How does apache module locate the shibd server

[Christopher Bongaarts]

On 2/12/2014 1:51 PM, Ben Marsh wrote:
> We are trying to set up shibboleth authentication on linux for apache 
> web servers that are load balanced.  We are putting the shibd on a 
> seperate server.  How does the apache module know where the shibd 
> process is on the network?

In shibboleth2.xml:

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPListener

It's omitted in the default config file, which causes it use the default 
unix socket listener.  If you run shibd on a remote host, you'll need to 
use the TCP listener instead.

You should also be sure to review the SP clustering notes here:

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPClustering

in particular the point about the protocol having zero security.

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%