meatwiki メンテナンスのお知らせ

システムメンテナンスのため、12/1(水) 12:00-13:00 のうち10分程度、本Wikiをご利用いただけません。ご不便をおかけいたしますが、ご理解の程、よろしくお願いいたします。
Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 14 Next »

Shibboleth Configuration

Please read the bottom description denoted by † first, then modify each configuration file.

  • Shibboleth Setting
    1. relying-party.xml
      Major Configuration: entityID, automatic metadata download.
    2. handler.xml
      Major Configuration: Method for login.
      →Modify the "Type" to be "UsernamePassword" and then just refer to login.config
    3. login.config
      Major Configuration: LDAP configuration for authentication.
      (ldapURL,baseDn, userFilter,subtreeSearch,SSL)
    4. attribute-resolver.xml
      Major Configuration: Principle definition of attribute and its resolution, which is obtained from LDAP
      Original source of attribute (LDAP,ComputedID etc.)
    5. attribute-filter.xml
      Major Configuration: Selection of attributes to be sent to each SP.
    6. IdP Metadata Preparataion


†  If you modify each setting file, please restart the tomcat and then check the following log file.

  • /opt/shibboleth-idp/logs/idp-process.log
    Main log of the IdP action. Error and warning of the IdP action is noted in this log file. You need to check this log first when you have an problem with IdP action.
  • /opt/shibboleth-idp/logs/idp-access.log
    Access log of the IdP. This log includes access time and access source to the IdP.

    requestTime | remoteHost | serverHost|serverPort | requestPath
  • /opt/shibboleth-idp/logs/idp-audit.log
    Message log from IdP to SP. This log includes the information such as time, corresponding ID, attributes and so on.

    auditEventTime | requestBinding | requestId | relyingPartyId | messageProfileId |
    assertingPartyId | responseBinding | responseId | principalName | authNMethod |
    releasedAttributeId1,releasedAttributeId2, | nameIdentifier | assertion1ID,assertion2ID, |

  Setting of these log files are described in /opt/shibboleth-idp/conf/logging.xml

  • No labels