Remove pointless service configurations.

diff --git a/gss/external-services/apache22/apache2.conf b/gss/external-services/apache22/apache2.conf
deleted file mode 100644 (file)
index 03c7f1d..0000000
--- a/gss/external-services/apache22/apache2.conf
+++ /dev/null
@@ -1,281 +0,0 @@
-#
-# Based upon the NCSA server configuration files originally by Rob McCool.
-#
-# This is the main Apache server configuration file.  It contains the
-# configuration directives that give the server its instructions.
-# See http://httpd.apache.org/docs/2.2/ for detailed information about
-# the directives.
-#
-# Do NOT simply read the instructions in here without understanding
-# what they do.  They're here only as hints or reminders.  If you are unsure
-# consult the online docs. You have been warned.  
-#
-# The configuration directives are grouped into three basic sections:
-#  1. Directives that control the operation of the Apache server process as a
-#     whole (the 'global environment').
-#  2. Directives that define the parameters of the 'main' or 'default' server,
-#     which responds to requests that aren't handled by a virtual host.
-#     These directives also provide default values for the settings
-#     of all virtual hosts.
-#  3. Settings for virtual hosts, which allow Web requests to be sent to
-#     different IP addresses or hostnames and have them handled by the
-#     same Apache server process.
-#
-# Configuration and logfile names: If the filenames you specify for many
-# of the server's control files begin with "/" (or "drive:/" for Win32), the
-# server will use that explicit path.  If the filenames do *not* begin
-# with "/", the value of ServerRoot is prepended -- so "/var/log/apache2/foo.log"
-# with ServerRoot set to "" will be interpreted by the
-# server as "//var/log/apache2/foo.log".
-#
-
-### Section 1: Global Environment
-#
-# The directives in this section affect the overall operation of Apache,
-# such as the number of concurrent requests it can handle or where it
-# can find its configuration files.
-#
-
-#
-# ServerRoot: The top of the directory tree under which the server's
-# configuration, error, and log files are kept.
-#
-# NOTE!  If you intend to place this on an NFS (or otherwise network)
-# mounted filesystem then please read the LockFile documentation (available
-# at <URL:http://httpd.apache.org/docs-2.1/mod/mpm_common.html#lockfile>);
-# you will save yourself a lot of trouble.
-#
-# Do NOT add a slash at the end of the directory path.
-#
-ServerRoot "/etc/apache2"
-
-#
-# The accept serialization lock file MUST BE STORED ON A LOCAL DISK.
-#
-#<IfModule !mpm_winnt.c>
-#<IfModule !mpm_netware.c>
-LockFile /var/lock/apache2/accept.lock
-#</IfModule>
-#</IfModule>
-
-#
-# PidFile: The file in which the server should record its process
-# identification number when it starts.
-# This needs to be set in /etc/apache2/envvars
-#
-PidFile ${APACHE_PID_FILE}
-
-#
-# Timeout: The number of seconds before receives and sends time out.
-#
-Timeout 300
-
-#
-# KeepAlive: Whether or not to allow persistent connections (more than
-# one request per connection). Set to "Off" to deactivate.
-#
-KeepAlive On
-
-#
-# MaxKeepAliveRequests: The maximum number of requests to allow
-# during a persistent connection. Set to 0 to allow an unlimited amount.
-# We recommend you leave this number high, for maximum performance.
-#
-MaxKeepAliveRequests 100
-
-#
-# KeepAliveTimeout: Number of seconds to wait for the next request from the
-# same client on the same connection.
-#
-KeepAliveTimeout 15
-
-##
-## Server-Pool Size Regulation (MPM specific)
-## 
-
-# prefork MPM
-# StartServers: number of server processes to start
-# MinSpareServers: minimum number of server processes which are kept spare
-# MaxSpareServers: maximum number of server processes which are kept spare
-# MaxClients: maximum number of server processes allowed to start
-# MaxRequestsPerChild: maximum number of requests a server process serves
-<IfModule mpm_prefork_module>
-    StartServers          5
-    MinSpareServers       5
-    MaxSpareServers      10
-    MaxClients          200
-    MaxRequestsPerChild   0
-</IfModule>
-
-# worker MPM
-# StartServers: initial number of server processes to start
-# MaxClients: maximum number of simultaneous client connections
-# MinSpareThreads: minimum number of worker threads which are kept spare
-# MaxSpareThreads: maximum number of worker threads which are kept spare
-# ThreadsPerChild: constant number of worker threads in each server process
-# MaxRequestsPerChild: maximum number of requests a server process serves
-<IfModule mpm_worker_module>
-    StartServers          2
-    MaxClients          200
-    MinSpareThreads      25
-    MaxSpareThreads      75 
-    ThreadsPerChild      25
-    MaxRequestsPerChild   0
-</IfModule>
-
-# These need to be set in /etc/apache2/envvars
-User ${APACHE_RUN_USER}
-Group ${APACHE_RUN_GROUP}
-
-#
-# AccessFileName: The name of the file to look for in each directory
-# for additional configuration directives.  See also the AllowOverride
-# directive.
