EOX GitLab Instance

Skip to content
Snippets Groups Projects
Commit c87648a0 authored by Lubomir Dolezal's avatar Lubomir Dolezal
Browse files

use http internally for handler, overwrite shib.conf completely, do not validate metadata

parent 0a384d51
No related branches found
No related tags found
2 merge requests!36Staging to master to prepare 1.0.0 release,!34Shib auth
ServerName shib.pdas.prism.eox.at
LoadModule mod_shib /usr/lib64/shibboleth/mod_shib_24.so
ShibCompatValidUser Off
UseCanonicalName On
<Location />
SetHandler shib
</Location>
<Location /secure>
AuthType shibboleth
ShibRequestSetting requireSession 1
require shib-session
</Location>
ServerName shib.pdas.prism.eox.at
<VirtualHost *:80>
ServerName https://shib.pdas.prism.eox.at:443
UseCanonicalName On
DocumentRoot "/var/www/html"
<Location />
AuthType shibboleth
ShibRequestSetting requireSession 1
require shib-session
</Location>
<Location /Shibboleth.sso>
Satisfy Any
Allow from all
</Location>
</VirtualHost>
\ No newline at end of file
......@@ -4,22 +4,22 @@
xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
clockSkew="180">
<ApplicationDefaults entityID="https://pass.copernicus.eu"
<ApplicationDefaults entityID="https://shib.pdas.prism.eox.at/shibboleth"
REMOTE_USER="eppn uid persistent-id targeted-id">
<Sessions lifetime="28800" timeout="3600" relayState="ss:mem"
checkAddress="false" handlerSSL="true" cookieProps="https">
checkAddress="false" handlerSSL="false" cookieProps="http">
<SSO entityID="https://samltest.id/saml/idp">
SAML2 SAML1
SAML2
</SSO>
<Logout>SAML2 Local</Logout>
<Handler type="MetadataGenerator" Location="/Metadata" signing="false"/>
<Handler type="Status" Location="/Status" acl="10.0.0.0/24 127.0.0.1 ::1"/>
<Handler type="Status" Location="/Status" acl="127.0.0.1 ::1"/>
<Handler type="Session" Location="/Session" showAttributeValues="false"/>
<Handler type="DiscoveryFeed" Location="/DiscoFeed"/>
</Sessions>
<Errors supportContact="admin@eox.at"
helpLocation="/about.html"/>
<MetadataProvider type="XML" validate="true" path="idp-metadata.xml"/>
<MetadataProvider type="XML" validate="false" path="idp-metadata.xml"/>
<AttributeExtractor type="XML" validate="true" reloadChanges="false" path="attribute-map.xml"/>
<AttributeResolver type="Query" subjectMatch="true"/>
<AttributeFilter type="XML" validate="true" path="attribute-policy.xml"/>
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment