Open Source identity authorization and management solution, providing Single Sign On (SSO)

learn more… | top users | synonyms

0
votes
1answer
54 views

Why shibboleth IdP idp-metadata.xml recommends 8443 for SOAP?

After the install.sh of 2.4.0 Shibboleth Identity Server, the idp-metadata.xml file is created. Why is that? Is not enough secure to use the standard HTTPS/443 port? <ArtifactResolutionService ...
0
votes
0answers
7 views

Shibboleth resolve attributes from the same database where the (JAAS) authentication?

Is it possible to limit the attribute resolution to the database where the UsernamePassword/JAAS happened somehow? Thanks, Tamas
1
vote
1answer
79 views

Advantage Integrating Shibboleth With ADFS

Can someone explain what the advantage of integrating Shibboleth with Microsoft ADFS is? I have been researching both products and it seems like they have similar offerings. There are many articles ...
1
vote
1answer
18 views

.htaccess AuthType not what I expected

I'm working on a new project at work in PhP, and have come across something I'm unfamiliar with/can't find any help with. In the .htaccess file for the directory I see AuthType UWNetID require ...
0
votes
0answers
59 views

adfs subdomain without prefix

I'm working at a company with an Active Directory installation. We have a Top level Domain with logins and a Sub-Domain, for customers, with more logins. We have setup Shibboleth as a service provider ...
0
votes
1answer
79 views

Upgrade Shibboleth to newest version on Ubuntu

I have an Ubuntu (12.04.4 LTS) web server running Shibboleth 2.4.3 I think Shibboleth was installed using apt-get dpkg --get-selections | grep shib libapache2-mod-shib2 install libshibsp5 ...
1
vote
0answers
15 views

Is there any tutorials for setting up Shibboleth on IIS 7 with multiple Service Providers (SP's)? [closed]

Working with Shibboleth.... Got stuck on attempting to setup multiple Service Providers (SP's) on a single IIS 7 instance. I can get the '/secure' portion to work and authenticate just fine, but ...
1
vote
0answers
97 views

Shibboleth Authentication to AD failed with error “file not found”

I am new to Shibboleth and try to configure authentication between ADFS and Shibboleth. The users are stored in AD. I've already connected ADFS and Shibboleth and able to see the login page, after ...
0
votes
0answers
55 views

override apache setting with LocationMatch

I'm trying to disable ShibRequireSession for a specific path using apache <VirtualHost *:80> ServerName www.test.com DocumentRoot /var/www <Directory "/var/www"> ...
0
votes
1answer
43 views

Is there a way to configure shibboleth on tomcat without having to use httpd apache?

I have working setup of shibboleth configured via httpd apache and then pass it on to tomcat. Now is it possible to get rid of httpd portion alone and have tomcat handle shibboleth authentication by ...
0
votes
0answers
74 views

Apache server working but can't navigate to website

I am very confused by this. I will give a brief explanation of what has happened and where it went wrong, hopefully someone will know the answer. The server is hosted on a virtual machine, which I am ...
0
votes
1answer
454 views

Logging X-Forwarded-For IP in Shibboleth's Audit Logs

This is a follow up from my earlier question on capturing the X-Forwarded-For IP address in across multiple proxies. Now, I'm looking to capture the Client's IP in the application's (Shibboleth's IdP) ...
0
votes
1answer
192 views

apache, shibboleth, load balancing alias, ssl

Good morning folks Could you give me a bit of help with the following problem ? I have a dns load balancing mechanism and an alias (hostAlias) which may point to host01, or host02 I want to ...
4
votes
1answer
289 views

Intranet corporate SSO for webapps against Active Directory

I am trying to plan and implement a SSO solution in a corporate environment that serves intranet web applications running on CentOS: Corporate portal (Drupal backend) Project management ...
0
votes
1answer
207 views

Shibboleth + IIS and Pound Reverse Proxy

Having a bit of a problem getting Shibboleth (SSO) working with ADFS and Pound. The main problem seems to be that: The website address will be https://website.domain.com Pound will then terminate ...
0
votes
1answer
133 views