-#
-
-AccessFileName .htaccess
-
-#
-# The following lines prevent .htaccess and .htpasswd files from being 
-# viewed by Web clients. 
-#
-<Files ~ "^\.ht">
-    Order allow,deny
-    Deny from all
-</Files>
-
-#
-# DefaultType is the default MIME type the server will use for a document
-# if it cannot otherwise determine one, such as from filename extensions.
-# If your server contains mostly text or HTML documents, "text/plain" is
-# a good value.  If most of your content is binary, such as applications
-# or images, you may want to use "application/octet-stream" instead to
-# keep browsers from trying to display binary files as though they are
-# text.
-#
-DefaultType text/plain
-
-
-#
-# HostnameLookups: Log the names of clients or just their IP addresses
-# e.g., www.apache.org (on) or 204.62.129.132 (off).
-# The default is off because it'd be overall better for the net if people
-# had to knowingly turn this feature on, since enabling it means that
-# each client request will result in AT LEAST one lookup request to the
-# nameserver.
-#
-HostnameLookups Off
-
-# ErrorLog: The location of the error log file.
-# If you do not specify an ErrorLog directive within a <VirtualHost>
-# container, error messages relating to that virtual host will be
-# logged here.  If you *do* define an error logfile for a <VirtualHost>
-# container, that host's errors will be logged there and not here.
-#
-ErrorLog /var/log/apache2/error.log
-
-#
-# LogLevel: Control the number of messages logged to the error_log.
-# Possible values include: debug, info, notice, warn, error, crit,
-# alert, emerg.
-#
-LogLevel warn
-
-# Include module configuration:
-Include /etc/apache2/mods-enabled/*.load
-Include /etc/apache2/mods-enabled/*.conf
-
-# Include all the user configurations:
-Include /etc/apache2/httpd.conf
-
-# Include ports listing
-Include /etc/apache2/ports.conf
-
-#
-# The following directives define some format nicknames for use with
-# a CustomLog directive (see below).
-# If you are behind a reverse proxy, you might want to change %h into %{X-Forwarded-For}i
-#
-LogFormat "%v:%p %h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" vhost_combined
-LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
-LogFormat "%h %l %u %t \"%r\" %>s %b" common
-LogFormat "%{Referer}i -> %U" referer
-LogFormat "%{User-agent}i" agent
-
-#
-# Define an access log for VirtualHosts that don't define their own logfile
-CustomLog /var/log/apache2/other_vhosts_access.log vhost_combined
-
-#
-# Customizable error responses come in three flavors:
-# 1) plain text 2) local redirects 3) external redirects
-#
-# Some examples:
-#ErrorDocument 500 "The server made a boo boo."
-#ErrorDocument 404 /missing.html
-#ErrorDocument 404 "/cgi-bin/missing_handler.pl"
-#ErrorDocument 402 http://www.example.com/subscription_info.html
-#
-
-#
-# Putting this all together, we can internationalize error responses.
-#
-# We use Alias to redirect any /error/HTTP_<error>.html.var response to
-# our collection of by-error message multi-language collections.  We use 
-# includes to substitute the appropriate text.
-#
-# You can modify the messages' appearance without changing any of the
-# default HTTP_<error>.html.var files by adding the line:
-#
-#   Alias /error/include/ "/your/include/path/"
-#
-# which allows you to create your own set of files by starting with the
-# /usr/share/apache2/error/include/ files and copying them to /your/include/path/, 
-# even on a per-VirtualHost basis.  The default include files will display
-# your Apache version number and your ServerAdmin email address regardless
-# of the setting of ServerSignature.
-#
-# The internationalized error documents require mod_alias, mod_include
-# and mod_negotiation.  To activate them, uncomment the following 30 lines.
