ページ履歴

# service tomcat6 stop
# chkconfig tomcat6 off

# cd /root
# tar cfv shibidp-v2-backup.tar /opt/shibboleth-idp

# cd /root/PKG
# mkdir /usr/java
# tar zxv -C /usr/java -f apache-tomcat-7.?.??.tar.gz
# ln -s /usr/java/apache-tomcat-7.?.?? /usr/java/tomcat

# /etc/profile
JAVA_HOME=/usr/lib/jvm/jre
MANPATH=$MANPATH:$JAVA_HOME/man
CATALINA_HOME=/usr/java/tomcat
CATALINA_BASE=$CATALINA_HOME
PATH=$JAVA_HOME/bin:$CATALINA_HOME/bin:$CATALINA_HOME/bin:$PATH
export PATH JAVA_HOME CATALINA_HOME

# System wide environment and startup programs, for login setup

#
# List of providers and their preference orders (see above):
#
security.provider.1=sun.security.provider.Sun
（省略）
security.provider.8=org.jcp.xml.dsig.internal.dom.XMLDSigRI
security.provider.9=sun.security.smartcardio.SunPCSC
# the NSS security provider was not enabled for this build; it can be enabled
# if NSS (libnss3) is available on the machine. The nss.cfg file may need
# editing to reflect the location of the NSS installation.
#security.provider.10=sun.security.pkcs11.SunPKCS11 ${java.home}/lib/security/nss.cfg
security.provider.11=edu.internet2.middleware.shibboleth.DelegateToApplicationProvider

<!--
<Connector port="8080" protocol="HTTP/1.1"
connectionTimeout="20000"
redirectPort="8443" />
-->

<Connector port="8009" protocol="AJP/1.3" redirectPort="8443"
enableLookups="false" tomcatAuthentication="false" address="127.0.0.1" maxPostSize="100000" />

# cd /root/PKG
# unzip shibboleth-identity-provider-3.?.?.zip
# cd shibboleth-identity-provider-3.?.?
# ./bin/install.sh

Installation Directory: [/opt/shibboleth-idp]
[Enter]　←入力なし

A V2 Installation has been detected. Configuration will be preserved into
.v2 folders and appropriate files copied forward.

Hostname: [ex-idp-test**.gakunin.nii.ac.jp]
[Enter]　←入力なし
SAML EntityID: [https://ex-idp-test**.gakunin.nii.ac.jp/idp/shibboleth]
[Enter]　←入力なし
Attribute Scope: [gakunin.nii.ac.jp]
nii.ac.jp[Enter]

Cookie Encryption Key Password: cookiepass[Enter]　←任意のパスワード
Re-enter password: cookiepass[Enter]　←任意のパスワード
Warning: /opt/shibboleth-idp/dist does not exist.
（省略）
Rebuilding /opt/shibboleth-idp/war/idp.war ...
...done

BUILD SUCCESSFUL

## Connection properties ##
#idp.authn.LDAP.ldapURL = ldap://localhost:10389
idp.authn.LDAP.ldapURL = ldap://localhost
#idp#idp.authn.LDAP.useStartTLS = true
idp.authn.LDAP.useStartTLS = false
（省略）
#idp.authn.LDAP.baseDN                           = ou=people,dc=example,dc=org
idp.authn.LDAP.baseDN 　　　　　　　　　　　　 = o=test_o,dc=ac,c=JP
#idp.authn.LDAP.subtreeSearch 　　　　　　 = false
idp.authn.LDAP.subtreeSearch 　　　　　　　 = true
（省略）
#idp.authn.LDAP.bindDN                           = uid=myservice,ou=system
idp.authn.LDAP.bindDN 　　　　　　　　　　　　 = cn=olmgr,o=test_o,dc=ac,c=JP
#idp.authn.LDAPLDAP.bindDNCredential           = myServicePassword
idp.authn.LDAP.bindDNCredential 　　　　　 = csildap

# service tomcat7 stop
# service httpd restart
# service tomcat7 start