Ex: Newbie question - how to test a new shibboleth installation

[David Dellinger]

Thanks Paul,

I get the same result using curl from the VM that is running the Shibboleth
container.

$ curl --insecure https://localhost/idp/status
.snip
        <div class="content">
You do not have access to the requested resource.            </div>
.snip

I'm reading through the step-by-step that you sent, and am looking at the
samltest site. Thanks!

*David Dellinger *| Sr. Systems Administrator

*Information Technology Services*ddellinger at oxy.edu | T 323-259-1315

*OXY*
*Occidental College*Mary Norton Clapp Library | 1600 Campus Road  |  Los
Angeles, California 90041
oxy.edu/its


On Thu, Aug 10, 2023 at 10:59 PM Paul B. Henson <henson at cpp.edu> wrote:

> On Thu, Aug 10, 2023 at 08:02:18PM -0700, David Dellinger via users wrote:
>
> > I am setting up Shibboleth for the first time, and am not sure how to
> > test it prior to trying to connect it to InCommon, our first use for
> [...]
> > When I look at /idp/status page, it just displays a page with a missing
> image and this text:
>
> Access control to the status page and other internal functionality is
> controlled in the conf/admin/admin.properties file, and defaults to
> AccessByIPAddress, which defaults to only localhost connections allowed.
> To display the status page with the default config, you will need to
> have your request originate from the system running the idp, or update
> admin.properties to use a different authz mechanism (as defined in
> conf/access-control.xml) or update AccessByIPAddress (also defined in
> conf/access-control.xml) to allow other source IP addresses.
>
> To do some minimal testing without involving an actual SP, you can use
> the HelloWorld admin function:
>
>
> https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1289683553/HelloWorldConfiguration
>
> This defaults to AccessByAdminUser in admin.properties, which is not
> defined by default, although there is an example commented out in
> access-control.xml.
>
> To fully test a round trip authentication, you can use samltest:
>
>         https://samltest.id/
>
> You will need to upload your idp metadata, and add the samltest SP metadata
> to your sp, at which point you can use the "Test Your IDP" link to
> authenticate against your idp and display returned attributes.
>
> This does assume you have configured an authentication and attribute
> backend.
>
> There is considerable documentation available at:
>
>
> https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631501/DeployerResources
>
> including a fairly step by step list of initial configuration
> requirements at:
>
>
> https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631515/Configuration
>
>
> --
> Paul B. Henson  |  (909) 979-6361  |  http://www.cpp.edu/~henson/
> Operating Systems and Network Analyst  |  henson at cpp.edu
> California State Polytechnic University  |  Pomona CA 91768
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230811/06d07a5f/attachment.htm>