Successful IDPv2 to v3 Migration

[McKean, Brandon Scott - mckeanbs]

Hi Guys,

I wanted to share another success story. We managed to cut over to
IDPv3 over the weekend maintenance window with success. 

The main gotcha encountered during the actual cutover was needing to
support SOAP endpoints as is documented on the Jetty9 page. The
configuration didn't work for us out of the box because of port 8443
conflicting with what we had setup (as was hinted on the
SecurityAndNetworking page), so I changed it to use 8009 and made an
iptables rule redirect port 8443 to 8009. I also had to make a new
pkcs12 keystore for the original idp.crt and idp.key files we had so
that it would match what the metadata published.

In any case, with all that done, it was just a matter of getting
attribute-filter right with various SPs.

I wanted to thank you all for the documentation and help on here, it's
been an invaluable resource in getting to this stage.
-- 
Brandon McKean
IT / Systems
Linux Administrator
(540)568-4235
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150720/f0044800/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5673 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20150720/f0044800/attachment.bin>