-
-#    Alias /error/ "/usr/share/apache2/error/"
-#
-#    <Directory "/usr/share/apache2/error">
-#        AllowOverride None
-#        Options IncludesNoExec
-#        AddOutputFilter Includes html
-#        AddHandler type-map var
-#        Order allow,deny
-#        Allow from all
-#        LanguagePriority en cs de es fr it nl sv pt-br ro
-#        ForceLanguagePriority Prefer Fallback
-#    </Directory>
-#
-#    ErrorDocument 400 /error/HTTP_BAD_REQUEST.html.var
-#    ErrorDocument 401 /error/HTTP_UNAUTHORIZED.html.var
-#    ErrorDocument 403 /error/HTTP_FORBIDDEN.html.var
-#    ErrorDocument 404 /error/HTTP_NOT_FOUND.html.var
-#    ErrorDocument 405 /error/HTTP_METHOD_NOT_ALLOWED.html.var
-#    ErrorDocument 408 /error/HTTP_REQUEST_TIME_OUT.html.var
-#    ErrorDocument 410 /error/HTTP_GONE.html.var
-#    ErrorDocument 411 /error/HTTP_LENGTH_REQUIRED.html.var
-#    ErrorDocument 412 /error/HTTP_PRECONDITION_FAILED.html.var
-#    ErrorDocument 413 /error/HTTP_REQUEST_ENTITY_TOO_LARGE.html.var
-#    ErrorDocument 414 /error/HTTP_REQUEST_URI_TOO_LARGE.html.var
-#    ErrorDocument 415 /error/HTTP_UNSUPPORTED_MEDIA_TYPE.html.var
-#    ErrorDocument 500 /error/HTTP_INTERNAL_SERVER_ERROR.html.var
-#    ErrorDocument 501 /error/HTTP_NOT_IMPLEMENTED.html.var
-#    ErrorDocument 502 /error/HTTP_BAD_GATEWAY.html.var
-#    ErrorDocument 503 /error/HTTP_SERVICE_UNAVAILABLE.html.var
-#    ErrorDocument 506 /error/HTTP_VARIANT_ALSO_VARIES.html.var
-
-
-
-# Include of directories ignores editors' and dpkg's backup files,
-# see README.Debian for details.
-
-# Include generic snippets of statements
-Include /etc/apache2/conf.d/
-
-# Include the virtual host configurations:
-Include /etc/apache2/sites-enabled/

diff --git a/gss/external-services/apache22/mods-available/jk.conf b/gss/external-services/apache22/mods-available/jk.conf
deleted file mode 100644 (file)
index 4d25f24..0000000
--- a/gss/external-services/apache22/mods-available/jk.conf
+++ /dev/null
@@ -1,21 +0,0 @@
-<IfModule mod_jk.c>
-        JkWorkersFile /etc/libapache2-mod-jk/workers.properties
-               JkLogFile  /var/log/apache2/mod_jk.log
-               JkShmFile  /var/log/apache2/mod_jk.shm
-        JkLogLevel warn
-        JkEnvVar   REMOTE_USER
-        JkEnvVar   HTTP_SHIB_INETORGPERSON_DISPLAYNAME
-        JkEnvVar   HTTP_SHIB_INETORGPERSON_MAIL
-        JkEnvVar   HTTP_SHIB_EP_UNSCOPEDAFFILIATION
-        JkMount /gss/* loadbalancer
-        JkMount /webdav/* loadbalancer
-        JkMount /webdav loadbalancer
-       # Enable the JK manager access only from localhost for debugging purposes
-       <Location /jkmanager/>
-           JkMount jkstatus
-           Order deny,allow
-           Deny from all
-           Allow from 83.171.239.112/255.255.255.248
-           Allow from 83.171.240.73
-       </Location>
-</IfModule>

diff --git a/gss/external-services/apache22/mods-available/jk.load b/gss/external-services/apache22/mods-available/jk.load
deleted file mode 100644 (file)
index 72d17b8..0000000
--- a/gss/external-services/apache22/mods-available/jk.load
+++ /dev/null
@@ -1 +0,0 @@
-LoadModule jk_module /usr/lib/apache2/modules/mod_jk.so

diff --git a/gss/external-services/apache22/mods-available/shib.conf b/gss/external-services/apache22/mods-available/shib.conf
deleted file mode 100644 (file)
index f207561..0000000
--- a/gss/external-services/apache22/mods-available/shib.conf
+++ /dev/null
@@ -1,8 +0,0 @@
-# Global Configuration
-#
-# This is the XML file that contains all the global, non-apache-specific
-# configuration.  Look at this file for most of your configuration
-# parameters.
