<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>The IdP metadata file is generated from a template during the initial installation step. After that step, you will need to edit that file ($SHIB_HOME/metadata/idp-metadata.xml) to reflect any changes (like port numbers) that you have made.</div>
<div><br>
</div>
<div>Paul</div>
<div><br>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Farrukh Najmi <<a href="mailto:farrukh@wellfleetsoftware.com">farrukh@wellfleetsoftware.com</a>><br>
<span style="font-weight:bold">Reply-To: </span>Shibboleth Users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br>
<span style="font-weight:bold">Date: </span>Tuesday, May 21, 2013 10:16 AM<br>
<span style="font-weight:bold">To: </span>Shibboleth Users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br>
<span style="font-weight:bold">Subject: </span>Re: Configure IdP for alternate HTTP and HTTPS ports<br>
</div>
<div><br>
</div>
<div>
<div bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix"><br>
Just to be clear, the IdP may well be using port 9443 as configured in jetty but what it is advertising in its metadata descriptor at
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://localhost:9080/idp/profile/Metadata/SAML">
http://localhost:9080/idp/profile/Metadata/SAML</a> is indicating that it is using port 8443. Thus any attempt by SP to communicate with its endpoints will fail due to the wrong port.<br>
<br>
Also, it seems like it would be a good thing to include port information on the detailed status page at:<br>
<br>
<a class="moz-txt-link-freetext" href="http://">http://</a><host>:<port>/idp/status<br>
<br>
<br>
On 05/21/2013 10:01 AM, Farrukh Najmi wrote:<br>
</div>
<blockquote cite="mid:519B7E36.2010500@wellfleetsoftware.com" type="cite">
<div class="moz-cite-prefix">Hi Kevin,<br>
<br>
Thank you for your help.<br>
<br>
I have configured jetty container for alternate HTTPS ports in jetty's start.ini as follows:
<br>
<br>
jetty.port=9080<br>
jetty.secure.port=9443<br>
jetty.https.port=9443<br>
jetty.spdy.port=9443<br>
Yet the idp metadata that is available at:<br>
<br>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://localhost:9080/idp/profile/Metadata/SAML">http://localhost:9080/idp/profile/Metadata/SAML</a><br>
<br>
uses port 8443 instead of 9443.<br>
<br>
Here is an example from the IdP metadata page:<br>
<br>
<AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="<a moz-do-not-send="true" class="moz-txt-link-freetext" href="https://wellfleet1.wellfleetsoftware.com">https://wellfleet1.wellfleetsoftware.com</a>:<b>8443</b>/idp/profile/SAML1/SOAP/AttributeQuery"/><br>
<br>
Why is it using 8443 instead of 9443 (as configured in jetty's start.ini) and what am I doing wrong that is causing this to happen?<br>
<br>
Thanks again for your help.<br>
<br>
On 05/21/2013 08:55 AM, Kevin P. Foote wrote:<br>
</div>
<blockquote cite="mid:alpine.LFD.2.03.1305210851030.17234@iup.edu" type="cite">
<pre wrap="">On Tue, 21 May 2013, Farrukh Najmi wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Where can I find info on how to configure the IdP to use alternate ports
for HTTP and HTTPS endpoints (e.g. 9080 for HTTP and 9443 for HTTPS).
</pre>
</blockquote>
<pre wrap="">Port handling is a function of your container (jetty, tomcat, apache
etc.) not the IdP software...
The IdP endpoints are "configured" if you will and known by what is
published in your metadata for your IdP.
</pre>
</blockquote>
<br>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Regards,
Farrukh Najmi
Web: <a class="moz-txt-link-freetext" href="http://www.wellfleetsoftware.com">http://www.wellfleetsoftware.com</a></pre>
</div>
</div>
</span>
</body>
</html>