<div dir="ltr"><br><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Feb 12, 2014 at 1:58 PM, Christopher Bongaarts <span dir="ltr"><<a href="mailto:cab@umn.edu" target="_blank">cab@umn.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div class="">On 2/12/2014 1:51 PM, Ben Marsh wrote:<br>
> We are trying to set up shibboleth authentication on linux for apache<br>
> web servers that are load balanced. We are putting the shibd on a<br>
> seperate server. How does the apache module know where the shibd<br>
> process is on the network?<br>
<br>
</div>In shibboleth2.xml:<br>
<br>
<a href="https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPListener" target="_blank">https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPListener</a><br>
<br>
It's omitted in the default config file, which causes it use the default<br>
unix socket listener. If you run shibd on a remote host, you'll need to<br>
use the TCP listener instead.<br><div class=""><div class="h5"><br></div></div></blockquote><div> </div></div><br></div><div class="gmail_extra">So we do already have:<div> <TCPListener address="10.0.0.182" port="12345" acl="10.0.0.40 10.0.0.41"/><br>
</div><div><br></div><div>but it seems that is just for configuring the shibd process on the shibd server. How do we tell apache that shibd is running on 10.0.0.182? Is the apache module reading /etc/shibboleth2.xml too?</div>
</div></div>