documentation regarding ApplicationOverrides and metadata generator
csross
cross at hccs.com
Mon Aug 20 18:49:28 EDT 2012
I have multiple v2.4.3 SPs and each defined in an ApplicationOverride and
vhost and I am able to bring up metadata for each SP. The documentation
indicates this below but it doesn't say what will be wrong or missing.
"The built-in Metadata generator, located by default at
/Shibboleth.sso/Metadata, is unable to automatically generate metadata for
application overrides. You'll need to create the metadata by hand. See
MetadataForSP for more information about writing your own SP metadata file"
One of the SPs was originally the only one (v2.2) so it was defined as the
ApplicationDefault and the metadata looks very similar. After upgrading
and switching to ApplicationOverrides, I generated the metadata in the same
way (https://site.site.com/Shibboleth.sso/Metadata) and sent it to the IDP
admin. The IDP is shibboleth and the admin said it looked fine. The site
is working too.
I am setting up another site and am able to bring up the Metadata. Is the
documentation referring to something else?
NOTE: In the metadata when 1 SP as ApplicationDefault was used, the X509
certificate is different, there is an extra certificate md:KeyDescriptor
use="signing" and there are these lines
<md:ManageNameIDService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
Location="https://site.com/Shibboleth.sso/NIM/Redirect"/>
<md:ManageNameIDService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
Location="https://site.com/Shibboleth.sso/NIM/POST"/>
<md:ManageNameIDService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact"
Location="https://site.com/Shibboleth.sso/NIM/Artifact"/>
--
View this message in context: http://shibboleth.1660669.n2.nabble.com/documentation-regarding-ApplicationOverrides-and-metadata-generator-tp7581403.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
More information about the users
mailing list