ページ履歴

<Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
          checkAddress="false" handlerSSL="false" cookieProps="http"
　　　　　　redirectLimit="exact">

（省略）

    <!-- Session diagnostic service. -->
    <Handler type="Session" Location="/Session" showAttributeValues="false"/>

    <  <!-- JSON feed of discovery information. -->
    <Handler   <Handler type="DiscoveryFeed" Location="/DiscoFeed"/>

    <SessionInitiator   <SessionInitiator type="Chaining" Location="/DS" isDefault="true" id="DS">
        <SessionInitiator type="SAML2" template="bindingTemplate.html"/>
        <SessionInitiator   <SessionInitiator type="Shib1"/>
        <!--
        <SessionInitiator   <SessionInitiator type="SAMLDS" URL="https://ex-ds.gakunin.nii.ac.jp/WAYF"/ >
        -->
        <SessionInitiator   <SessionInitiator type="SAMLDS" URL="https://test-ds.gakunin.nii.ac.jp/WAYF" />
    <  </SessionInitiator>

</Sessions>

cd

/etc/shibboleth/cert

wget

https://metadata.gakunin.nii.ac.jp/gakunin-test-signer-2011.cer

<!--
Allows overriding of error template information/filenames. You can
also add your own attributes with values that can be plugged into the
templates, e.g., helpLocation below.
-->
<Errors supportContact="root@localhost"
    helpLocation="/about.html"
    styleSheet="/shibboleth-sp/main.css"/>

（省略）

<!-- Example of remotely supplied batch of signed metadata. -->
<!-- -->
<!--
<MetadataProvider type="XML" validate="true"
      url      url="https://ex-ds.gakunin.nii.ac.jp/fed/ex-fed-metadata.xml"
      backingFilePath      backingFilePath="federation-metadata.xml" reloadInterval="7200">
-->
<MetadataProvider type="XML" validate="true"
      url      url="https://metadata.gakunin.nii.ac.jp/gakunin-test-metadata.xml"
      backingFilePath      backingFilePath="federation-metadata.xml" reloadInterval="7200">
    <MetadataFilter type="RequireValidUntil" maxValidityInterval="1296000"/>
    <  <!--
    <MetadataFilter type="Signature" certificate="/etc/shibboleth/cert/ex-fed.crt" verifyBackup="false"/>
    -->
    <MetadataFilter type="Signature" certificate="/etc/shibboleth/cert/gakunin-test-signer-2011.cer" verifyBackup="false"/>
    <DiscoveryFilter     <DiscoveryFilter type="Blacklist" matcher="EntityAttributes" trimTags="true"
      attributeName      attributeName="http://macedir.org/entity-category"
      attributeNameFormat      attributeNameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
      attributeValue      attributeValue="http://refeds.org/category/hide-from-discovery" />
    <TransportOption     <TransportOption provider="CURL" option="64">1</TransportOption>
    <TransportOption     <TransportOption provider="CURL" option="81">2</TransportOption>
    <TransportOption     <TransportOption provider="CURL" option="10065">/etc/pki/tls/certs/ca-bundle.crt</TransportOption>

</MetadataProvider>
<!-- -->

<!-- Example of remotely supplied "on-demand" signed metadata. -->
<!--
<MetadataProvider type="MDQ" validate="true" cacheDirectory="mdq"

cd

/opt/shibboleth-idp/credentials

wget

https://metadata.gakunin.nii.ac.jp/gakunin-test-signer-2011.cer

<?xml version="1.0" encoding="UTF-8"?>
<MetadataProvider id="ShibbolethMetadata" xsi:type="ChainingMetadataProvider"

（省略）

<!--
Example HTTP metadata provider.  Use this if you want to download the metadata
from a remote source.

（省略）

<!-- -->
<!--
<MetadataProvider id="HTTPMetadata"
                  xsi                  xsi:type="FileBackedHTTPMetadataProvider"
                  backingFile                  backingFile="%{idp.home}/metadata/gakunin-metadata-backing.xml"
                  metadataURL                  metadataURL="https://ex-ds.gakunin.nii.ac.jp/fed/ex-fed-metadata.xml">
-->
<MetadataProvider id="HTTPMetadata"
                  xsi                  xsi:type="FileBackedHTTPMetadataProvider"
                  backingFile                  backingFile="%{idp.home}/metadata/gakunin-metadata-backing.xml"
                  metadataURL                  metadataURL="https://metadata.gakunin.nii.ac.jp/gakunin-test-metadata.xml">

<!--
    <MetadataFilter     <MetadataFilter xsi:type="SignatureValidation" certificateFile="%{idp.home}/credentials/ex-fed.crt" />
-->
      <MetadataFilter xsi:type="SignatureValidation" certificateFile="%{idp.home}/credentials/gakunin-test-signer-2011.cer" />
   <MetadataFilter    <MetadataFilter xsi:type="RequiredValidUntil" maxValidityInterval="P15D"/>
    <MetadataFilter     <MetadataFilter xsi:type="EntityRoleWhiteList">
        <RetainedRole>md        <RetainedRole>md:SPSSODescriptor</RetainedRole>
    <    </MetadataFilter>
</MetadataProvider>
<!-- -->