Getting list of all configured IDPs from Shibboleth SP
Tom Poage
tfpoage at ucdavis.edu
Sat Feb 4 00:33:45 GMT 2012
On 02/03/2012 03:10 PM, Tom Poage wrote:
> On 02/03/2012 02:46 PM, Cantor, Scott wrote:
>>> SELinux?
>>>
>>> The DS won't work when set to Enforcing (and I haven't worked out a
>>> policy for it).
>>
>> Makes sense, but I thought the whole SP failed at that unless you create at least some custom policy stuff.
>
> In my case, I had a policy installed for the shibd socket, but not the
> DiscoveryFeed.
One thing I recall now while trying to iron out SELinux with the
shibboleth-embedded-ds RPM package (RHEL 5) was:
chcon -R -t httpd_sys_content_t /etc/shibboleth-ds
i.e. the default install location. Otherwise, Apache httpd refused to
'see' the files cf.
> <IfModule mod_alias.c>
> <Location /shibboleth-ds>
> Allow from all
> </Location>
> Alias /shibboleth-ds/idpselect_config.js /etc/shibboleth-ds/idpselect_config.js
> Alias /shibboleth-ds/idpselect.js /etc/shibboleth-ds/idpselect.js
> Alias /shibboleth-ds/idpselect.css /etc/shibboleth-ds/idpselect.css
> Alias /shibboleth-ds/index.html /etc/shibboleth-ds/index.html
> </IfModule>
Tom.
More information about the users
mailing list