How do I change the certificate on an IDP web server?

Paul Hethmon paul.hethmon at clareitysecurity.com
Wed Jul 25 10:30:30 EDT 2012


Shib doesn't control what ports your web container listens on. Shib is
simply a web application that depends on the container to pass it requests
that it should handle.

8443 is typically set up for attribute request so that an SP can directly
request from the IdP attributes about a user. Most people set up to push
attributes with the SAML Response instead of attribute request.

So if you've configured your IdP to support attribute requests, then
you'll have to make sure what you publish in the IdP metadata as the URL
for those requests hits your web container and gets to Shib.

Paul

On 7/25/12 10:03 AM, "CHLOE SOWERS (BLOOMBERG/ 731 LEXIN)"
<csowers at bloomberg.net> wrote:

>Ok, I didn't realize there was another port 8443. However, I tried to
>telnet to that port on the IDP
>and it didn't connect. Where is the setting for that port? I tried to
>grep all of shib-idp/conf/*
>and could not find any files that reference 8443. I don't think that port
>(or any other) is
>protected by the web server, because Apache only listens to the SSL port
>443 (and 80).
>



More information about the users mailing list