users Digest, Vol 12, Issue 66
Prasanna
PVBalachandar at imperosoftware.com
Tue Jun 26 09:37:24 BST 2012
I think I have got a reply for my post. Can anyone say me where to view the
reply.
Thanks
Prasanna
-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On
Behalf Of users-request at shibboleth.net
Sent: 26 June 2012 04:42
To: users at shibboleth.net
Subject: users Digest, Vol 12, Issue 66
Send users mailing list submissions to
users at shibboleth.net
To subscribe or unsubscribe via the World Wide Web, visit
http://shibboleth.net/mailman/listinfo/users
or, via email, send a message with subject or body 'help' to
users-request at shibboleth.net
You can reach the person managing the list at
users-owner at shibboleth.net
When replying, please edit your Subject line so it is more specific than
"Re: Contents of users digest..."
Today's Topics:
1. Multiple Entity example for SP (Dex)
2. Re: How to get my SP to send a specific name ID format ?
(Pete Newing)
3. Re: Multiple Entity example for SP (Kevin P. Foote)
4. Re: Reg: Shibboleth implementation in my office premises
(Peter Schober)
5. Re: Reg: Shibboleth implementation in my office premises
(Chad La Joie)
6. Re: Multiple Entity example for SP (Dex)
7. Re: Multiple Entity example for SP (Kevin P. Foote)
8. Re: Multiple Entity example for SP (Peter Schober)
9. URL contains invalid scheme (ss). (qle)
----------------------------------------------------------------------
Message: 1
Date: Mon, 25 Jun 2012 09:08:37 -0700
From: Dex <dexwest at gmail.com>
Subject: Multiple Entity example for SP
To: Shib Users <users at shibboleth.net>
Message-ID: <4FE88D05.2070509 at gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Anyone have an example of how to generate multiple Entity ID's in one
Service Provider? I need to support a test and prod site on same box.
My SP is connected to a ADFS box that requires unique Entity ID's.
------------------------------
Message: 2
Date: Mon, 25 Jun 2012 17:34:02 +0100
From: Pete Newing <pn at flexeyetech.com>
Subject: Re: How to get my SP to send a specific name ID format ?
To: Shib Users <users at shibboleth.net>
Message-ID:
<CABdr6XAf3Qzmv81fyHkaBQoKmpm-nr1uWWKgrTBQqiRF9azt6g at mail.gmail.com>
Content-Type: text/plain; charset="iso-8859-1"
Hi Scott,
Thanks for the information - it was a great help and I managed to get it
sorted quite quickly.
For completeness I also:
- added an entry into 'attribute-map.xml' for the new attribute and...
- amended 'REMOTE_USER' for the new attribute in 'shibboleth2.xml'
regards, Pete
On 22 June 2012 21:22, Cantor, Scott <cantor.2 at osu.edu> wrote:
> On 6/22/12 9:03 AM, "Pete Newing" <pn at flexeyetech.com> wrote:
> >
> >Thanks for the info Chad.
> >I saw in an earlier post that Scott was going to post an example... do
> >you know if this ever happened as it would be very useful right about
now!
>
> It did, it's in the wiki in the SAML2 SessionInitiator reference (but you
> don't need it for this).
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
--
*Peter L.K. Newing, CISSP, CISA, ITIL V3 Foundation, ISO 27001 Lead Auditor*
*Director of **Product Management*
* *
UK Mobile: +44 7545 073 406
US Mobile: +1 424 789 0265
Flexeye Technology Ltd
This email and any attachments are confidential and may be privileged. If
you have received it in error, do not read it, copy it, forward it,
disclose its contents or use it for any purpose. Please notify us
immediately and then delete it. Any views or opinions expressed are solely
those of the author and not necessarily those of Flexeye Technology Ltd.
This email was sent from Flexeye Technology Limited, Hays House, Millmead,
Guildford GU2 4HJ. Registered Office: Wey Court West, Union Road, Farnham,
Surrey GU9 7PT United Kingdom. Registered in England No 4852559. VAT no GB
821 3432 66A
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://shibboleth.net/pipermail/users/attachments/20120625/ec036822/attachme
nt-0001.html
------------------------------
Message: 3
Date: Mon, 25 Jun 2012 13:17:08 -0400 (EDT)
From: "Kevin P. Foote" <kpfoote at iup.edu>
Subject: Re: Multiple Entity example for SP
To: Shib Users <users at shibboleth.net>
Message-ID: <alpine.LFD.2.02.1206251308100.16458 at denali.cc.iup.edu>
Content-Type: TEXT/PLAIN; charset=US-ASCII
The SP does not "generate" the entityID. Rather you define the entityId(s)
in the
metadata as well as the application that maps to that entityId in the
shibboleth2.xml file.
