code.grnet.gr Git - pithos/blob - gss/external-services/shibboleth/shibboleth.xml

   1 <SPConfig
   2         clockSkew="180"
   3         logger="/opt/shibboleth-1.3/etc/shibboleth/shibboleth.logger"
   4         xmlns="urn:mace:shibboleth:target:config:1.0"
   5         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
   6         xsi:schemaLocation="urn:mace:shibboleth:target:config:1.0 /opt/shibboleth-1.3/share/xml/shibboleth/shibboleth-targetconfig-1.0.xsd">
   7
   8     <Extensions>
   9         <Library
  10         fatal="true"
  11         path="/opt/shibboleth-1.3/libexec/xmlproviders.so"></Library>
  12     </Extensions>
  13
  14     <Global
  15         logger="/opt/shibboleth-1.3/etc/shibboleth/shibd.logger">
  16         <UnixListener
  17         address="/opt/shibboleth-1.3/var/run/shib-shar.sock"></UnixListener>
  18         <MemorySessionCache
  19         AAConnectTimeout="15"
  20         AATimeout="30"
  21         cacheTimeout="3600"
  22         cleanupInterval="300"
  23         defaultLifetime="1800"
  24         propagateErrors="true"
  25         retryInterval="300"
  26         strictValidity="false"></MemorySessionCache>
  27     </Global>
  28
  29     <Local
  30         localRelayState="true"
  31         logger="/opt/shibboleth-1.3/etc/shibboleth/native.logger">
  32
  33         <RequestMapProvider
  34         type="edu.internet2.middleware.shibboleth.sp.provider.NativeRequestMapProvider">
  35             <RequestMap
  36         applicationId="default">
  37                 <Host
  38         name="gss.grnet.gr">
  39                     <Path
  40         authType="shibboleth"
  41         name="secure"
  42         requireSession="true"></Path>
  43                 </Host>
  44             </RequestMap>
  45         </RequestMapProvider>
  46
  47     </Local>
  48
  49
  50     <Applications
  51         homeURL="http://gss.grnet.gr/gss/"
  52         id="default"
  53         providerId="https://gss.grnet.gr/shibboleth"
  54         xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
  55         xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion">
  56
  57         <Sessions
  58         checkAddress="false"
  59         consistentAddress="true"
  60         handlerSSL="false"
  61         handlerURL="/Shibboleth.sso"
  62         idpHistory="true"
  63         idpHistoryDays="7"
  64         lifetime="7200"
  65         timeout="3600">
  66
  67
  68
  69             <SessionInitiator
  70         Binding="urn:mace:shibboleth:sp:1.3:SessionInit"
  71         Location="/WAYF/GRnet"
  72         id="GRnet"
  73         isDefault="true"
  74         wayfBinding="urn:mace:shibboleth:1.0:profiles:AuthnRequest"
  75         wayfURL="https://wayf.grnet.gr/shibboleth-wayf/WAYF"></SessionInitiator>
  76
  77             <md:AssertionConsumerService
  78         Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"
  79         Location="/SAML/POST"
  80         index="1"
  81         isDefault="true"></md:AssertionConsumerService>
  82             <md:AssertionConsumerService
  83         Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"
  84         Location="/SAML/Artifact"
  85         index="2"></md:AssertionConsumerService>
  86
  87             <md:SingleLogoutService
  88         Binding="urn:mace:shibboleth:sp:1.3:Logout"
  89         ResponseLocation="http://gss.grnet.gr/gss/logout.html"
  90         Location="/Logout"></md:SingleLogoutService>
  91         </Sessions>
  92
  93
  94         <Errors
  95         access="/opt/shibboleth-1.3/etc/shibboleth/accessError.html"
  96         logoLocation="/shibboleth-sp/logo.jpg"
  97         metadata="/opt/shibboleth-1.3/etc/shibboleth/metadataError.html"
  98         rm="/opt/shibboleth-1.3/etc/shibboleth/rmError.html"
  99         session="/opt/shibboleth-1.3/etc/shibboleth/sessionError.html"
 100         ssl="/opt/shibboleth-1.3/etc/shibboleth/sslError.html"
 101         styleSheet="/shibboleth-sp/main.css"
 102         supportContact="past@ebs.gr"></Errors>
 103
 104         <CredentialUse
 105         Signing="defcreds"
 106         TLS="defcreds"></CredentialUse>
 107
 108         <AAPProvider
 109         type="edu.internet2.middleware.shibboleth.aap.provider.XMLAAP"
 110         uri="/opt/shibboleth-1.3/etc/shibboleth/AAP.xml"></AAPProvider>
 111
 112
 113         <MetadataProvider
 114         type="edu.internet2.middleware.shibboleth.metadata.provider.XMLMetadata"
 115         uri="/opt/shibboleth-1.3/etc/shibboleth/gss-metadata.xml"></MetadataProvider>
 116
 117         <TrustProvider
 118         type="edu.internet2.middleware.shibboleth.common.provider.ShibbolethTrust"></TrustProvider>
 119
 120     </Applications>
 121
 122
 123     <CredentialsProvider
 124         type="edu.internet2.middleware.shibboleth.common.Credentials">
 125         <Credentials
 126         xmlns="urn:mace:shibboleth:credentials:1.0">
 127             <FileResolver
 128         Id="defcreds">
 129                 <Key>
 130                     <Path>/opt/shibboleth-1.3/etc/shibboleth/gss.grnet.gr.key</Path>
 131                 </Key>
 132                 <Certificate>
 133                     <Path>/opt/shibboleth-1.3/etc/shibboleth/gss.grnet.gr.crt</Path>
 134                 </Certificate>
 135             </FileResolver>
 136         </Credentials>
 137     </CredentialsProvider>
 138
 139     <AttributeFactory
 140         AttributeName="urn:oid:1.3.6.1.4.1.5923.1.1.1.10"
 141         type="edu.internet2.middleware.shibboleth.common.provider.TargetedIDFactory"></AttributeFactory>
 142
 143 </SPConfig>