>>> On 25/04/2008 at 09:55, in message
<[log in to unmask]>, Pete Lettin
<[log in to unmask]> wrote:
> I am currently installing a test shibboleth server and would like to know
> if there are any definitive guides/howtos for authenticating against AD.
>
> I have searched this list and what I found was useful but I'm still unsure.
Using LDAP against AD should be as straightforward as against any other LDAP source. I would go for getting tomcat to do the authentication that way you get a full customisable/brandable web page. There are instructions on how to do this on the I2 site, its also been discussed here in the past when I was trying to get it sorted (see the jiscmail archives)
>
> Most of what I found on the web refers to running the idp on a Windows
> server, I'm using Debian Linux.
As Shib is Java it shouldn't make much difference.
>
> Although I can't currently test it as I still need a certificate. I'm
> waiting for JANET Server Certificate Services application to pass through
> the red tape here. Anyone know of a free one I can use for testing?
You could try against TestShib, they generate the certificates for you, but if I were you I'd get your SCS cert join the federation and test against target.iay.org.uk, it's terrific for telling you what you're actually delivering in all kinds of attributes not just the standard ones. I went through getting another SCS certificate on Tuesday as I've changed the IdP name, it arrived within the day. You can register your IdP at [log in to unmask] and it will propagate in the metadata for the next day, so you'd be best doing that right now (I don't see you there already). Instructions are on the uk fed site or if you want I can send you the email I sent and you can just cut and paste out all the dundee.ac.uk bits!
HTH
Cheers
Andy
--
*********
Andy Swiffin
Senior Network Specialist, Corporate Information systems
Information & Communications Services (ICS)
University of Dundee, Computing Centre, Park Place, Dundee, DD1 4HN
Direct: 01382 388000 (Service Desk)
Visit our website at: www.dundee.ac.uk/ics
*********
The University of Dundee is a registered Scottish charity, No: SC015096
|