed and had to remove everything in
>order to either rebuild and/or install the rebuilt RPMs of the 2.4.3
>SP and associated programs.

The SP would have to be uninstalled, but nothing else should.

> Besides, as I note below, libsaml-devel
>actually gets built during the SRPM rebuild.

You shouldn't have to build opensaml, so those RPMs should already be
installed and used.

>If there is a chance for me to check this again---certainly with the
>next release, but also before that, as I am setting up automated
>shibboleth-enabled server setup scripts---I will post more information
>if it turns out I can do things differently.


Bigger problem: 2.5 will NOT support RH4. I have been totally clear on
that. Not only is it not supported, it won't build. The boost version on
RH4 is too old. If you want to use it, you'll have to build it yourself,
and you'd have to install a custom version of boost.

> 
>I had trouble figuring out where the Errors section
>/shibboleth-sp/{logo.jpg,main.css} files were on the SP
>server. Located them in /usr/share/doc/shibboleth-2.4.3/ which
>surprised me somewhat,

That's getting improved in 2.5, but those aren't really the files that
need changing, it's the error templates. You aren't meant to modify files
in /usr/share

-- Scott