testbed configuration

[Dave Perry]

Backing you on both points Peter.

Our prod and test instances run Jetty as the sole service, with the same config around entityID and URLs (barring changes I'm testing, eg the Azure Proxy thing atm). And my dev VDI on prem has a hosts file line pointing to the test one, while the other university DNS entries/loadbalancer point to the prod one.

HTH
Dave

_________________________________________________

Dave Perry
Application Analyst  |  Innovation & Technology Services

York St John University

Lord Mayor’s Walk, York, YO31 7EX
T: +44(0)1904 876 0000
d.perry1 at yorksj.ac.uk<mailto:d.perry1 at yorksj.ac.uk>  |  www.yorksj.ac.uk<http://www.yorksj.ac.uk/>

[cid:b55414f2-924f-4959-9038-a167d3992962]

________________________________
From: users <users-bounces at shibboleth.net> on behalf of Peter Schober via users <users at shibboleth.net>
Sent: 04 September 2023 10:09
To: users at shibboleth.net <users at shibboleth.net>
Cc: Peter Schober <peter.schober at univie.ac.at>
Subject: Re: testbed configuration

Caution: Please take care when clicking on links or opening attachments in emails that originate from outside of the university. When in doubt, contact the ITS service desk.


Kevin Buckley via users <users at shibboleth.net> [2023-09-04 10:37 CEST]:
> I have been trying to re-familiarise myself with the Shibboleth
> eco-system, initially by setting up an IdP+SP pair on a couple
> of machine-local VMs, making use of RFC 1918 range IPs with the
> server names in the 168.192.in-addr.arpa domain so as to make
> it feel less "artificial".

The only machine that needs to resolve the host names to your IDP or
SP is where your web browser runs. So just make up sensible names in
any domain you like and write the necessary entries into your local
hosts file, https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fen.wikipedia.org%2Fwiki%2FHosts_&data=05%7C01%7Cd.perry1%40yorksj.ac.uk%7Ceeecd5a87050465668e608dbad26be2a%7C5c8ae38ef85b4309b7ec862815a37aee%7C0%7C0%7C638294154124552559%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=HLgeR65Sq8tR9my%2F4Rl2Hd5sTm7fbUlMJRabbSWJ%2FKI%3D&reserved=0(file)<https://en.wikipedia.org/wiki/Hosts_>

> I also have a front-end Apache server, listenting on 443, that
> proxies into the Jetty instance.

Again trying to help simplify this excersise: Why add httpd and
proxing at all? Jetty can also serve as an TLS-enabled web server.
(You could even drop TLS for now if this is merely a test.)

> [proxy_ajp:debug]  [pid 14908:tid 14] mod_proxy_ajp.c(769):     [client 192.168.56.1:41458] AH00895: serving URL ajp://localhost:8080/idp/profile/admin/hello

I'm not aware recent Jetty versions even supported AJP?

-peter
--
For Consortium Member technical support, see https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fshibboleth.atlassian.net%2Fwiki%2Fx%2FZYEpPw&data=05%7C01%7Cd.perry1%40yorksj.ac.uk%7Ceeecd5a87050465668e608dbad26be2a%7C5c8ae38ef85b4309b7ec862815a37aee%7C0%7C0%7C638294154124552559%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=Tu%2BsjBveHq%2FZw80B4IKu4sWhqlnFqDCxDckXzobkV2Q%3D&reserved=0<https://shibboleth.atlassian.net/wiki/x/ZYEpPw>
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230904/21326085/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-wnpio0wa.png
Type: image/png
Size: 12155 bytes
Desc: Outlook-wnpio0wa.png
URL: <http://shibboleth.net/pipermail/users/attachments/20230904/21326085/attachment.png>