shibboleth

Fedoit - Change Log

Changes to Fedoit Repository

06-Nov-2009, added Shibboleth-SP packages:

  • log4shib-1.0.3-2.2
  • opensaml-2.3-1.1
  • shibboleth-2.3-2.1
  • xerces-c-3.0.1-6.1
  • xml-security-c-1.5.1-4.1
  • xmltooling-1.3-1.1

15-Oct-2009, updated:

  • apr-1.3.9-1
  • apr-util-1.3.9-1
  • httpd-2.2.13-1
  • mysql-5.1.37-1
  • subversion-1.6.5-1

Fedoit - LAMP packages for RHEL

Too Long; Didn't Read Summary

  • skip to The Repository section below, and follow those instructions to
  • install the fedoit.repo config, and
  • the fedora-epel.repo config
  • then run 'yum update'

Purpose

Shibboleth - Attributes Provided by NCSU IdP

Attribute ID SAML1 / SAML2 Names Description Example Value
eduPersonPrincipalName urn:mace:dir:attribute-def:eduPersonPrincipalName
urn:oid:1.3.6.1.4.1.5923.1.1.1.6
unityid@ncsu.edu jqpublic@ncsu.edu
campusPermanentId (none)
1.3.6.1.4.1.32548.1.1.2
campus id number @ncsu.edu 001234567@ncsu.edu
eduPersonTargetedID

Notes - Adding InCommon to our IdP

0. Setup

We have a running IdP that was previously setup to use the UNC Federation for metadata. Our IdP is running the 2.0 version of Shibboleth, on a linux-based (RHEL5) VM server. We have Shib configured to run under Apache Tomcat with all public-facing connections proxied through an Apache Httpd.

Our goal was to add the InCommon federation to be able to run in parallel on the same IdP.

Shibboleth - Overview

The Shibboleth System is a standards based, open source software package for web single sign-on across or within organizational boundaries. It allows sites to make informed authorization decisions for individual access of protected online resources in a privacy-preserving manner. (ref: http://shibboleth.internet2.edu/)