Shibboleth Developers

[Steven Carmody <>]

A  new release of the Shibboleth native java SP implementation is now
available for wider testing. Information is available at
http://tpappsrv.its.yale.edu/tp/shibboleth_eclipse.htm . The easiest
way to proceed is  to download the zip file and install that.
However, there are also directions describing how to build this
component from the cvs.

If you encounter problems, post queries to the

 list. Please reports bugs via
http://bugzilla.internet2.edu/; use Component = Service Provider (Java) 
and Version = 1.3.

Notes:

1) This version DOES implement  trust between components.

2) sessions do NOT timeout. While this facilitates debugging, it will
be changed before the formal release.

3) The usr.zip file will produce directories
/usr/local/shibboleth-idp and /usr/local/shibboleth-sp. The two Shib
components are configured via files in these directories.

4) protection is triggered by 1) creating a directory to hold your
resource/servlet, and 2) specifying in the associated web.xml file
that the shib filter should be triggered. Look in
webapps/secure/WEB-INF/web.xml for an example. Once you get past the
trivial usage, please ask questions, and we'll  supply more
information.

5) the zip file uses container-based authn. The
tomcat/conf/tomcat-users file contains entries for larry, moe, and
curly. Change as appropriate. Change to a different authn method as
appropriate.

6) Point your browser at

http://sp.example.org:8080/secure/test.txt

You'll be asked to  authenticate (larry,more, etc), and should then
be redirected to the SP, and presented with the contents of the test
file.