Can I provision 2 Apache servers with the same <Extensions>?

[Phil Ehrens]

Cantor, Scott wrote:
> > Can the shib metadata for "devil" include hosts in the
> > <Extensions> clause that duplicate similar entries in
> > "galaxy"?
> 
> I don't really know what Extensions you're referring to.
> Moving something between hosts shouldn't require any change
>  to metadata at all, generally, just DNS changes.
> 
> -- Scott

The ligo-metadata.xml for galaxy looks like this:

  <EntityDescriptor entityID="https://galaxy... >
  <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
  <Extensions>
     <idpdisc:DiscoveryResponse
      Binding="urn:oasis:names:tc:SAML:profiles:SSO:idp-discovery-protocol"
      Location="https://galaxy..." index="1"/>

Followed by eight more lines with the virtual hosts indexed 2-9.

There are also:

  <AssertionConsumerService
     Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
     Location="https://galaxy.../Shibboleth.sso/SAML2/POST" index="1"/>

Repeated for each virtual host AND each of a variety of bindings.

I'm afraid I don't understand the significance of any of these
declarations. The Apache virtual hosts use A records, not CNAMES.

Phil
-- 
Phil Ehrens <phil.ehrens at ligo.org> |              mm
The LIGO Laboratory, MS 100-36     |           /^(  )^\
California Institute of Technology |           \,(..),/
1200 East California Blvd.         |             V~~V
Pasadena, CA 91125 USA             | My gpg public key:
Phone:(626)395-8518                | http://www.imbe.net/peligo.asc