Shibboleth SP, IIS

I have a Shibboleth SP instance on Server 2008 R2 and everything is authenticating fine with the IdP. I was testing protecting a single page and that is working fine by doing the following in the ...
2
votes
1answer
471 views

Shibboleth, IIS 7.5, Tomcat

I am trying to set up Shibboleth SP on a Server 2008 R2/ IIS 7.5 machine. IIS throws the following error when browsing to localhost: HTTP Error 500.0 - Internal Server Error Calling LoadLibraryEx on ...
0
votes
3answers
766 views

Purpose of the x509 certificate in metadata files on the IdP side (SSO structure)

In order to implement SSO, I have been working with some IdP and a Shibboleth SP install without being able to answer this question. On the IdP side I have a few metadata files that describes some ...
0
votes
0answers
196 views

Shibboleth IDP setup, strange general error message on shibboleth status page, no error in logs, logs included, can anyone review and advise

I have used this source: https://www.switch.ch/aai/docs/shibboleth/SWITCH/2.3/idp/install-idp-2.3-debian.html in the light of info from shibboleth manual for installation of shibboleth IDP on debian ...
0
votes
1answer
377 views

Shibboleth-Idp setup: Issue with the data-connectors in attribute-resolver.xml

I have setup the shibboleth-Idp as servelet in servelet container tomcat6. However, tomcat start the servelet fails to load. My data connectors are causing it. The code I am using for connectors is ...
2
votes
1answer
448 views

Apache2/Shibboleth TCP connections stuck in CLOSE_WAIT

I run an Apache2 server which uses the Shibboleth daemon (shibd) as federated authentication module. Certain server connections using Shibboleth seem to stick permanently in CLOSE_WAIT state. tcp ...
1
vote
0answers
690 views

Shibboleth SP doesn't redirect, no IdP authentication - Error 403.14 w/ IIS 7.5

I'm trying to get a test server setup as a Shibboleth SP using IIS 7.5 and I'm stuck. I'm using the https://idp.testshib.org/idp/shibboleth IdP but it never asks for credentials or redirects to the ...
0
votes
2answers
335 views

Enable Shibboleth for Single SSL Virtual host on server with many vhosts

We have a RHEL 5.5 server in production with a few NameBasedVirtual hosts listening on port 80. We have also have two (possibly mis-configured) SSL virtual hosts which use different Sockets as ...
0
votes
0answers
484 views

shibboleth: tomcat failing to start IdP listener

I have installed a Shibboleth Identity Provider as per http://www.edugate.ie/workshop-guides/shibboleth-2-identity-provider-installation-linux-debian-or-ubuntu However, testing only gave me a 404 ...
2
votes
1answer
382 views

Shibboleth: found encrypted assertions, but no CredentialResolver was available

I've gotten a Shibboleth Server Provider (SP) up and running, and I'm using the TestShib Identity Provider (IdP) for testing. The configuration appears to be all correct, and when I requested my ...
0
votes
1answer
335 views

Setting up Shibboleth to secure part of a website

I've installed the Shibboleth module for apache on Ubuntu 10.04 using aptitude to install libapache2-mod-shib2 as per ...
1
vote
1answer
392 views

Custom Web Form for Shibboleth login

I recently deployed a server and website that authenticates with my university's Shibboleth authentication system. Functionally, it works great. Aesthetically, there is much When you go to the ...
7
votes
2answers
1k views

Is it possible to use Shibboleth 2 with Nginx + Passenger?

Do you know if it is possible to use Nginx with Shibboleth?
9
votes
4answers
5k views

Good Shibboleth tutorials out there?

I am looking into using Shibboleth for authentication of webapplications at my organisation. I am very new to this subject and would like to read through some good tutorials, hands-on-lessons or ...
0
votes
1answer
948 views

Forward Shibboleth Environment Variables to Tomcat via Apache

I am using Shibbolethv2.3 with Apache web server and Tomcat application server. I am using Apache as a reverse proxy using mod_proxy.so. I am not able to forward the Shibboleth environment variables ...