shibboleth

リポジトリ取得

> wget http://download.opensuse.org/repositories/security://shibboleth/CentOS_5/security:shibboleth.repo
> sudo cp security\:shibboleth.repo /etc/yum.repos.d/shibboleth.repo

GPG鍵取得

> wget http://shibboleth.internet2.edu/downloads/KEYS
> gpg --import KEYS; gpg --fingerprint 0x7D0A1B3D
> sudo rpm --import KEYS

shibboleth インストール

> sudo yum install shibboleth
Dependencies Resolved

=============================================================================
 Package                 Arch       Version          Repository        Size
=============================================================================
Installing:
 shibboleth              i386       2.3.1-1.3        security_shibboleth  1.2 M
Installing for dependencies:
 log4shib                i386       1.0.4-1.3        security_shibboleth   82 k
 opensaml                i386       2.3-1.9          security_shibboleth  1.2 M
 unixODBC                i386       2.2.11-7.1       base              832 k
 xerces-c                i386       3.0.1-6.3        security_shibboleth  1.3 M
 xml-security-c          i386       1.5.1-4.3        security_shibboleth  447 k
 xmltooling              i386       1.3.3-1.2        security_shibboleth  747 k

Transaction Summary
=============================================================================
Install      7 Package(s)
Update       0 Package(s)
Remove       0 Package(s)

Total download size: 5.7 M
Is this ok [y/N]: y

shibdの起動と,apacheへの適用

(基本的に再起動するのみ)

> /sbin/service shibd start
> /sbin/service httpd restart

アサーション署名用のSelfSign証明書,鍵の準備

  openssl req -new -keyout credentials/sp-key.pem -newkey rsa:1024 -nodes 
  	      -out /etc/shibboleth/credentials/sp-cert.p10 
              -subj "/C=JP/O=ABC/OU=XYZ/OU=sp/CN=xxx.xxx.xx.xx"

  openssl x509 -req -in credentials/sp-cert.p10 -signkey credentials/sp-key.pem 
              -days 3650 -out /etc/shibboleth/sp-cert.pem

メタデータの取得

> wget --no-proxy http://localhost/shib/Metadata



---
update at 2018/03/02 22:04:51

※注:当サイトは特定環境において確認できた事象のみを記述しています。他の環境での動作は一切保証しません。