Hostnames fake & EntitiesID

[Kohler, Bernd]

Hi Gilles,

I didn't test it but it might work

http://en.wikipedia.org/wiki/Loopback
Various IETF standards reserve the IPv4 address block 127/8 (from which
127.0.0.1 is most commonly used), the IPv6 address ::1, and the name
localhost for this purpose.

https://tools.ietf.org/html/rfc3330 - Special-Use IPv4 Addresses
127.0.0.0/8 - This block is assigned for use as the Internet host loopback
address. A datagram sent by a higher level protocol to an address anywhere
within this block should loop back inside the host. This is ordinarily
implemented using only 127.0.0.1/32 for loopback, but no addresses within
this block should ever appear on any network anywhere [RFC1700, page 5].

Just try to
1. modify /etc/hosts, for example
    127.0.0.2	testhosta
    127.0.0.3	testhoistb

   A ping -c 3 testhosta and ping -c3 testhostb shall work

2. Verify Apache has "Listen 80" and " NameVirtualHost *:80" (catch all)
enabled (Ubuntu: /etc/apache2/ports.conf)
3. Create 2 files in /etc/apache2/sites-available on for each VirtualHost
(127.0.0.2:80 and 127.0.0.3:80)
3. enable these to VirtualHosts using a2ensite $SITE-FILE
4. create self signed certificates as usual for 127.0.0.2 and 127.0.0.3
5. implement SSL for each VirtualHost and check

Of course you have to adjust IdP configuration to fit 127.0.0.2/127.0.0.3
and /etc/hosts entries.

If something goes wrong you might think about running two instances of
apache (one listening on 80/443 and one listening on  8080/8443)


Hope this helps to have fun 

Best

Bernd



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5557 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20130523/bab47c83/attachment.bin