Basic question re configuration of Embedded Discovery Service

Tom Poage tfpoage at ucdavis.edu
Fri Aug 24 15:58:17 EDT 2012


This help?

idpselect_config.js:

this.dataSource = '/Shibboleth.sso/DiscoFeed';

shibboleth2.xml:

<SSO  discoveryProtocol="SAMLDS" 
discoveryURL="https://host.example.edu/shibboleth-ds/index.html">
     SAML2 SAML1
</SSO>

<Handler type="DiscoveryFeed" Location="/DiscoFeed"/>

shibboleth-ds.conf:

<IfModule mod_alias.c>
   <Location /shibboleth-ds>
     Allow from all
   </Location>
   Alias /shibboleth-ds/idpselect_config.js 
/etc/shibboleth-ds/idpselect_config.js
   Alias /shibboleth-ds/idpselect.js /etc/shibboleth-ds/idpselect.js
   Alias /shibboleth-ds/idpselect.css /etc/shibboleth-ds/idpselect.css
   Alias /shibboleth-ds/index.html /etc/shibboleth-ds/index.html
</IfModule>

Think I had to chcon -t httpd_sys_content_t on /etc/shibboleth-ds so 
SELinux would allow httpd access (but then I had an issue with the 
cached JSON, /var/cache/shibboleth/*.json, and gave up on SELinux--no 
time, no mandate).

Tom.


More information about the users mailing list