Getting list of all configured IDPs from Shibboleth SP

Jason Axelson jaxelson at referentia.com
Sat Feb 4 00:44:15 GMT 2012


On Fri, Feb 3, 2012 at 2:33 PM, Tom Poage <tfpoage at ucdavis.edu> wrote:
> One thing I recall now while trying to iron out SELinux with the
> shibboleth-embedded-ds RPM package (RHEL 5) was:
>
>  chcon -R -t httpd_sys_content_t /etc/shibboleth-ds
>
> i.e. the default install location. Otherwise, Apache httpd refused to
> 'see' the files cf.

A more elegant way to solve this is to add a line like the following
to your domain.fc file:

/etc/shibboleth-ds(/.*)?    system_u:object_r:httpd_sys_content_t:s0

That way when you do something like restorecon -R / it won't change
those files back to whatever the default label is.

Jason


More information about the users mailing list