| 1 | |
| 2 | == Install Shibboleth == |
| 3 | |
| 4 | Since grinnell doesn't have access to any repositories with the Shibboleth RPMs, I manually downloaded the RPMs from here: http://download.opensuse.org/repositories/security://shibboleth/RHEL_6/x86_64/. |
| 5 | |
| 6 | libcurl-openssl-7.30.0-1.1.el6.x86_64.rpm |
| 7 | |
| 8 | liblog4shib1-1.0.6-1.1.el6.x86_64.rpm |
| 9 | |
| 10 | libsaml8-2.5.2-1.1.el6.x86_64.rpm |
| 11 | |
| 12 | libxerces-c-3_1-3.1.1-2.4.el6.x86_64.rpm |
| 13 | |
| 14 | libxml-security-c17-1.7.0-1.3.el6.x86_64.rpm |
| 15 | |
| 16 | libxmltooling6-1.5.2-1.1.el6.x86_64.rpm |
| 17 | |
| 18 | opensaml-schemas-2.5.2-1.1.el6.x86_64.rpm |
| 19 | |
| 20 | shibboleth-2.5.1-1.2.el6.x86_64.rpm |
| 21 | |
| 22 | xmltooling-schemas-1.5.2-1.1.el6.x86_64.rpm |
| 23 | |
| 24 | |
| 25 | Note that unixODBC was a dependency that I installed via yum. It had another dependency that was installed automatically. |
| 26 | |
| 27 | {{{ |
| 28 | [root@grinnell tmp]# yum install unixODBC |
| 29 | Loaded plugins: product-id, rhnplugin, security, subscription-manager |
| 30 | This system is not registered to Red Hat Subscription Management. You can use subscription-manager to reg ister. |
| 31 | This system is receiving updates from RHN Classic or RHN Satellite. |
| 32 | Setting up Install Process |
| 33 | Resolving Dependencies |
| 34 | --> Running transaction check |
| 35 | ---> Package unixODBC.x86_64 0:2.2.14-12.el6_3 will be installed |
| 36 | --> Processing Dependency: libltdl.so.7()(64bit) for package: unixODBC-2.2.14-12.el6_3.x86_64 |
| 37 | --> Running transaction check |
| 38 | ---> Package libtool-ltdl.x86_64 0:2.2.6-15.5.el6 will be installed |
| 39 | --> Finished Dependency Resolution |
| 40 | |
| 41 | Dependencies Resolved |
| 42 | |
| 43 | ========================================================================================================= |
| 44 | Package Arch Version Repository Size |
| 45 | ========================================================================================================= |
| 46 | Installing: |
| 47 | unixODBC x86_64 2.2.14-12.el6_3 rhel-x86_64-server-6 378 k |
| 48 | Installing for dependencies: |
| 49 | libtool-ltdl x86_64 2.2.6-15.5.el6 rhel-x86_64-server-6 44 k |
| 50 | |
| 51 | Transaction Summary |
| 52 | ========================================================================================================= |
| 53 | Install 2 Package(s) |
| 54 | |
| 55 | Total download size: 422 k |
| 56 | Installed size: 0 |
| 57 | Is this ok [y/N]: y |
| 58 | Downloading Packages: |
| 59 | (1/2): libtool-ltdl-2.2.6-15.5.el6.x86_64.rpm | 44 kB 00:00 |
| 60 | (2/2): unixODBC-2.2.14-12.el6_3.x86_64.rpm | 378 kB 00:00 |
| 61 | ---------------------------------------------------------------------------------------------------------------------------- |
| 62 | Total 1.9 MB/s | 422 kB 00:00 |
| 63 | Running rpm_check_debug |
| 64 | Running Transaction Test |
| 65 | Transaction Test Succeeded |
| 66 | Running Transaction |
| 67 | Installing : libtool-ltdl-2.2.6-15.5.el6.x86_64 1/2 |
| 68 | Installing : unixODBC-2.2.14-12.el6_3.x86_64 2/2 |
| 69 | Verifying : unixODBC-2.2.14-12.el6_3.x86_64 1/2 |
| 70 | Verifying : libtool-ltdl-2.2.6-15.5.el6.x86_64 2/2 |
| 71 | |
| 72 | Installed: |
| 73 | unixODBC.x86_64 0:2.2.14-12.el6_3 |
| 74 | |
| 75 | Dependency Installed: |
| 76 | libtool-ltdl.x86_64 0:2.2.6-15.5.el6 |
| 77 | |
| 78 | Complete! |
| 79 | [root@grinnell tmp]# |
| 80 | [root@grinnell tmp]# |
| 81 | [root@grinnell tmp]# |
| 82 | [root@grinnell tmp]# |
| 83 | [root@grinnell tmp]# rpm -iv libcurl-openssl-7.30.0-1.1.el6.x86_64.rpm liblog4shib1-1.0.6-1.1.el6.x86_64.rpm libsaml8-2.5.2-1.1.el6.x86_64.rpm libxerces-c-3_1-3.1.1-2.4.el6.x86_64.rpm libxml-security-c17-1.7.0-1.3.el6.x86_64.rpm libxmltooling6-1.5.2-1.1.el6.x86_64.rpm opensaml-schemas-2.5.2-1.1.el6.x86_64.rpm shibboleth-2.5.1-1.2.el6.x86_64.rpm xmltooling-schemas-1.5.2-1.1.el6.x86_64.rpm |
| 84 | warning: libcurl-openssl-7.30.0-1.1.el6.x86_64.rpm: Header V3 DSA/SHA1 Signature, key ID 7d0a1b3d: NOKEY |
| 85 | Preparing packages for installation... |
| 86 | libxerces-c-3_1-3.1.1-2.4.el6 |
| 87 | libxml-security-c17-1.7.0-1.3.el6 |
| 88 | liblog4shib1-1.0.6-1.1.el6 |
| 89 | libcurl-openssl-7.30.0-1.1.el6 |
| 90 | libxmltooling6-1.5.2-1.1.el6 |
| 91 | libsaml8-2.5.2-1.1.el6 |
| 92 | xmltooling-schemas-1.5.2-1.1.el6 |
| 93 | opensaml-schemas-2.5.2-1.1.el6 |
| 94 | shibboleth-2.5.1-1.2.el6 |
| 95 | }}} |
| 96 | |
| 97 | == Configure Shibboleth == |
| 98 | |
| 99 | 1. In the /etc/shibboleth/shibboleth2.xml file, set the entityID of the SP: |
| 100 | |
| 101 | {{{ |
| 102 | <!-- The ApplicationDefaults element is where most of Shibboleth's SAML bits are defined. --> |
| 103 | <ApplicationDefaults entityID="https://grinnell.alaska.edu/shibboleth" |
| 104 | }}} |