Taking a look/trying enabling X509 Authentication in Shibboleth IdP

[o haya]

Hi,

I want to try to enable X509 authentication on the Shibbleth IdP that I
have, and I've tried to follow the information at:

https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199506319/X509AuthnConfiguration#General-Configuration

I've run the module command as described:

bin/module.sh -t idp.authn.X509 || bin/module.sh -e idp.authn.X509

and got:

./module.sh -t idp.authn.X509 || ./module.sh -e idp.authn.X509
>
> INFO  - Including auto-located properties in
> ./../conf/admin/admin.properties
>
> INFO  - Including auto-located properties in
> ./../conf/authn/authn.properties
>
> INFO  - Including auto-located properties in
> ./../conf/c14n/subject-c14n.properties
>
> INFO  - Including auto-located properties in
> ./../conf/saml-nameid.properties
>
> INFO  - Including auto-located properties in ./../conf/services.properties
>
> INFO  - Including auto-located properties in ./../conf/ldap.properties
>
> INFO  - Including auto-located properties in
> ./../conf/admin/admin.properties
>
> INFO  - Including auto-located properties in
> ./../conf/authn/authn.properties
>
> INFO  - Including auto-located properties in
> ./../conf/c14n/subject-c14n.properties
>
> INFO  - Including auto-located properties in
> ./../conf/saml-nameid.properties
>
> INFO  - Including auto-located properties in ./../conf/services.properties
>
> INFO  - Including auto-located properties in ./../conf/ldap.properties
>
> Enabling idp.authn.X509...
>
>         edit-webapp/x509-prompt.jsp created
>
> [OK]
>
>
> Customize edit-webapp/x509-prompt.jsp and rebuild war to deploy.
>

So far, I haven't added the TrustEngine as shown on that page because it
sounds like that is optional(?).

Also, this page:

https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199500577/Installation#Rebuilding-the-WAR-file

Installing plugins automatically performs this step, but should you need to
> rebuild the WAR file yourself, you can run the build command line utility (
> *bin/build.sh* or *bin\build.bat*) from the installation directory
> (idp.home).
>

so I haven't rebuilt the WAR (yet).

I rebooted the IdP machine and did a test request, but the IdP seems to
behaving exactly like before I performed those steps.

Do I have to rebuild the WAR file maybe?

Thanks,
Jim


<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
Virus-free.www.avast.com
<https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250522/8b89f4ad/attachment.htm>