Questions about using ApplicationOverride to define all vhosts/protected sites

[csross]

Hi,

 

Thank you.  You can be sure that I do not post a question until I read
the documentation and do plenty of research.

 

I'm have a new implementation of SP2.4.3, Solaris. 

My shibboleth implementation will be for multiple clients/vhosts, each
using different IDPs and different entityIDs, application_ids.  Right
now I am setting up the first but I was trying to think ahead.   

Since I don't want to chance revealing a customer to another, I thought
against specifying one customer site in the ApplicationDefaults and have
a generic ApplicationDefault.  Then I would define each vhost/client
with RequestMap, ApplicationOverride and Apache.   

Can I put any site that is resolvable on this server as the entitiyID in
ApplicationDefaults, even if it is not 443 need protection?  The site
will never be used as an application?  Can I put any site as the HomeURL
there (I thought I had read that it is where someone lands if the user
is invalid or other problems)?   

Since I specified the MetadataProvider only in the ApplicationOverride
section for the site I am setting up, I received a warning that "no
MetadataProvider available, configuration is probably unusable".  I
don't like warnings so can I use anyMetadataProvider entry from (ie)
Testshib in the ApplicationDefaults?  What could be the possible
problems with this please?  Can I just leave the ApplicatinDefaults
section without one and define each in the ApplicationDefaults? 

If I can set up my sites by adding ApplicationDefaults/RequestMap
sections, do I have to send new metadata to every client/vhost or just
the new client I am adding please?     

Am I correct in thinking all I have to access each sites metadata or is 
https://site1.program.com/Shibboleth.sso/Metadata
<https://site1.program.com/Shibboleth.sso/Metadata>
https://site2.program.com/Shibboleth.sso/Metadata
<https://site2.program.com/Shibboleth.sso/Metadata>       
https://site1.program.com/Shibboleth.sso/Status
<https://site1.program.com/Shibboleth.sso/Status>
https://site2.program.com/Shibboleth.sso/Status
<https://site2.program.com/Shibboleth.sso/Status>       

Thank you very much for any suggestions? 
Christine

 

________________________________

From: Cantor, Scott E. [via Shibboleth]
[mailto:ml-node+s1660669n7579779h90 at n2.nabble.com] 
Sent: Wednesday, May 30, 2012 10:02 AM
To: Christine Ross
Subject: Re: Questions about using ApplicationOverride to define all
vhosts/protected sites

 

On 5/30/12 9:50 AM, "csross" <[hidden email]> wrote: 

>I am following the instructions to get this item posted which was to
reply 
>to my original email that didn't post. 

I don't know what you're referring to, but there's no question here. 
Before you ask anything, please read the exhaustive documentation on the

topic and in the list archives. This topic is covered hundreds of times.


-- Scott 

-- 
To unsubscribe from this list send an email to [hidden email] 



________________________________

If you reply to this email, your message will be added to the discussion
below:

http://shibboleth.1660669.n2.nabble.com/Questions-about-using-Applicatio
nOverride-to-define-all-vhosts-protected-sites-tp7579648p7579779.html 

To unsubscribe from Questions about using ApplicationOverride to define
all vhosts/protected sites, click here
<http://shibboleth.1660669.n2.nabble.com/template/NamlServlet.jtp?macro=
unsubscribe_by_code&node=7579648&code=Y3Jvc3NAaGNjcy5jb218NzU3OTY0OHwtND
I4NjA4MTk0> .
NAML
<http://shibboleth.1660669.n2.nabble.com/template/NamlServlet.jtp?macro=
macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.name
spaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.vi
ew.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3A
email.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nab
ble%3Aemail.naml>  



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/Questions-about-using-ApplicationOverride-to-define-all-vhosts-protected-sites-tp7579648p7579781.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20120530/9e6a7a54/attachment-0001.html