Getting list of all configured IDPs from Shibboleth SP

Tom Poage tfpoage at ucdavis.edu
Sat Feb 4 00:33:45 GMT 2012


On 02/03/2012 03:10 PM, Tom Poage wrote:
> On 02/03/2012 02:46 PM, Cantor, Scott wrote:
>>> SELinux?
>>>
>>> The DS won't work when set to Enforcing (and I haven't worked out a
>>> policy for it).
>>
>> Makes sense, but I thought the whole SP failed at that unless you create at least some custom policy stuff.
> 
> In my case, I had a policy installed for the shibd socket, but not the
> DiscoveryFeed.

One thing I recall now while trying to iron out SELinux with the
shibboleth-embedded-ds RPM package (RHEL 5) was:

  chcon -R -t httpd_sys_content_t /etc/shibboleth-ds

i.e. the default install location. Otherwise, Apache httpd refused to
'see' the files cf.

> <IfModule mod_alias.c>
>   <Location /shibboleth-ds>
>     Allow from all
>   </Location>
>   Alias /shibboleth-ds/idpselect_config.js /etc/shibboleth-ds/idpselect_config.js
>   Alias /shibboleth-ds/idpselect.js /etc/shibboleth-ds/idpselect.js
>   Alias /shibboleth-ds/idpselect.css /etc/shibboleth-ds/idpselect.css
>   Alias /shibboleth-ds/index.html /etc/shibboleth-ds/index.html
> </IfModule>

Tom.


More information about the users mailing list