To make use of multiple entityId(s) on a single SP you will be making use
of the AppliationOverride functionality of the SP.
All you need should be in the wiki.
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplicationOver
ride
------
thanks
kevin.foote
On Mon, 25 Jun 2012, Dex wrote:
-> Anyone have an example of how to generate multiple Entity ID's in one
-> Service Provider? I need to support a test and prod site on same box.
-> My SP is connected to a ADFS box that requires unique Entity ID's.
-> --
-> To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net
->
------------------------------
Message: 4
Date: Mon, 25 Jun 2012 21:30:31 +0200
From: Peter Schober <peter.schober at univie.ac.at>
Subject: Re: Reg: Shibboleth implementation in my office premises
To: users at shibboleth.net
Message-ID: <20120625193031.GD2745 at wssp.cc.univie.ac.at>
Content-Type: text/plain; charset=us-ascii
* Prasanna <PVBalachandar at imperosoftware.com> [2012-06-25 16:55]:
> I am very new to this implementation.
Then Maybe start with
https://wiki.shibboleth.net/confluence/display/SHIB2/UnderstandingShibboleth
> 1. I would like to know the pre-requisites before Shibboleth
> Implementation.
>
> 2. Any documents explaining steps to implement Shibboleth]
[...]
> I am using 64 bit Windows 2008 R2 and IIS 7.0.
Did you try?
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPWindowsInstall
> 3. Any documents to implement SSO for Google Apps
Try
https://developers.google.com/google-apps/help/articles/shibboleth2.0
cheers,
-peter
------------------------------
Message: 5
Date: Mon, 25 Jun 2012 15:34:29 -0400
From: Chad La Joie <lajoie at itumi.biz>
Subject: Re: Reg: Shibboleth implementation in my office premises
To: Shib Users <users at shibboleth.net>
Message-ID:
<CACTY7uATE2irsGky=ZM8vNkFhB5BntTPLd7Bw1cY9jw7NH1Naw at mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
There is also new, high-level material on the Shib website in the
"About" section that explains the basics of SSO and introduces some
SAML terminology.
On Mon, Jun 25, 2012 at 3:30 PM, Peter Schober
<peter.schober at univie.ac.at> wrote:
> * Prasanna <PVBalachandar at imperosoftware.com> [2012-06-25 16:55]:
>> I am very new to this implementation.
>
> Then Maybe start with
>
https://wiki.shibboleth.net/confluence/display/SHIB2/UnderstandingShibboleth
--
Chad La Joie
www.itumi.biz
trusted identities, delivered
------------------------------
Message: 6
Date: Mon, 25 Jun 2012 13:30:04 -0700
From: Dex <dexwest at gmail.com>
Subject: Re: Multiple Entity example for SP
To: Shib Users <users at shibboleth.net>
Message-ID: <4FE8CA4C.3010105 at gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
I know how the entityId's are defined. I've read through the docs on
Application overrides, I was just hoping someone had some examples they
could share.
On 6/25/2012 10:17 AM, Kevin P. Foote wrote:
> The SP does not "generate" the entityID. Rather you define the entityId(s)
in the
> metadata as well as the application that maps to that entityId in the
> shibboleth2.xml file.
>
> To make use of multiple entityId(s) on a single SP you will be making use
> of the AppliationOverride functionality of the SP.
>
> All you need should be in the wiki.
>
>
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplicationOver
ride
>
> ------
> thanks
> kevin.foote
>
> On Mon, 25 Jun 2012, Dex wrote:
>
> -> Anyone have an example of how to generate multiple Entity ID's in one
> -> Service Provider? I need to support a test and prod site on same box.
> -> My SP is connected to a ADFS box that requires unique Entity ID's.
> -> --
> -> To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net
> ->
> --
> To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net
------------------------------
Message: 7
Date: Mon, 25 Jun 2012 16:40:33 -0400 (EDT)
From: "Kevin P. Foote" <kpfoote at iup.edu>
Subject: Re: Multiple Entity example for SP
To: Dex <dexwest at gmail.com>
Cc: Shib Users <users at shibboleth.net>
Message-ID: <alpine.LFD.2.02.1206251633430.19294 at denali.cc.iup.edu>
Content-Type: TEXT/PLAIN; charset=US-ASCII
What you find below is covered in the wiki with much greater detail on
the page I previously linked and its supporting pages..
