Shib 3.x & alternate credentials

Peter Schober peter.schober at univie.ac.at
Wed Oct 28 12:19:09 EDT 2015


* Dave Bartholomew <Dave.Bartholomew at csueastbay.edu> [2015-10-27 23:03]:
> I'm trying to configure Shib 3.x to emulate what was working in Shib
> 2.x to use production credentials on a dev system for InCommon SPs.

Whatever you're doing here, if use of production credentials is an
option why not instead make a clone the whole prod IDP machine, give
that second machine a different IP address, and modify your local
(i.e., on your workstation or PC) resolver[1] to point the DNS name of
the prod host to IP address of the the new/cloned IDP.

Then use the cloned prod IDP with all real federation SPs w/o them
every knowing the difference.
No changes on the clonoed IDP required (other than the IP address)!
-peter

[1] https://en.wikipedia.org/wiki/Hosts_(file)#Location_in_the_file_system


More information about the users mailing list