-
-ShibSchemaDir /usr/share/xml/shibboleth
-ShibConfig /etc/shibboleth/shibboleth.xml

diff --git a/gss/external-services/apache22/mods-available/shib.load b/gss/external-services/apache22/mods-available/shib.load
deleted file mode 100644 (file)
index ae274ea..0000000
--- a/gss/external-services/apache22/mods-available/shib.load
+++ /dev/null
@@ -1 +0,0 @@
-LoadModule mod_shib /usr/lib/apache2/modules/mod_shib_22.so

diff --git a/gss/external-services/apache22/sites-available/gss b/gss/external-services/apache22/sites-available/gss
deleted file mode 100644 (file)
index 896a8d0..0000000
--- a/gss/external-services/apache22/sites-available/gss
+++ /dev/null
@@ -1,100 +0,0 @@
-<VirtualHost *:80>
-       ServerName              gss.grnet.gr
-       ServerAdmin             root@noc.grnet.gr
-       ServerSignature         On
-       RewriteEngine           On
-
-       # Redirect /gss/login and /gss/token to its HTTPS equivalent
-       RewriteRule             ^(/gss/login/?.*)$      https://gss.grnet.gr$1 [R]
-       RewriteRule             ^(/gss/token/?.*)$      https://gss.grnet.gr$1 [R]
-
-       # Redirect /gss to /gss/
-       RewriteRule             ^/gss$                  /gss/ [R]
-
-       # Redirect everything except /gss/* and /webdav/* to /gss/$1
-       RewriteCond             %{REQUEST_URI} !gss
-       RewriteCond             %{REQUEST_URI} !webdav
-       RewriteCond             %{REQUEST_URI} !rest-api-test
-       RewriteCond             %{REQUEST_URI} !shibboleth
-       RewriteCond             %{REQUEST_URI} !shibboleth-sp
-       RewriteCond             %{REQUEST_URI} !Shibboleth.sso
-       RewriteRule             (.*)                    /gss$1 [R]
-
-       DocumentRoot /var/www/
-       <Directory />
-               Options FollowSymLinks
-               AllowOverride None
-       </Directory>
-       <Directory /var/www/>
-               AllowOverride None
-               Order deny,allow
-       </Directory>
-
-       JkMountCopy On
-</VirtualHost>
-
-<VirtualHost *:443>
-       ServerName              gss.grnet.gr
-       ServerAdmin             root@noc.grnet.gr
-       ServerSignature         On
-
-       RewriteEngine           On
-
-       # Redirect everything besides /gss/login/ and /gss/token to plain HTTP  
-       RewriteCond             %{REQUEST_URI} !gss/login
-       RewriteCond             %{REQUEST_URI} !gss/token
-       RewriteCond             %{REQUEST_URI} !shibboleth
-       RewriteCond             %{REQUEST_URI} !shibboleth-sp
-       RewriteCond             %{REQUEST_URI} !Shibboleth.sso
-       RewriteRule             (.*)            http://gss.grnet.gr$1 [R]
-
-       SSLEngine               on
-       SSLCertificateFile      /etc/ssl/certs/gss.grnet.gr.crt
-       SSLCertificateKeyFile   /etc/ssl/private/gss.grnet.gr.key
-       SSLCACertificatePath    /etc/ssl/certs
-
-       AddDefaultCharset       UTF-8
-       IndexOptions            +Charset=UTF-8
-
-       # Shibboleth SP configuration
-       ShibConfig              /etc/shibboleth/shibboleth.xml
-       ShibSchemaDir           /usr/share/xml/shibboleth
-
-       <Files *.sso>
-               SetHandler shib-handler
-       </Files>
-
-       Alias /shibboleth-sp /usr/share/shibboleth
-
-       DocumentRoot /var/www/
-       <Directory />
-               Options FollowSymLinks
-               AllowOverride None
-       </Directory>
-       <Directory /var/www/>
-               AllowOverride None
-               Order deny,allow
-       </Directory>
-#              Options Indexes ExecCGI -MultiViews +SymLinksIfOwnerMatch
-#              AddHandler cgi-script .cgi
-#              AllowOverride All
-#              Order allow,deny
-#              Allow from all
-#
-#              # shibboleth-sp authentication
-#              AuthType shibboleth
-#              ShibRequireSession On
-#              require valid-user
-
-       <Location /gss/login>
-               AuthType shibboleth
-               ShibRequireSession On
-               require valid-user
-       </Location>
-
-       LogLevel warn
-       ErrorLog /var/log/apache2/error.log
-       CustomLog /var/log/apache2/access.log combined
-
-       JkMountCopy On
-</VirtualHost>

diff --git a/gss/external-services/mod_jk/workers.properties b/gss/external-services/mod_jk/workers.properties
deleted file mode 100644 (file)
index 2513679..0000000
--- a/gss/external-services/mod_jk/workers.properties
+++ /dev/null
@@ -1,147 +0,0 @@
-# workers.properties -
-#
-# This file is a simplified version of the workers.properties supplied
-# with the upstream sources. The jni inprocess worker (not build in the
-# debian package) section and the ajp12 (deprecated) section are removed.