[shibboleth2.xml]
<ApplicationOverride id="xwiki2" entityID="https://xwiki2.test.some.edu"
REMOTE_USER="uid"/>
[vhost.conf]
<Location />
ShibRequestSetting applicationId xwiki2
ShibRequestSetting requireSession 1
AuthType shibboleth
Require valid-user
</Location>
------
thanks
kevin.foote
On Mon, 25 Jun 2012, Dex wrote:
-> I know how the entityId's are defined. I've read through the docs on
-> Application overrides, I was just hoping someone had some examples they
could
-> share.
->
-> On 6/25/2012 10:17 AM, Kevin P. Foote wrote:
-> > The SP does not "generate" the entityID. Rather you define the
entityId(s)
-> > in the
-> > metadata as well as the application that maps to that entityId in the
-> > shibboleth2.xml file.
-> >
-> > To make use of multiple entityId(s) on a single SP you will be making
use
-> > of the AppliationOverride functionality of the SP.
-> >
-> > All you need should be in the wiki.
-> >
-> >
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApplicationOver
ride
-> >
-> > ------
-> > thanks
-> > kevin.foote
-> >
-> > On Mon, 25 Jun 2012, Dex wrote:
-> >
-> > -> Anyone have an example of how to generate multiple Entity ID's in
one
-> > -> Service Provider? I need to support a test and prod site on same
box.
-> > -> My SP is connected to a ADFS box that requires unique Entity ID's.
-> > -> --
-> > -> To unsubscribe from this list send an email to
-> > users-unsubscribe at shibboleth.net
-> > ->
-> > --
-> > To unsubscribe from this list send an email to
-> > users-unsubscribe at shibboleth.net
->
------------------------------
Message: 8
Date: Mon, 25 Jun 2012 22:45:16 +0200
From: Peter Schober <peter.schober at univie.ac.at>
Subject: Re: Multiple Entity example for SP
To: users at shibboleth.net
Message-ID: <20120625204516.GH2745 at wssp.cc.univie.ac.at>
Content-Type: text/plain; charset=us-ascii
* Dex <dexwest at gmail.com> [2012-06-25 18:08]:
> Anyone have an example of how to generate multiple Entity ID's in one
> Service Provider? I need to support a test and prod site on same box.
> My SP is connected to a ADFS box that requires unique Entity ID's.
You define them like in the docs (you said you knew how) and then
generate metadata for all logocal SPs and give it to your IdP
e.g. my using the metagen tool supplied with the Shib SP (or
constructing it by hand, modifying a copy of the existing one,
etc.)
-peter
------------------------------
Message: 9
Date: Mon, 25 Jun 2012 20:41:38 -0700 (PDT)
From: qle <qle at ixicorp.com>
Subject: URL contains invalid scheme (ss).
To: users at shibboleth.net
Message-ID: <1340682098345-7580242.post at n2.nabble.com>
Content-Type: text/plain; charset=us-ascii
A SAML assertion generated the error "URL contains invalid scheme (ss)".
Below is the native.log info related to this transaction. What should I be
looking for to figure out what was not configured properly?
Thanks,
quang
2012-06-25 10:52:17 DEBUG Shibboleth.ISAPI [3392] isapi_shib: mapped
https://dev-sso.wfatools.com/Shibboleth.sso/SAML2/POST to bizplanning
2012-06-25 10:52:17 DEBUG Shibboleth.ISAPI [3392] isapi_shib_extension:
mapped https://dev-sso.wfatools.com/Shibboleth.sso/SAML2/POST to bizplanning
2012-06-25 10:52:17 DEBUG Shibboleth.Listener [3392] isapi_shib_extension:
sending message (bizplanning/SAML2/POST)
2012-06-25 10:52:17 DEBUG Shibboleth.Listener [3392] isapi_shib_extension:
send completed, reading response message
2012-06-25 10:52:17 ERROR Shibboleth.ISAPI [3392] isapi_shib_extension: URL
contains invalid scheme (ss).
--
View this message in context:
http://shibboleth.1660669.n2.nabble.com/URL-contains-invalid-scheme-ss-tp758
0242.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
------------------------------
--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net
End of users Digest, Vol 12, Issue 66
*************************************
More information about the users
mailing list