Shibboleth Developers

[Scott Cantor <>]

> In order to test my localhost installation (origin + target), 
> I should...?
> 
> 1) change the WAYF url to my local HS
> 
> 2) change the shire value to my localhost shire 
> (https://hostname/Shibboleth.shire -- actually, the HOST name with 
> the RequestMap elements for the standard target say Host 
> name="localhost" -- will shib map my real  hostname to localhost, 
> when its mapping thru the requestmap?

Generation of redirects varies by platform. Apache has commands to control
the ServerName and Port, and I added one that allows the scheme to be
overridden for special cases. IIS redirects are based on the ISAPI element I
defined because there is no real API to do it.

The RequestMap isn't used for generating redirects, it's used to process the
incoming request and determine the settings to apply. If the request in uses
a real host name, then you need to correct the map if you want to use any
settings you stick in the map.

In most cases, you want to change all the hostnames wherever they appear,
except in the URIs used purely as identifier strings. It will work in some
cases even if you don't change the hostnames, but that depends a lot on the
test.

> 4) what do I do with the time value?

Doesn't matter, you can leave it off. The origin ignores it anyway, it's
defined for people that want to customize their origins (like me) to detect
stale requests.

> I've installed shib on a  Solaris machine in the IT data center.... 
> can I use a browser on my desktop to do this testing?

Not if you let it generate URLs with localhost in them, obviously. You'll
certainly need to make sure Apache knows what its name and port should be.

-- Scott