Shibboleth 2.4.3 SAML2 and WAYF

Law, Bob Robert.Law at
Fri Jan 13 20:10:38 GMT 2012

Will do.  I guess I will tell my coworkers that we need to do an
entirely fresh install of 2.4.3.  Does the embedded DS eliminate the
need for WAYF?

Robert Law
Software Engineer
Wolters Kluwer Health Medical Research
801.304.3012 tel
Robert.Law at

-----Original Message-----
From: users-bounces at [mailto:users-bounces at]
On Behalf Of Cantor, Scott
Sent: Friday, January 13, 2012 1:08 PM
To: users at
Subject: Re: Shibboleth 2.4.3 SAML2 and WAYF

On 1/13/12 3:00 PM, "Law, Bob" <Robert.Law at> wrote:

>That is probably due to me simply copying the daemon into
>shibboleth/shibd and not replacing all of the files in
>shibboleth/etc/shibboleth except for shibboleth2.xml.

Ok, well, no. Don't do that. You need to make install, nothing else is
going to work.

>So I have a half
>way working implementation.  I will copy all of the files over and see
>what works out.

Don't do that either. You will never get it correct doing anything but
make install (using gmake).

Your config in an old install tree will not be overwritten in any way by
doing that. But that assumes a full install tree from a previous make
install. Anything else is not something I can predict, but in general,
config install step is simply "if same file exists, don't overwrite".

>  I may decide to delete the old shibboleth entirely.  Am
>I correct in assuming that the embedded discovery service can replace
>WAYF and support both clients that are either SAML2 or SAML1?  I know
>that would make my life much simpler.


-- Scott

To unsubscribe from this list send an email to
users-unsubscribe at

More information about the users mailing list