Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

・構築SPとテストフェデレーションテスト用IdPの間での接続テスト

  構築したSPのshibboleth2 構築したSPの/etc/shibboleth/shibboleth2.xmlにて、DSをテストフェデレーションのものに変更します。

...

Panel
borderColor#cccccc
bgColor#eeeeee
borderStylesolid

cd /opt/shibboleth-idp/credentials wget https://metadata.gakunin.nii.ac.jp/gakunin-test-signer-2020.cer


/opt/shibboleth-idp/conf/metadata-providers.xmlのメタデータ自動ダウンロード設定を変更します。 

Panel
borderColor#cccccc
bgColor#eeeeee
borderStylesolid

<?xml version="1.0" encoding="UTF-8"?>
<MetadataProvider id="ShibbolethMetadata" xsi:type="ChainingMetadataProvider"

(省略)

<!--
Example HTTP metadata provider.  Use this if you want to download the metadata
from a remote source.

(省略)

<!-- -->
<!--
<MetadataProvider id="HTTPMetadata"
                  xsi:type="FileBackedHTTPMetadataProvider"
                  backingFile="%{idp.home}/metadata/gakunin-metadata-backing.xml"
                  metadataURL="https://ex-ds.gakunin.nii.ac.jp/fed/ex-fed-metadata.xml">
-->
<MetadataProvider id="HTTPMetadata"
                  xsi:type="FileBackedHTTPMetadataProvider"
                  backingFile="%{idp.home}/metadata/gakunin-metadata-backing.xml"
                  metadataURL="https://metadata.gakunin.nii.ac.jp/gakunin-test-metadata.xml">

<!--
    <MetadataFilter xsi:type="SignatureValidation" certificateFile="%{idp.home}/credentials/ex-fed.crt" />
-->
   <MetadataFilter xsi:type="SignatureValidation" certificateFile="%{idp.home}/credentials/gakunin-test-signer-2020.cer" />
   <MetadataFilter xsi:type="RequiredValidUntil" maxValidityInterval="P15D"/>
    <MetadataFilter xsi:type="EntityRoleWhiteList">
        <RetainedRole>md:SPSSODescriptor</RetainedRole>
    </MetadataFilter>
</MetadataProvider>
<!-- -->


tomcatを再起動します。jettyを再起動します。 

Panel
borderColor#cccccc
bgColor#eeeeee
borderStylesolid
systemctl restart jetty

...