SiNotes-Grid

Reference:

http://www.switch.ch/aai/docs/shibboleth/SWITCH/1.3/sp/install-sp-1.3-debian.html

https://authdev.it.ohio-state.edu/twiki/bin/view/Shibboleth/LinuxNotes

N.B. Shibboleth 1.3(sp) require apache2.0.x , compiling error will occur if using apache2.2.x!!!

1)OpenSSL

not needed, just use what comes with your Linux

2)libcurl

(Downloaded from http://curl.haxx.se/libcurl)

usually not needed, or use ./configure --disable-static --without-ca-bundle --enable-thread --prefix=/usr/local/shibboleth-sp

3)log4cpp

(*Must* download from http://shibboleth.internet2.edu/downloads/log4cpp-0.3.5rc1.tar.gz)

./configure --disable-static --disable-doxygen --prefix=/usr/local/shibboleth-sp

4)Xerces-C

(*Must* download from

http://shibboleth.internet2.edu/downloads/xerces-c-src_2_6_1.tar.gz)

(*Must* export XERCESCROOT=/home/synew/download/shibboleth-sp/xerces-c-src_2_6_1)

./runConfigure -p linux -c gcc -x g++ -r pthread -b 32 -P /usr/local/shibboleth-sp

5) XML-Security-C

(*Must* download from

http://xml.apache.org/dist/security/c-library/xml-security-c-1.2.1.tar.gz)

(*Must* export XERCESCROOT=/home/synew/download/shibboleth-sp/xerces-c-src_2_6_1)

./configure --without-xalan --prefix=/usr/local/shibboleth-sp

6)OpenSAML

(*Must* download from

http://shibboleth.internet2.edu/downloads/opensaml-1.1a.tar.gz)

./configure --with-curl=/usr/local/shibboleth-sp --with-log4cpp=/usr/local/shibboleth-sp --prefix=/usr/local/shibboleth-sp -C

7) build shibboleth 1.3:
./configure --with-saml=/usr/local/shibboleth-sp --with-log4cpp=/usr/local/shibboleth-sp --enable-apache-20 --with-apxs2=/usr/local/apache20/bin/apxs --with-apr=/usr/local/apache20/bin/apr-config --prefix=/usr/local/shibboleth-sp -C

#########Post Configuration of SP #################################
Ref:https://authdev.it.ohio-state.edu/twiki/bin/view/Shibboleth/SPApacheConfiguration

Suppose apache2.0.x with mod_ssl is already successfully installed in /usr/local/apache20

1) Add the following line to the end of /usr/local/apache20/conf/httpd.conf(*Not* in any VirtualHost!!):
Include /usr/local/shibboleth-sp/etc/shibboleth/apache2.config

2)In /usr/local/apache20/conf/httpd.conf, set:
UseCanonicalName on
And uncomment ServerName:
ServerName ktang.oerc.ox.ac.uk:8080


3)To start shibboleth daemon,use
/usr/local/shibboleth-sp/sbin/shibd &