-#
-# As a general note, the characters $( and ) are used internally to define
-# macros. Do not use them in your own configuration!!!
-#
-# Whenever you see a set of lines such as:
-# x=value
-# y=$(x)\something
-#
-# the final value for y will be value\something
-#
-# Normaly all you will need to do is un-comment and modify the first three
-# properties, i.e. workers.tomcat_home, workers.java_home and ps.
-# Most of the configuration is derived from these.
-#
-# When you are done updating workers.tomcat_home, workers.java_home and ps
-# you should have 3 workers configured:
-#
-# - An ajp13 worker that connects to localhost:8009
-# - A load balancer worker
-#
-#
-
-# OPTIONS ( very important for jni mode ) 
-
-#
-# workers.tomcat_home should point to the location where you
-# installed tomcat. This is where you have your conf, webapps and lib
-# directories.
-#
-#workers.tomcat_home=/opt/jboss-4.2.3.GA/server/default/deploy/jboss-web.deployer
-
-#
-# workers.java_home should point to your Java installation. Normally
-# you should have a bin and lib directories beneath it.
-#
-workers.java_home=/usr/local/lib/jdk
-
-#
-# You should configure your environment slash... ps=\ on NT and / on UNIX
-# and maybe something different elsewhere.
-#
-ps=/
-
-#
-#------ ADVANCED MODE ------------------------------------------------
-#---------------------------------------------------------------------
-#
-
-#
-#------ worker list ------------------------------------------
-#---------------------------------------------------------------------
-#
-#
-# The workers that your plugins should create and work with
-# 
-worker.list=loadbalancer
-
-#
-#------ ajp13_worker WORKER DEFINITION ------------------------------
-#---------------------------------------------------------------------
-#
-
-# Specifies the load balance factor when used with
-# a load balancing worker.
-# Note:
-#  ----> lbfactor must be > 0
-#  ----> Low lbfactor means less work done by this worker
-worker.template.lbfactor=1
-worker.template.port=8009
-worker.template.type=ajp13
-# After upgrading to mod_jk 1.2.27 uncomment ping_timeout and ping_mode
-# and comment out prepost_timeout and connect_timeout
-#worker.template.ping_timeout=1000
-#worker.template.ping_mode=A
-worker.template.prepost_timeout=1000
-worker.template.connect_timeout=1000
-
-worker.template.socket_timeout=10
-#It is not necessary to specify connection_pool_timeout if you are running the worker mpm 
-worker.template.connection_pool_timeout=600
-
-#
-# Defining a worker named srv-1 and of type ajp13
-# Note that the name and the type do not have to match.
-#
-worker.srv-01.reference=worker.template
-worker.srv-01.host=srv-01.gss.grnet.gr
-#
-
-#
-# Specify the size of the open connection cache.
-#worker.ajp13_worker.cachesize
-
-#
-# Defining the rest of the workers.
