<div dir="ltr"><div class="gmail_default" style="font-family:georgia,serif">Thanks Paul,</div><div class="gmail_default" style="font-family:georgia,serif"><br></div><div class="gmail_default" style="font-family:georgia,serif">I get the same result using curl from the VM that is running the Shibboleth container.</div><div class="gmail_default" style="font-family:georgia,serif"><br></div><div class="gmail_default" style=""><font face="monospace">$ curl --insecure <a href="https://localhost/idp/status">https://localhost/idp/status</a><br></font></div><div class="gmail_default" style=""><font face="monospace">.snip<br> <div class="content"><br>You do not have access to the requested resource. </div></font><br></div><div class="gmail_default" style=""><font face="monospace">.snip</font></div><div class="gmail_default" style="font-family:georgia,serif"><br></div><div class="gmail_default" style="font-family:georgia,serif">I'm reading through the step-by-step that you sent, and am looking at the samltest site. Thanks!</div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><p style="background-image:initial;background-position:initial;background-repeat:initial"><b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102);background-image:initial;background-position:initial;background-repeat:initial">David Dellinger </span></b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102);background-image:initial;background-position:initial;background-repeat:initial">| Sr. Systems Administrator</span><span style="font-family:Arial,sans-serif;color:rgb(89,89,89);background-image:initial;background-position:initial;background-repeat:initial"><br></span><b><span style="font-family:Arial,sans-serif;color:rgb(255,153,0)">Information Technology Services<br></span></b><span style="font-family:Arial,sans-serif;color:rgb(89,89,89)"><a href="mailto:ddellinger@oxy.edu" target="_blank">ddellinger@oxy.edu</a> </span><span style="font-family:Arial,sans-serif;color:rgb(102,102,102)">| T 323-259-1315</span><b><span style="font-family:Arial,sans-serif;color:rgb(255,153,0)"></span></b></p><p style="margin:0in 0in 0.0001pt;font-size:11pt;font-family:Calibri,sans-serif"></p><p style="background-image:initial;background-position:initial;background-repeat:initial"><b><span style="font-family:Arial,sans-serif;color:rgb(255,153,0);background-image:initial;background-position:initial;background-repeat:initial">OXY</span></b><b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102);background-image:initial;background-position:initial;background-repeat:initial"> </span></b><b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102);background-image:initial;background-position:initial;background-repeat:initial">Occidental College<br></span></b><span style="font-family:Arial,sans-serif;color:rgb(102,102,102)">Mary Norton Clapp Library | 1600 Campus Road | Los Angeles, California 90041<br></span><span style="font-family:Arial,sans-serif"><a href="http://oxy.edu/its" target="_blank">oxy.edu/its</a><span> </span></span></p></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div><br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Aug 10, 2023 at 10:59 PM Paul B. Henson <<a href="mailto:henson@cpp.edu" target="_blank">henson@cpp.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">On Thu, Aug 10, 2023 at 08:02:18PM -0700, David Dellinger via users wrote:<br>
<br>
> I am setting up Shibboleth for the first time, and am not sure how to<br>
> test it prior to trying to connect it to InCommon, our first use for<br>
[...]<br>
> When I look at /idp/status page, it just displays a page with a missing image and this text:<br>
<br>
Access control to the status page and other internal functionality is<br>
controlled in the conf/admin/admin.properties file, and defaults to<br>
AccessByIPAddress, which defaults to only localhost connections allowed.<br>
To display the status page with the default config, you will need to<br>
have your request originate from the system running the idp, or update<br>
admin.properties to use a different authz mechanism (as defined in<br>
conf/access-control.xml) or update AccessByIPAddress (also defined in<br>
conf/access-control.xml) to allow other source IP addresses.<br>
<br>
To do some minimal testing without involving an actual SP, you can use<br>
the HelloWorld admin function:<br>
<br>
<a href="https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1289683553/HelloWorldConfiguration" rel="noreferrer" target="_blank">https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1289683553/HelloWorldConfiguration</a><br>
<br>
This defaults to AccessByAdminUser in admin.properties, which is not<br>
defined by default, although there is an example commented out in<br>
access-control.xml.<br>
<br>
To fully test a round trip authentication, you can use samltest:<br>
<br>
<a href="https://samltest.id/" rel="noreferrer" target="_blank">https://samltest.id/</a><br>
<br>
You will need to upload your idp metadata, and add the samltest SP metadata<br>
to your sp, at which point you can use the "Test Your IDP" link to<br>
authenticate against your idp and display returned attributes.<br>
<br>
This does assume you have configured an authentication and attribute<br>
backend.<br>
<br>
There is considerable documentation available at:<br>
<br>
<a href="https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631501/DeployerResources" rel="noreferrer" target="_blank">https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631501/DeployerResources</a><br>
<br>
including a fairly step by step list of initial configuration<br>
requirements at:<br>
<br>
<a href="https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631515/Configuration" rel="noreferrer" target="_blank">https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631515/Configuration</a><br>
<br>
<br>
-- <br>
Paul B. Henson | (909) 979-6361 | <a href="http://www.cpp.edu/~henson/" rel="noreferrer" target="_blank">http://www.cpp.edu/~henson/</a><br>
Operating Systems and Network Analyst | <a href="mailto:henson@cpp.edu" target="_blank">henson@cpp.edu</a><br>
California State Polytechnic University | Pomona CA 91768</blockquote></div>