Shibboleth IdP (Tomcat6/OpenJDK1.6) Fresh Install Issues

[Caskey, Paul]

Not sure why the wiki omits that, but here's what you need in tomcat's server.xml for port 443 (you can substitute your own commercial cert for idp.jks):

<Connector
port="443"
protocol="HTTP/1.1"
SSLEnabled="true"
maxThreads="150"
scheme="https"
secure="true"
clientAuth="false"
sslProtocol="TLS"
keystoreFile="/opt/shibboleth-idp/credentials/idp.jks"
keystorePass="YourSecretPassword" />




From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Joaquin Menchaca
Sent: Tuesday, October 01, 2013 12:51 PM
To: users at shibboleth.net
Subject: Re: Shibboleth IdP (Tomcat6/OpenJDK1.6) Fresh Install Issues

On 10/1/13 10:33 AM, Kevin P. Foote wrote:

You will not see the endpoints or locations you see on the frontside communication

port generally (443) or if your offloading via apache or balancer

your normal www port..
I was following the process in in the wiki (1), that says to test if the IdP is properly installed by using the URL:

https://HOSTNAME/idp/profile/Status

I followed the instructions using the Tomcat Container (2).  The instructions doesn't mention configured the connectors others than port 8443 for Supporting SOAP Endpoints.  Is there a connector I should add for 443?  Do I need to install a certificate in the keystore?

I am relatively new to Tomcat configurations.


1 - https://wiki.shibboleth.net/confluence/display/SHIB2/IdPInstall
2 - https://wiki.shibboleth.net/confluence/display/SHIB2/IdPApacheTomcatPrepare

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131001/00d3ab68/attachment-0001.html