-#
-worker.srv-02.reference=worker.template
-worker.srv-02.host=srv-02.gss.grnet.gr
-
-worker.srv-03.reference=worker.template
-worker.srv-03.host=srv-03.gss.grnet.gr
-
-worker.srv-04.reference=worker.template
-worker.srv-04.host=srv-04.gss.grnet.gr
-
-worker.srv-05.reference=worker.template
-worker.srv-05.host=srv-05.gss.grnet.gr
-
-worker.srv-06.reference=worker.template
-worker.srv-06.host=srv-06.gss.grnet.gr
-
-worker.srv-07.reference=worker.template
-worker.srv-07.host=srv-07.gss.grnet.gr
-
-worker.srv-08.reference=worker.template
-worker.srv-08.host=srv-08.gss.grnet.gr
-
-#
-#------ DEFAULT LOAD BALANCER WORKER DEFINITION ----------------------
-#---------------------------------------------------------------------
-#
-
-#
-# The loadbalancer (type lb) workers perform wighted round-robin
-# load balancing with sticky sessions.
-# Note:
-#  ----> If a worker dies, the load balancer will check its state
-#        once in a while. Until then all work is redirected to peer
-#        workers.
-# Load-balancing behaviour
-worker.loadbalancer.type=lb
-#Use line below for single JBoss server
-#worker.loadbalancer.balance_workers=srv-01
-#Comment above and uncomment below for load balancing with all JBoss servers
-worker.loadbalancer.balance_workers=srv-01,srv-02,srv-03,srv-04,srv-05,srv-06,srv-07,srv-08
-worker.loadbalancer.sticky_session=false
-
-# Add the status worker to the worker list
-worker.list=jkstatus
-# Status worker for managing and debugging load balancer
-worker.jkstatus.type=status
-

diff --git a/gss/external-services/postgresql/pg_hba.conf b/gss/external-services/postgresql/pg_hba.conf
deleted file mode 100644 (file)
index 7fb8445..0000000
--- a/gss/external-services/postgresql/pg_hba.conf
+++ /dev/null
@@ -1,85 +0,0 @@
-# PostgreSQL Client Authentication Configuration File
-# ===================================================
-#
-# Refer to the "Client Authentication" section in the
-# PostgreSQL documentation for a complete description
-# of this file.  A short synopsis follows.
-#
-# This file controls: which hosts are allowed to connect, how clients
-# are authenticated, which PostgreSQL user names they can use, which
-# databases they can access.  Records take one of these forms:
-#
-# local      DATABASE  USER  METHOD  [OPTION]
-# host       DATABASE  USER  CIDR-ADDRESS  METHOD  [OPTION]
-# hostssl    DATABASE  USER  CIDR-ADDRESS  METHOD  [OPTION]
-# hostnossl  DATABASE  USER  CIDR-ADDRESS  METHOD  [OPTION]
-#
-# (The uppercase items must be replaced by actual values.)
-#
-# The first field is the connection type: "local" is a Unix-domain socket,
-# "host" is either a plain or SSL-encrypted TCP/IP socket, "hostssl" is an
-# SSL-encrypted TCP/IP socket, and "hostnossl" is a plain TCP/IP socket.
-#
-# DATABASE can be "all", "sameuser", "samerole", a database name, or
-# a comma-separated list thereof.
-#
-# USER can be "all", a user name, a group name prefixed with "+", or
-# a comma-separated list thereof.  In both the DATABASE and USER fields
-# you can also write a file name prefixed with "@" to include names from
-# a separate file.
-#
-# CIDR-ADDRESS specifies the set of hosts the record matches.
-# It is made up of an IP address and a CIDR mask that is an integer
-# (between 0 and 32 (IPv4) or 128 (IPv6) inclusive) that specifies
-# the number of significant bits in the mask.  Alternatively, you can write
-# an IP address and netmask in separate columns to specify the set of hosts.
-#
-# METHOD can be "trust", "reject", "md5", "crypt", "password", "gss", "sspi",
-# "krb5", "ident", "pam" or "ldap".  Note that "password" sends passwords
-# in clear text; "md5" is preferred since it sends encrypted passwords.
-#
-# OPTION is the ident map or the name of the PAM service, depending on METHOD.
-#
-# Database and user names containing spaces, commas, quotes and other special
-# characters must be quoted. Quoting one of the keywords "all", "sameuser" or
-# "samerole" makes the name lose its special character, and just match a
-# database or username with that name.
-#
-# This file is read on server startup and when the postmaster receives
-# a SIGHUP signal.  If you edit the file on a running system, you have
-# to SIGHUP the postmaster for the changes to take effect.  You can use
-# "pg_ctl reload" to do that.
-
-# Put your actual configuration here
-# ----------------------------------
-#
-# If you want to allow non-local connections, you need to add more
-# "host" records. In that case you will also need to make PostgreSQL listen
-# on a non-local interface via the listen_addresses configuration parameter,
-# or via the -i or -h command line switches.
