users Digest, Vol 72, Issue 186

Fri Jun 30 08:14:37 EDT 2017

Thanks,
Yes I read that part of the Shib docs but didn't find anything.

I don't know our LDAP guy is always complaining about the worthless shib
chatter in his logs.

I was trying to help him out.

===========================

Thank You;

Chris Cheltenham
Technology Services
The School District of Philadelphia

Work # 215-400-5025
Cell # 215-301-6571
-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of
users-request at shibboleth.net
Sent: Thursday, June 29, 2017 5:00 PM
To: users at shibboleth.net
Subject: users Digest, Vol 72, Issue 186

Send users mailing list submissions to
	users at shibboleth.net

To subscribe or unsubscribe via the World Wide Web, visit
	http://shibboleth.net/mailman/listinfo/users
or, via email, send a message with subject or body 'help' to
	users-request at shibboleth.net

You can reach the person managing the list at
	users-owner at shibboleth.net

When replying, please edit your Subject line so it is more specific than
"Re: Contents of users digest..."

Today's Topics:

   1. Re: Shib (Domingues, Michael D)
   2. Re: Need input on the approaches for ESO implementation 
      (Kim, Allan)

----------------------------------------------------------------------

Message: 1
Date: Thu, 29 Jun 2017 19:05:49 +0000
From: "Domingues, Michael D" <michael-domingues at uiowa.edu>
To: "users at shibboleth.net" <users at shibboleth.net>
Subject: Re: Shib
Message-ID:

<CY1PR0401MB12431E641375049A339FFDB4EAD20 at CY1PR0401MB1243.namprd04.prod.ou
tlook.com>

Content-Type: text/plain; charset="us-ascii"

https://wiki.shibboleth.net/confluence/display/IDP30/LDAPAuthnConfiguratio
n

Assuming you're using the built-in (and not the JAAS) LDAP authentication
system, idp.pool.LDAP.validatePeriod, idp.pool.LDAP.validatePeriodically,
and idp.pool.LDAP.validateOnCheckout are probably what you're looking for.

Now, that said, is it wise? Questionable. In my environment (for example)
I actually had to increase the frequency of validation, because a load
balancer we have in front of our AD environment was closing out sessions.

Log filtering is probably just a better strategy here.

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Cheltenham, Chris
<ccheltenham-ext at philasd.org>
Sent: Thursday, June 29, 2017 1:44:24 PM
To: users at shibboleth.net
Subject: Shib

Hello,

We are finding Shibboleth to be very chatty to LDAP in that I guess it
tries to keep its connection open.

Can we limit that?

Its creating a whole lot of garbage in out ldap logs.

===========================

Thank You;

Chris Cheltenham
Technology Services
The School District of Philadelphia

Work # 215-400-5025
Cell # 215-301-6571
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://shibboleth.net/pipermail/users/attachments/20170629/26201589/attac
hment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.gif
Type: image/gif
Size: 1089 bytes
Desc: image001.gif
URL:
<http://shibboleth.net/pipermail/users/attachments/20170629/26201589/attac
hment-0001.gif>

------------------------------

Message: 2
Date: Thu, 29 Jun 2017 20:59:32 +0000
From: "Kim, Allan" <jak009 at ucsd.edu>
To: Shib Users <users at shibboleth.net>
Subject: Re: Need input on the approaches for ESO implementation
Message-ID:

<MWHPR04MB0927941BEC6BB5CC3DD35C8BF8D20 at MWHPR04MB0927.namprd04.prod.outloo
k.com>

Content-Type: text/plain; charset="iso-8859-1"

Since mod_shib communicates with shibd using either a Unix or TCP/IP
socket, in theory you can set up a remote connection between the two:

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPTCPListener

But I don't know of anyone who uses this in practice ... IMO the problems
with approach #1 by far outweigh any hypothetical advantages.

________________________________
From: users <users-bounces at shibboleth.net> on behalf of
bhupendra.a.singh at accenture.com <bhupendra.a.singh at accenture.com>
Sent: Wednesday, June 28, 2017 9:22 PM
To: users at shibboleth.net
Cc: ravi.bamne at accenture.com; ajit.kumar.singh at accenture.com
Subject: Need input on the approaches for ESO implementation

Hi Shib team,

We have a requirement to install the apache webserver in different Linux
box then the shibboleth and the application server.

Please help me to understand, from the below two approachs which one is
best suitable for our requirement.

If I will installed the Apache server in different box then shibboleth,
how shib.conf file will be generated in the httpd->conf.d-shib.conf
location which is required for shibboleth integration with Apache.

[cid:image001.png at 01D2F0B9.F0006760]

Thanks & Regards,

Bhupendra

________________________________

This message is for the designated recipient only and may contain
privileged, proprietary, or otherwise confidential information. If you
have received it in error, please notify the sender immediately and delete
the original. Any other use of the e-mail by you is prohibited. Where
allowed by local law, electronic communications with Accenture and its
affiliates, including e-mail and instant messaging (including content),
may be scanned by our systems for the purposes of information security and
assessment of internal compliance with Accenture policy.
__________________________________________________________________________
____________

www.accenture.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://shibboleth.net/pipermail/users/attachments/20170629/4dfc0946/attac
hment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 19527 bytes
Desc: image001.png
URL:
<http://shibboleth.net/pipermail/users/attachments/20170629/4dfc0946/attac
hment.png>

------------------------------

Subject: Digest Footer

--
To unsubscribe from this list send an email to
users-unsubscribe at shibboleth.net

------------------------------

End of users Digest, Vol 72, Issue 186
**************************************