<div dir="ltr"><div>Hi,<br><br>I put our Shibboleth IdP 3 check on GitHub in case it's useful for someone on the list:<br><a href="https://github.com/KULeuven-CCIS/check-shib3idp-login">https://github.com/KULeuven-CCIS/check-shib3idp-login</a><br><br>You can compile the code yourself (e.g. with "go install") or you can use the supplied binaries: <a href="https://github.com/KULeuven-CCIS/check-shib3idp-login/releases">https://github.com/KULeuven-CCIS/check-shib3idp-login/releases</a><br><br></div><div>Bug reports and/or requests are welcomed. The program can also be used standalone.<br></div><div><br>From the README:<br>___<br><br>check-shib3idp-login<br><br>A Nagios/Icinga plugin to check an end-to-end user/pass login to a Shibboleth Idp3 instance. The program can also be used standalone.<br><br>Usage:<br>$ check-shib3idp-login -h<br>check-shib3idp-login 0.1.0.<br>Nagios/Icinga check for an end-to-end Shibboleth 3 IdP login.<br>Code, bugs and feature requests: <a href="https://github.com/nxadm/check-shib3idp-login">https://github.com/nxadm/check-shib3idp-login</a>.<br>Author: Claudio Ramirez <<a href="mailto:pub.claudio@gmail.com">pub.claudio@gmail.com</a>>.<br><br>Usage:<br>  check-shib3idp-login<br>      -f <file><br>      [-w <threshold> -c <threshold>]<br>  check-shib3idp-login -s<br>  check-shib3idp-login -h<br>  check-shib3idp-login --version<br><br>Options:<br>  -f  <file>             Configuration file<br>  -w <threshold>  Threshold for warning state in seconds<br>                            [default:5]<br>  -c <threshold>   Threshold for critical state in seconds<br>                            [default:20]<br>  -s                       Print a sample YAML configuration file to STDOUT<br>  -h, --help           Show this screen<br>  --version            Show version<br><br>Examples:<br>$ check-shib3idp-login -f config.yaml<br>[OK] Threshold (w:5,c:20), transaction performed in 1.216901 seconds: login is OK.<br>$ echo $?<br>0<br><br>$ check-shib3idp-login -f config.yaml -c 1<br>[CRITICAL] Threshold (w:5,c:1), transaction performed in 1.169114 seconds: login is too slow.<br>$ echo $?<br>2<br><br>$ check-shib3idp-login -f config.yaml -c 10 -w 1<br>[WARNING] Threshold (w:1,c:10), transaction performed in 1.183457 seconds: login is slow.<br>$ echo $?<br>1<br><br>Configuration<br><br>A configuration file is used to store the user and password. You can create a configuration file with the -s switch:<br><br>---<br>### check-shib3idp-login configuration ###<br># Login information<br>username: "some_user"<br>password: "some_password"<br># Base URL for unsolicited login<br>unsolicited_login_baseurl: "<a href="https://idp.example.com/idp/profile/SAML2/Unsolicited/SSO">https://idp.example.com/idp/profile/SAML2/Unsolicited/SSO</a>"<br># Use HTML5 Local storage as ClientStorage ("idp.storage.htmlLocalStorage" in idp.properties).<br># Defaults to false (use cookies).<br>#use_local_storage: true<br># Entity ID of a service provider to login<br>provider_id: "<a href="https://sp.example.com">https://sp.example.com</a>"<br># ACS url of a service provider to login<br>shire: "<a href="https://sp.example.com/Shibboleth.sso/SAML2/POST">https://sp.example.com/Shibboleth.sso/SAML2/POST</a>"<br>___<br><br><br></div>Regards,<br><div><br><br>Claudio Ramirez<br>Competence Centre Information Security - KU Leuven</div></div>