Mark,
1. Shibboleth.sso is the default - this will not change unless you have
multiple applications protected by Shibboleth.
2. The parts of the path are scheme + vhost + "/Shibboleth.sso" +
Location
3. vhost will come from the configured virtual host in your Apache
config (i.e. site-enabled/<mySite.conf>)
4. Scheme should be self explanatory i.e. https
5. The last part is the tricky one as it depends on what version of
Shibboleth SP you are running and how you have configured things.
6. Location is defined in the shibboleth2.xml in the
shibboleth/etc/shibboleth directory (For Shib 2 upwards), however the Login
location is not generally defined (I just define locations for Metadata, Status
and Session for debugging purposes but do not run them in production). It will
appear in the "metadata" that is distributed to the members of the federation
who will use this information to know where to access various parts of the
Shibboleth system as they authenticate users.
The simplest thing to do is assume the defaults e.g.
https://mysite.org/Shibboleth.sso/Login so the only information you need is the
virtual host configured in the Apache config to be protected by Shibboleth.
If this does not work "out of the box" then you will need someone who
knows Shib unfortunately.
Regards,
Ben
------------------------------------------------------------------
Dr Ben Ryan
Jorum Technical Coordinator (Services)
5.13 Roscoe Building
The University of Manchester
Oxford Road
Manchester
M13 9PL
Tel: 0161 275 0632
E-mail: [email protected]
------------------------------------------------------------------
-----Original Message-----
From: Mark H. Wood [mailto:[email protected]]
Sent: 11 June 2013 14:05
To: [email protected]
Subject: Re: [Dspace-tech] lazysession.loginurl?
On Mon, Jun 10, 2013 at 06:39:54PM +0000, Pottinger, Hardy J. wrote:
> To anyone following along, Ben Ryan's description below is spot-on. It
> would be worth copying part of his message into the documentation. If
> I feel sufficiently full of pique, I might do so myself, though my day
> is pretty full of distractions already... I won't be offended if
> someone beats me to it.
OK, I may be dense this week, but I'm still uncertain. This is a good
explanation of how Shibboleth lazy login works, but I still don't see the one
thing that a DSpace installer wants to know:
What is the algorithm for calculating the proper value for
lazysession.loginurl, at my site, from my site's Apache configuration
(which may be different from yours and everyone else's) and my site's
Shibboleth configuration (which also may be different from yours and
everyone else's)? What files do I need to read, what values should
I look for, and how do I combine them to yield this local-path that
DSpace wants?
The answer to that question would be proper documentation for this feature of
DSpace.
--
Mark H. Wood, Lead System Programmer [email protected]
Machines should not be friendly. Machines should be obedient.
------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:
Build for Windows Store.
http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
DSpace-tech mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspace-tech
List Etiquette: https://wiki.duraspace.org/display/DSPACE/Mailing+List+Etiquette
