Can I provision 2 Apache servers with the same <Extensions>?

[Cantor, Scott]

On 3/2/16, 4:20 PM, "users on behalf of Phil Ehrens" <users-bounces at shibboleth.net on behalf of pehrens at ligo.caltech.edu> wrote:


>
>The ligo-metadata.xml for galaxy looks like this:

Well, I guess the point is, what does galaxy mean? Why does galaxy have to change to something else? Shouldn't a new server just become galaxy? That's the underlying point I'm making: you don't ever change the names of things unless you want pain.

That said, SAML metadata indirects at least everything *but* the entityID, which you simply CANNOT change unless you want life to be bad for everybody, or unless the only IdP consuming it is yours (in which case, most of SAML becomes academic to some degree).

>I'm afraid I don't understand the significance of any of these
>declarations.

Well, you really need to start with a read up on SAML metadata to understand what it's all being used for, but to answer the question, endpoints don't have to be unique in metadata. Multiple systems with different entityIDs can have the same endpoints in them. The validation is by whether an endpoint is valid for an entity, not to derive an entity's identity by a location.

> The Apache virtual hosts use A records, not CNAMES.

I'm not sure why that would matter.

-- Scott