Versions Compared

Old Version 98

changes.mady.by.user Hong Ye

Saved on

compared with

New Version 99

changes.mady.by.user Hong Ye

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleVerify the Configuration

Go to your SP installation directory(default C:\opt\shibboleth-sp), cd to /sbin64 or /sbin directory as appropriate to your 64-bit or 32-bit system. Running the code below from the command line:

 

Code Block
languagetext
shibd.exe -check
If the last line of the output is the following message, everything is as expected:
"overall configuration is loadable, check console for non-fatal problems"

If there is error, check log for detail. All the log files are in SP installation directory\var\log\shibboleth

Expand
titleInstall X509 Certificate

As Shibboleth requires a certificate and key to encrypt and decrypt attribute assertions, an X509 certificate must be installed for it to work. Now that the shibboleth2.xml file has been updated, use the keygen.bat command in C:\opt\shibboleth-sp\etc\shibboleth to create new certificates with the hostname(server name) and your SP entityID. Use the following format:

Code Block
languagetext
keygen.bat -h idmwebserver.cit.cornell.edu -e SP's entityID -y number of years to issue

where the values for each are substituted accordingly

Code Block
titleExample
keygen.bat -h idmwebserver.cit.cornell.edu -e shibtestsites.cit.cornell.edu -y 10

The 10 indicates the number of years for which the certificate is issued. You may specify a different value.

Info

Whenever you make changes to SP's configuration file, save the file. You can wait for the Shibboleth Daemon to pick up the changes or you can restart the Shibboleth Daemon to make the changes take effect right away. Some changes may require IIS restart.

...