Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [shibboleth]

Open Source identity authorization and management solution, providing Single Sign On (SSO)

Shibboleth is an identity solution for Single Sign On (SSO) authentication. It began as an Internet2 Middleware activity in 2000.

73 questions
2
votes
1 answer

Shibboleth - opensaml::FatalProfileException

I have configured and installed shibboleth Idp and sp on a Ubuntu machine locally. The Idp is configured with LDAP. I am trying to access the secure.html file which hosted in Apache and secured by shibboleth sp, So when I try to access the page it…
Edison
  • 21
  • 1
  • 3
2
votes
1 answer

Forward Shibboleth Environment Variables to Tomcat via Apache

I am using Shibbolethv2.3 with Apache web server and Tomcat application server. I am using Apache as a reverse proxy using mod_proxy.so. I am not able to forward the Shibboleth environment variables from Apache to Tomcat. I am able to forward the…
dsr
  • 141
  • 2
  • 5
2
votes
2 answers

Apache2/Shibboleth TCP connections stuck in CLOSE_WAIT

I run an Apache2 server which uses the Shibboleth daemon (shibd) as federated authentication module. Certain server connections using Shibboleth seem to stick permanently in CLOSE_WAIT state. tcp 38 0 blah.blah:57346 shib.server.:8443…
RJT
  • 21
  • 1
1
vote
0 answers

Upgrading Ubuntu 14.04 hosts to support Shibboleth SP 3

I've inherited a few Ubuntu 14.04 hosts which are configured with Shibboleth auth through Apache. They run rails/apache. The installed packages(1) on these hosts is libapache2-mod-shib2 along with a few files(2) under /etc/shibboleth which look…
Server Fault
  • 3,714
  • 12
  • 54
  • 89
1
vote
0 answers

Shibboleth: add IDP and SP entityID to attribute value

I have an attribute value (identifier) that looks like following: 5678 I would like to add entityID of both IDP and the recipient SP to get the (targeted) attribute value: idp-entity-id!sp-entity-id!5678 I tried using…
Art
  • 123
  • 7
1
vote
1 answer

Shibboleth SP 2 and ADFS sha1 to sha256

With shibboleth SP 2, I need to configure ADFS (as IdP) in advance tab SHA-1 algorithm to work fine. If I configure in ADFS SHA-256 hash algorithm, I get an error in ADFS event log, that SP reponses with SHA-1 algorithm. My stack OpenSSH,…
Mr_Thorynque
  • 141
  • 6
1
vote
1 answer

Reverse Proxy for Shibboleth not sending request POST

I am trying to send the POST request that is sent from Authenticating shibboleth back to my web server, but I am only getting a GET request. When this GET request is proxied to my web server's callback, it only gets a "hello" which we set. What I…
leo
  • 11
  • 2
1
vote
1 answer

Shibboleth return url does not work over subdirectory?

We are trying to install Shibboleth for the first time and we got everything working perfectly when applying single sign for a website over a top level domain, but not under a sub directory. Here is our Apache virtual host config file which works…
John
  • 7,343
  • 23
  • 63
  • 87
1
vote
2 answers

Moving SSL cert to the edge breaks Shibboleth

We are converting a system we inherited: two web servers running IIS and Shibboleth, behind a load balancing server running HAPROXY. SSL certs are installed on each web server, and HAPROXY is configured as passthrough. We want to replace the…
biscuit314
  • 113
  • 9
1
vote
0 answers

Shibboleth not setting REMOTE_USER

I'm relatively new to Shibboleth but I can't seem to get past the issue of communicating the REMOTE_USER to my application. My stack is shibd 2.5.3 and Apache 2.4.18 feeding into a Gunicorn server over a unix socket. I have the following in my…
dfitzgerald
  • 111
  • 3
1
vote
1 answer

Does Shibboleth IdP 3 automatically echo relay state by default?

Maybe this is a dumb question, but I can't find any anything about this in the documentation or elsewhere. According to the SAML spec, I know that the IdP is supposed to echo back the relay state received from the SP's authn request. Since that…
SpasemanSpiph
  • 11
  • 2
1
vote
0 answers

Install Shibboleth on IIS with multiple sites

I'm installing shibboleth2, version 2.6.0.1 64 bit on a Windows 2008 Server. I've installed it at the server level and I have multiple sites hosted and are currently running. I've had one install fail, where the ISAPI filter was automatically…
Josh Robinson
  • 111
  • 2
1
vote
1 answer

Skipping unmapped SAML 2.0 attribute, even though name and nameFormat match

SP running Shibboleth 2.5.6. For one particular IdP, I have these attribute mappings:
bishop
  • 1,086
  • 10
  • 16
1
vote
1 answer

Shibd not receiving proper POST request

I'm attempting to use mod_shib to provide with SSO for an application that is running in a tomcat container. There's an Apache server, running as a reverse proxy, in front of the Tomcat container. I set up mod_shib with the following proprities in…
Flo
  • 173
  • 1
  • 3
  • 11
1
vote
1 answer

How to Uninstall Shibbolet 2.5 from Windows 10 and Windows Server 2012

I'm attempting to uninstall shibboleth-sp-2.5.6.0-win64.msi from my Windows 10 PC.(I have the same problem on Windows Server 2012). It gets stuck with the following message: Please wait while the Setup Wizard removes Shibboleth Service…
Geoffrey McGrath
  • 180
  • 10
1
2
3 4 5