Shibboleth Developers

["Scott Cantor" <>]

> We are looking at providing Shibboleth authentication to our clustered
> Blackboard (VLE) service.

If your Blackboard is already clustered, then it must be providing sessions
already. It makes no sense to hassle with the SP's own sessions and cluster
those, which isn't even a reliable feature until 2.0. So you use it to get
you in the front door, use a small amount of stickiness up front to handle
the initial POST and redirect, then get the Blackboard session set up and
then ignore the Shibboleth session from then on.

> Does anyone have experience of running a resilient production SP on
Solaris?

J-STOR uses it, I know that. I don't know if Spencer is on -dev. This is a
-user list question I would say.
 
> And does the SP have to reside on each resource server, or could it be run
> on separate servers (clustered, on Linux even)?

The SP runs on the web server where the protected resource is hosted.
Period. If that's ten web servers, it's on those ten servers.

-- Scott