help required on shibboleth+testshib

Kevin Foote kpfoote at uoregon.edu
Wed Mar 18 14:26:46 EDT 2015


> On Mar 18, 2015, at 11:10 AM, Akshik dbk <akshik at outlook.com> wrote:
> 
> Thanks Kevin & Scott.
> 
> going by the https://wiki.shibboleth.net/confluence/display/SHIB2/EntityNaming under Resolution
>  SAML V2.0 defines a fairly obvious way of obtaining metadata about a given entity by resolving an entityID URL
> 
> so is it recommended to change my entry id to something like and test the functionality
> http://115.112.68.53:5000/Shibboleth.sso/Metadata 

No. Just set the entityID to a string you know e.g. “myorg:openstack:keystone” 
Then restart shibd and httpd. Then pull the metadata from <hostheader>/Shibboleth.sso/Metadata
This should give you a file you can rename to something unique and then upload to testshib. 
I can remove all your other entries, just let me know. 

Again the main part to check once you get the metadata file is that the locations listed in the 
<md:AssertionConsumerService Binding> elements corespond to a location served by your HTTPD. 
Protocol has to match i.e. http / https 

--------
thanks
 kevin.foote


More information about the users mailing list