Módosítások

HREF Key Rollover 2020

1 952 bájt hozzáadva, 2021. április 13., 10:06
Shibboleth Identity Provider beállítások
== Shibboleth Identity Provider beállítások ==
==== Shibboleth 3.X =XML ===
==== Shibboleth 4.X ====
<syntaxhighlight lang="xml"><MetadataProvider id="RemoteMetadataAggregate" xsi:type="FileBackedHTTPMetadataProvider" backingFile="%{idp.home}/metadata/href-2020.xml" metadataURL= XML "http://metadata.eduid.hu/2020/href.xml">  <MetadataFilter xsi:type="SignatureValidation" requireSignedRoot="true" certificateFile="%{idp.home}/conf/metadata/href-metadata-signer-2020.crt"/> <MetadataFilter xsi:type="RequiredValidUntil" maxValidityInterval="P9D"/> <MetadataFilter xsi:type="EntityRoleWhiteList"> <RetainedRole>md:SPSSODescriptor</RetainedRole> </MetadataFilter> </MetadataProvider></syntaxhighlight> ==== Shibboleth 3.X ====
<syntaxhighlight lang="xml">
backingFile="%{idp.home}/metadata/href-2020.xml"
metadataURL="http://metadata.eduid.hu/2020/href.xml">
<MetadataFilter xsi:type="SignatureValidation" requireSignedRoot="true"
certificateFile="%{idp.home}/conf/metadata/href-metadata-signer-2020.crt"/>
</MetadataFilter>
</MetadataProvider>
</syntaxhighlight>
 
=== MDX ===
 
==== Shibboleth 4.X ====
 
<syntaxhighlight lang="xml">
<MetadataProvider id="DynamicEntityMetadata" xsi:type="DynamicHTTPMetadataProvider"
connectionRequestTimeout="PT2S"
connectionTimeout="PT2S"
socketTimeout="PT4S">
 
<MetadataFilter xsi:type="SignatureValidation" requireSignedRoot="true"
certificateFile="%{idp.home}/credentials/href-metadata-signer-2020.crt"/>
 
<MetadataFilter xsi:type="RequiredValidUntil" maxValidityInterval="P9D"/>
 
<MetadataQueryProtocol>https://mdx-2020.eduid.hu/</MetadataQueryProtocol>
</MetadataProvider>
</syntaxhighlight>
 
==== Shibboleth 3.X ====
 
<syntaxhighlight lang="xml">
<MetadataProvider id="DynamicEntityMetadata" xsi:type="DynamicHTTPMetadataProvider"
connectionRequestTimeout="PT2S"
connectionTimeout="PT2S"
socketTimeout="PT4S">
 
<MetadataFilter xsi:type="SignatureValidation" requireSignedRoot="true"
certificateFile="%{idp.home}/credentials/href-metadata-signer-2020.crt"/>
 
<MetadataFilter xsi:type="RequiredValidUntil" maxValidityInterval="P9D"/>
 
<MetadataQueryProtocol>https://mdx-2020.eduid.hu/</MetadataQueryProtocol>
</MetadataProvider>
</syntaxhighlight>

Navigációs menü