Table of Contents maxLevel 2 style none
Anchor spInst1 spInst1
1. Requirement for Shibboleth SP (Version 2.4 or later)
Required packages to be installed:
- Apache HTTP Server 2.2 or later, with mod_ssl
Please check latest information on the site of original Shibboleth:
Linux, Mac OS X, Solaris, Windows, Java Servlets
Anchor spInst2 spInst2
2. Installation of Operating System
2.1. Configuration at OS installation
- Packages required to be installed at OS installation (CentOS 6 assumed):
- Apache Web Server (httpd)
- PHP (php), or any execution environment for web applications
- and others you need.
SELinux is not supported with this document. Please confirm it is disabled with:
Panel $ /usr/sbin/getenforce
Disabled hostname
Determine a hostname for SP: sp.example.asia
Hostname is defined as follows in /etc/sysconfig/networkPanel HOSTNAME=sp.example.asia
2.2. Register to DNS server in your domain
In local testing environment, registering to /etc/hosts may be enough.
2.3. Configuration on time synchronization
Use of NTP is recommended. Configure ntpd to refer nearby NTP servers.
(It may be configured already at installation to refer default NTP servers provided by pool.ntp.org project, though)
Shibboleth IdP and SP must work within 5min difference of clock.
| Anchor | ||||
|---|---|---|---|---|
|
3. Installation of Shibboleth SP
The yum repository is available from the SP version 2.3, making the installing procedure very easy.
The instruction described here is for the following OS.
- CentOS 5/6, Red Hat Enterprise Linux 4/5/6 (i386)
- SUSE Linux Enterprise Server 10/11(no label/SP1/SP2) (i386)
- OpenSUSE Linux 11.3/11.4/12.1 (i386)
Please refer to the following instruction in case of the other OS.
The above OS but x86_64
⇒Please modify "yum install shibboleth" as "yum install shibboleth.x86_64" in the instruction below.
Other Linux distribution
⇒Here
Other OS
⇒Here
| Info |
|---|
WS Participants The following instruction requires the Internet connection. If you don't have the Internet connection, all required files are stored under /root/source directory and you can install directly with this command.
|
3.1. Add repository file
Download the repository file for Shibboleth.
(Following command is for the CentOS 6. In case of different OS, please modify the part of URL described as "CentOS_CentOS-6")
| Panel | ||||||
|---|---|---|---|---|---|---|
| ||||||
# wget http://download.opensuse.org/repositories/security://shibboleth/CentOS_CentOS-6/security:shibboleth.repo |
Add the downloaded repository file to yum.
(File name is modified since using colon in the file name is not my preference^^)
| Panel | ||||||
|---|---|---|---|---|---|---|
| ||||||
# cp security\:shibboleth.repo /etc/yum.repos.d/shibboleth.repo |
3.2. Install
| Info |
|---|
WS Participants If you are installing the software from /root/source directory by using rpm command, skip these steps and go straight to section 3.3 . |
In order to install the shibboleth SP, just type the following command.
| Panel | ||||||
|---|---|---|---|---|---|---|
| ||||||
# yum install shibboleth |
Following packages will also be installed additionally (This is an example in case of prepared Virtual Box image 2014-01-07).
| Panel | ||||||
|---|---|---|---|---|---|---|
| ||||||
================================================================================ |
3.3. httpd Setting
Setup ServerName in /etc/httpd/conf.d/ssl.conf
| Panel | ||||||
|---|---|---|---|---|---|---|
| ||||||
|
4. Start shibd daemon
Start shibd daemon by the following command.
| Panel | ||||||
|---|---|---|---|---|---|---|
| ||||||
# service shibd start |
5. Basic operation of SP
httpd start up:
| Panel | ||||||
|---|---|---|---|---|---|---|
| ||||||
# service httpd start |
shibd start up:
| Panel | ||||||
|---|---|---|---|---|---|---|
| ||||||
# service shibd start |
httpd termination
| Panel | ||||||
|---|---|---|---|---|---|---|
| ||||||
# service httpd stop |
shibd termination
| Panel | ||||||
|---|---|---|---|---|---|---|
| ||||||
# service shibd stop |
httpd restart (stop→start)
| Panel | ||||||
|---|---|---|---|---|---|---|
| ||||||
# service httpd restart |
shibd restart (stop→start)
| Panel | ||||||
|---|---|---|---|---|---|---|
| ||||||
# service shibd restart |
| Info |
|---|
| In addition to shibd, httpd is also include SP configuration file (shibboleth2.xml), therefore, please restart httpd when you modify the SP configuration. Shibboleth module (mod_shib) which is involved in the httpd, will include shibboleth2.xml. |
Proceed to next step for configuration of SP