Beginners guide.

[Christopher Bongaarts]

On 2/3/2012 11:00 AM, David Gersic wrote:
> 2. Get to know your iptables commands. Tomcat runs as a non-root
> user,  and the IdP must respond on ports 80 and 443 which are not
 > available to non-root user processes.

Another technique is to have tomcat listen on high ports, and use a load 
balancer to provide the port mapping.

For testing, you can run the IdP on high ports as well.  In theory you 
could also do so for production, as the metadata you publish to the SPs 
you plan to use would contain the proper URLs with the right ports; 
however, if you have users that might be connecting from behind 
restrictive firewalls, 443 is your best bet for letting them connect.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%