Generating Shibboleth SP Metadata - metadata

I'm trying to configure Shibboleth SSO on an application that runs locally (on localhost).
I've followed all the instructions and configured my shibboleth2.xml file, but I'm having troubles when the following link accessed http://127.0.0.1:8080/Shibboleth.sso/Metadata or http://127.0.0.1/Shibboleth.sso/Metadata
I've also tried http://127.0.0.1/MyAppName/Shibboleth.sso/Metadata , but didn't work either!
Am I missing something? Can anyone help me solve this?
Thanks.

Did u tried the below URL ?
https://localhost/Shibboleth.sso/Metadata (remember it is case sensitive)
If you are using a IIS 7, IIS 6 Management Compatibility should be installed on IIS 7.x since the Shibboleth installer package uses those management interfaces. The IIS 6 Management Compatibility option can be installed from Administrative Tools > Server Manager > Web Server (IIS) > Role Services.
For a detailed setup instructions, you can look into this post.

Similar symptom here due to the request being proxied to the actual service (gitlab). Solution:
<Location /Shibboleth.sso>
ProxyPass !
SetHandler shib
</Location>
See Shibboleth documentation for details.

Related

Too many redirects issue in local host (IIS,ColdFusion 2018)

I am setting up ColdFusion 2018 Application server with IIS 10. But getting too many redirects issue.
I have tried from square one.. Below are the things I did.
Installed CF 2018 developer
Configure IIS (Windows 10) with CF 2018 using wsconfig.
Created a simple “index.cfm” and tried to access. This page contains just cfset and cfoutput.
got 404 error.
updated “enable 32-bit applications” to false in IIS application pool
404 error resolved, but getting “Too Many redirects issue”
enabled developer tools in IE and checked.
getting 302 status code and it seems index.cfm is redirecting to itself.
Not sure what to do now? Is there anything I missed in setting up IIS with CF 2018 server?
You can resolve this error by making sure that the two required components of IIS are installed on your system. Namely:
ISAPI Extensions
IIS Metabase and IIS 6 configuration compatibility.
First, start the program called Windows Features. You will find Windows Features under Control Panel –> Programs and Features.
When the Windows Features starts, navigate through the features hierarchy under Internet Information Services and select the two features:
(a) ISAPI extensions and
(b) IIS Metabase and IIS 6 configuration compatibility.
Configuring IIS for ColdFusion:
You will have to run the Web Server Configuration Tool that comes with ColdFusion to configure IIS so that all .CFM files are mapped to be handled by ColdFusion.
The following text is directly from the ColdFusion installation guide:
1)Start the Web Server Configuration Tool by selecting Start > Programs > Adobe > ColdFusion 9 > Web Server Configuration Tool.
2)Click Add.
3)In the Server pop-up menu, select the host name and the server or cluster name to configure. In the ColdFusion server configuration, the server name is always coldfusion. Clustering support is not available on the server configuration.
Note: The server or cluster does not have to reside on the web server computer.
4)In the Web Server Properties area, select IIS and specify the website. For IIS, you typically specify All.
5)Select the Configure web server for ColdFusion applications option, and click OK.
Note: Omitting the previous step causes your web server to serve ColdFusion source code.
6)Copy the CFIDE and cfdocs directories from cf_root/wwwroot to your web server root directory. In addition, copy your application’s CFM pages from cf_root/wwwroot to your web server root directory. In the multiserver configuration, these files are under the jrun_root/servers/cfusion/cfusion-ear/cfusion-war directory.
if you face too many redirects then just enable 32-bit applications to true.
refer this link:
https://community.adobe.com/t5/coldfusion/strange-iis-redirect-issues-leads-to-jakarta-isapi-redirect-dll/td-p/4239297?page=1

