<span class="Apple-style-span" style="color: rgb(34, 34, 34); font-family: arial, sans-serif; font-size: 13px; background-color: rgb(255, 255, 255); ">Hi!<div><br></div><div>I'm currently developing an application for Stanford that's supposed to interface with their Shibboleth authentication system. I've read most of the getting started guides for Service Providers and I am currently following the instructions posted here: <a href="https://itservices.stanford.edu/service/shibboleth/sp/test-shib" target="_blank" style="color: rgb(17, 85, 204); ">https://itservices.stanford.edu/service/shibboleth/sp/test-shib</a> for setting up my application, and I already have some questions/problems. If anybody has answers for any of them, I would really appreciate it!</div>
<div><br></div><div>First, I didn't receive any security certs or keys back from testshib, and Stanford's instructions note that I should have received them and stored them in testshib.crt and testshib.key. Where can I find these, or do I not need them?</div>
<div><br></div><div>Second, the application is running Django, and using mod_wsgi to route the urls. Is there a resource that I should be Aliasing /Shibboleth.sso to? My shib.conf file looks like this: </div><div><br></div>
<blockquote style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 40px; border-top-style: none; border-right-style: none; border-bottom-style: none; border-left-style: none; border-width: initial; border-color: initial; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; ">
<div><div># </div></div><div><div># Tell Apache to load the Shibboleth Metadata</div></div><div><div>#</div></div><div><div><br></div></div><div><div>Alias /Shibboleth.sso/Metadata "/etc/shibboleth/shibboleth2.xml"</div>
</div><div><div><br></div></div><div><div>#</div></div><div><div># Load the Shibboleth module.</div></div><div><div>#</div></div><div><div>LoadModule mod_shib /usr/lib/shibboleth/mod_shib_22.so</div></div><div><div><br></div>
</div><div><div>#</div></div><div><div># Used for example logo and style sheet in error templates.</div></div><div><div>#</div></div><div><div><IfModule mod_alias.c></div></div><div><div> <Location /shibboleth-sp></div>
</div><div><div> Allow from all</div></div><div><div> </Location></div></div><div><div> Alias /shibboleth-sp/main.css /usr/share/doc/shibboleth-2.4.3/main.css</div></div><div><div> Alias /shibboleth-sp/logo.jpg /usr/share/doc/shibboleth-2.4.3/logo.jpg</div>
</div><div><div></IfModule></div></div><div><div><br></div></div><div><div>#</div></div><div><div># Configure the module for content.</div></div><div><div>#</div></div><div><div># You MUST enable AuthType shibboleth for the module to process</div>
</div><div><div># any requests, and there MUST be a require command as well. To</div></div><div><div># enable Shibboleth but not specify any session/access requirements</div></div><div><div># use "require shibboleth".</div>
</div><div><div>#</div></div><div><div><Location /stanford/shibboleth ></div></div><div><div> AuthType shibboleth</div></div><div><div> ShibRequireSession On</div></div><div><div> ShibUseEnvironment On</div></div>
<div><div> Require user</div></div><div><div></Location></div></div><div><div><br></div></div><div><div><Location /secure></div></div><div><div> AuthType shibboleth</div></div><div><div> ShibRequestSetting requireSession 1</div>
</div><div><div> require valid-user</div></div><div><div></Location></div></div></blockquote><div><br></div><div>Third, I'm running into an error message "Error Message: SAML 2 SSO profile is not configured for relying party '<a href="https://dev.classowl.com/shibboleth-sp" target="_blank" style="color: rgb(17, 85, 204); ">https://dev.classowl.com/shibboleth-sp</a>'". The TestShib portal was working previously but now has stopped working. I'm not sure which file I changed to create the problem. </div>
<div><br></div><div>The whole setup is running on Amazon EC2, with RedHat. </div><div><br></div><div>Thanks!</div><div>Charlie</div></span>