Table of Contents maxLevel 2 style none Anchor spInst1 spInst1
1. Requirement for Shibboleth SP (Version 2.4 or later)
Required packages to be installed:
- Apache HTTP Server 2.2 or later, with mod_ssl
Anchor spInst2 spInst2
2. Installation of Operating System
2.1. Configuration at OS installation
- Packages required to be installed at OS installation (CentOS 6 assumed):
- Apache Web Server (httpd)
- PHP (php), or any execution environment for web applications
- and others you need.
SELinux is not supported with this document. Please confirm it is disabled with:
Determine a hostname for SP: sp.example.asia
Hostname is defined as follows in /etc/sysconfig/network
2.2. Register to DNS server in your domain
In local testing environment, registering to /etc/hosts may be enough.
2.3. Configuration on time synchronization
Use of NTP is recommended. Configure ntpd to refer nearby NTP servers.
(It may be configured already at installation to refer default NTP servers provided by pool.ntp.org project, though)
Shibboleth IdP and SP must work within 5min difference of clock.
3. Installation of Shibboleth SP
The yum repository is available from the SP version 2.3, making the installing procedure very easy.
The instruction described here is for the following OS.
- CentOS 5/6, Red Hat Enterprise Linux 4/5/6 (i386)
- SUSE Linux Enterprise Server 10/11(no label/SP1/SP2) (i386)
- OpenSUSE Linux 11.3/11.4/12.1 (i386)
Please refer to the following instruction in case of the other OS.
The following instruction requires the Internet connection. If you don't have the Internet connection, all required files are stored under /root/source directory and you can install directly with this command.
3.1. Add repository file
Download the repository file for Shibboleth.
(Following command is for the CentOS 6. In case of different OS, please modify the part of URL described as "CentOS_CentOS-6")
# wget http://download.opensuse.org/repositories/security://shibboleth/CentOS_CentOS-6/security:shibboleth.repo
Add the downloaded repository file to yum.
(File name is modified since using colon in the file name is not my preference^^)
# cp security\:shibboleth.repo /etc/yum.repos.d/shibboleth.repo
If you are installing the software from /root/source directory by using rpm command, skip these steps and go straight to section 3.3 .
In order to install the shibboleth SP, just type the following command.
# yum install shibboleth
Following packages will also be installed additionally (This is an example in case of prepared Virtual Box image 2014-01-07).
3.3. httpd Setting
Setup ServerName in /etc/httpd/conf.d/ssl.conf
4. Start shibd daemon
Start shibd daemon by the following command.
# service shibd start
5. Basic operation of SP
httpd start up:
# service httpd start
shibd start up:
# service shibd start
# service httpd stop
# service shibd stop
httpd restart (stop→start)
# service httpd restart
shibd restart (stop→start)
# service shibd restart
|In addition to shibd, httpd is also include SP configuration file (shibboleth2.xml), therefore, please restart httpd when you modify the SP configuration. Shibboleth module (mod_shib) which is involved in the httpd, will include shibboleth2.xml.|
Proceed to next step for configuration of SP