Proxy Configuration for Liferay Portal CE 7

I have a question about the proxy configuration for Liferay Portal 7 CE. I have searched for quite a while, but haven’t found anything really helpful on the subject. There is already a question here on stackoverflow related to Liferay’s proxy configuration in Wildfly, but it has not been answered yet: Proxy Settings Wildfly
We use a squid proxy server for internet access (no authentication, just a proxy port and a host for HTTP and HTTPs). I would like to run Liferay portal on my local machine and therefore need to tell the portal to use the proxy for web access.
How do I do this? Do I make changes to
a) Liferay’s configuration files (i.e., the portal-ext.properties, I guess) or do I change
b) the configuration files of the application server, on which the portal is running on, or
c) change the configuration for the portlets (e.g. for the marketplace portlet)?
What options would I have to set in the respective configuration files?
Best regards,
Felix
Proxy configuration is splitted in two configuration files: system-ext.properties and portal-ext.properties.
In system-ext.properties you have to configure the proxy environment configuration settings that affects to whole JVM process:
http.proxyHost=192.168.0.200
http.proxyPort=4480
You have to create system-ext.properties file inside webapps/ROOT/WEB-INF/classes. (inside Liferay application classloader)
You have more information about system-ext proxy settings in following link: https://docs.liferay.com/portal/7.0/propertiesdoc/system.properties.html#HTTP
In portal-ext.properties you have to configure the proxy environment configuration settings that affects only to Liferay portal:
com.liferay.portal.util.HttpImpl.proxy.username=
com.liferay.portal.util.HttpImpl.proxy.password=
You have more information about portal-ext proxy settings in following link: https://docs.liferay.com/portal/7.0/propertiesdoc/portal.properties.html#HTTP
If your proxy has no authentication, only system-ext.properties settings are necessary

SSO jbpm 6.2 via CAS server 4.0.0?

I want to use SSO jbpm 6.2 via CAS server 4.0.0 (and cas is running on tomcat) but i don't know how to do it. I searched on google but i can't find how to config wildfly of jbpm 6.2 with CAS server.
Please help me, thank you for your help !
I have no expirience with CAS but this tutorial helped me set up jbpm 6.1 with WSO2 Identity Manager.
http://riyazmsm.blogspot.mx/2014/05/jbpm-60-sso-integration-with-wso2.html
It might not be the same but this can put you on the right track since CAS can also handle SAML. Wildfly uses picketlink to handle security federation, reading the docs will be helpful on your journey.

MonoX cms installation process

Hi: I need help regarding monox installation process . i followed the user manual but unable to install the portal. if any one have idea kindly guide me through installation of monox. Thanks in advance.
You don't have MonoX installation problem but issue with IIS and ASP.NET as ASP.NET it's not registered inside the IIS.
You can register ASP.NET in IIS manually by following instructions from the following link or you can use Web Platform Installer where you need to search for 'register' and you will get the two packages listed named Execute ASP.NET IIS Registration Tool and you should install both of them.
After you install and register the ASP.NET in IIS you should restart the IIS Manager and IIS and try again.

Using Eclipse Update Sites after SSL redirect

Recently I've set up the ClearCase Remote Client (an eclipse plugin) to work through SSL, so instead of an http URL, it follows an https URL.
However, this breaks the access to the Update Site, returning an error that the site has a "Premature End of File" error.
My question(s) are this...
Is there a problem with Eclipse accessing Update Sites that have been reached through a redirect rule?
or
Is there a problem accessing Eclipse Update Sites through a SSL connection?
Any tips or anecdotes would be awesome!
EDIT : The link works via the browser, in terms of a redirect, but not in Eclipse when I attempt to access the same directory via the Update Site tool.
It seems to be a known issue for other plugins as well
What is the "description site" looks like in your eclipse p2 configuration ? Does it include https as in:
<description url="https://<host_name>/<update_site>/">
Project Update Site
</description>
Just do be sure, you did Enable HTTP proxy connection ?
(General->Network Connections)
Although VonC made a really valiant effort, my answer or workaround has been to configure RWP to use SSL for the CCRC Server, and simple Port 80 for the Update Site with a redirect for any users who are still pointing at the old URL.
I am still unsure why it doesn't work in Eclipse with SSL though.