Hi Documentation is updated. Thanks for spotting this.
Oli ------ Oliver Wulff Blog: http://owulff.blogspot.com Solution Architect http://coders.talend.com Talend Application Integration Division http://www.talend.com ________________________________________ From: Rajeev Parekh [[email protected]] Sent: 17 September 2014 18:37 To: [email protected] Subject: Re: Configuration Issue with FEDIZ Colm: Thank you for the tip, that was the problem, Ioannis had suggested the same to me. I think the basic configuration listed on http://cxf.apache.org/fediz-configuration.html is misleading (wrong issuer and no realm) and should be updated, it currently reads: |<?||xml| |version="1.0" encoding="UTF-8" standalone="yes"?>| |<||FedizConfig||>| |||<||contextConfig| |name="/fedizhelloworld">| | ..| |||<||protocol| |xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" <http://www.w3.org/2001/XMLSchema-instance%22> xsi:type="federationProtocolType" version="1.2">| |||<||issuer||>https://localhost:9443/fediz-idp/</||issuer||>| |||</||protocol||>| |||</||contextConfig||>| |</||FedizConfig||> should be <?xml version="1.0" encoding="UTF-8" standalone="yes"?> <FedizConfig> <contextConfig name="/fedizhelloworld"> .. <protocol xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:type="federationProtocolType" version="1.2"> <issuer>https://localhost:9443/fediz-idp/federation</issuer> <realm>urn:org:apache:cxf:fediz:fedizhelloworld</realm> </protocol> </contextConfig> </FedizConfig> | Many Thanks On 9/17/2014 9:27 AM, Colm O hEigeartaigh wrote: > Hi, > > The problem appears to be that the IdP URL is misconfigured - the value for > the "issuer" URL in the "fediz_config.xml" you are using should be " > https://localhost:9443/fediz-idp/federation" and not " > https://localhost:9443/fediz-idp". > > Colm. > > On Mon, Sep 15, 2014 at 7:00 PM, Rajeev Parekh <[email protected] >> wrote: >> Hello >> >> I am a newbie to both CXF and FEDIZ, I wanted to install and configure the >> basic test case with one IDP, STS & one RP. here is what I have so far: >> >> * The default IDP & STS wars deployed and configured in one tomcat >> instance running on https/9443 for REALM A as explained in the config doc >> * The FEDIZ HelloWorld RP deployed in a separate TOMCAT instance available >> on https/8443 >> * The default trust keystores available to both the IDP/STS and RP >> instances >> >> Here is the problem I am facing: >> * Access the RP: https://localhost:8443/fedizhelloworld/secure/fedservlet >> * Redirected to https://localhost:9443/fediz-idp/?wa=wsignin1.0&wreply= >> https://localhost:8443/fedizhelloworld/secure/fedservlet&wtrealm=https:// >> localhost:8443/fedizhelloworld/&wct=2014-09-15T17:25:48.112Z >> >> ** NOW The IDP does not redirect to Login, but instead just displays the >> IDP index.html >> >> Can you please guide me to the required config so as to get the basic flow >> working. I am attaching the config files from the IDP side >> >> Thanks In Advance >> >> >> >> >> >> >> >