-#
-
-
-
-
-# DO NOT DISABLE!
-# If you change this first entry you will need to make sure that the
-# database
-# super user can access the database using some other method.
-# Noninteractive
-# access to all databases is required during automatic maintenance
-# (autovacuum, daily cronjob, replication, and similar tasks).
-#
-# Database administrative login by UNIX sockets
-local   all         postgres                          ident sameuser
-
-# TYPE  DATABASE    USER        CIDR-ADDRESS          METHOD
-
-# "local" is for Unix domain socket connections only
-local   all         all                               ident sameuser
-# IPv4 local connections:
-host    all         all         127.0.0.1/32          md5
-# IPv6 local connections:
-host    all         all         ::1/128               md5
-
-host    gssdb       gss         83.212.2.0/28          md5

diff --git a/gss/external-services/postgresql/postgresql.conf b/gss/external-services/postgresql/postgresql.conf
deleted file mode 100644 (file)
index 90be567..0000000
--- a/gss/external-services/postgresql/postgresql.conf
+++ /dev/null
@@ -1,493 +0,0 @@
-# -----------------------------
-# PostgreSQL configuration file
-# -----------------------------
-#
-# This file consists of lines of the form:
-#
-#   name = value
-#
-# (The "=" is optional.)  Whitespace may be used.  Comments are introduced with
-# "#" anywhere on a line.  The complete list of parameter names and allowed
-# values can be found in the PostgreSQL documentation.
-#
-# The commented-out settings shown in this file represent the default values.
-# Re-commenting a setting is NOT sufficient to revert it to the default value;
-# you need to reload the server.
-#
-# This file is read on server startup and when the server receives a SIGHUP
-# signal.  If you edit the file on a running system, you have to SIGHUP the
-# server for the changes to take effect, or use "pg_ctl reload".  Some
-# parameters, which are marked below, require a server shutdown and restart to
-# take effect.
-#
-# Any parameter can also be given as a command-line option to the server, e.g.,
-# "postgres -c log_connections=on".  Some paramters can be changed at run time
-# with the "SET" SQL command.
-#
-# Memory units:  kB = kilobytes MB = megabytes GB = gigabytes
-# Time units:    ms = milliseconds s = seconds min = minutes h = hours d = days
-
-
-#------------------------------------------------------------------------------
-# FILE LOCATIONS
-#------------------------------------------------------------------------------
-
-# The default values of these variables are driven from the -D command-line
-# option or PGDATA environment variable, represented here as ConfigDir.
-
-data_directory = '/mnt/dbvol/db'               # use data in another directory
-                                       # (change requires restart)
-hba_file = '/etc/postgresql/8.3/main/pg_hba.conf'      # host-based authentication file
-                                       # (change requires restart)
-ident_file = '/etc/postgresql/8.3/main/pg_ident.conf'  # ident configuration file
-                                       # (change requires restart)
-
-# If external_pid_file is not explicitly set, no extra PID file is written.
-external_pid_file = '/var/run/postgresql/8.3-main.pid'         # write an extra PID file
-                                       # (change requires restart)
-
-
-#------------------------------------------------------------------------------
-# CONNECTIONS AND AUTHENTICATION
-#------------------------------------------------------------------------------
-
-# - Connection Settings -
-
-listen_addresses = 'srv-10.gss.grnet.gr'               # what IP address(es) to listen on;
-                                       # comma-separated list of addresses;
-                                       # defaults to 'localhost', '*' = all
-                                       # (change requires restart)
-port = 5432                            # (change requires restart)
-max_connections = 100                  # (change requires restart)
-# Note:  Increasing max_connections costs ~400 bytes of shared memory per 
-# connection slot, plus lock space (see max_locks_per_transaction).  You might
-# also need to raise shared_buffers to support more connections.
-#superuser_reserved_connections = 3    # (change requires restart)
-unix_socket_directory = '/var/run/postgresql'          # (change requires restart)
-#unix_socket_group = ''                        # (change requires restart)
-#unix_socket_permissions = 0777                # begin with 0 to use octal notation
-                                       # (change requires restart)
-#bonjour_name = ''                     # defaults to the computer name
-                                       # (change requires restart)
-
-# - Security and Authentication -
-
-#authentication_timeout = 1min         # 1s-600s
-#ssl = off                             # (change requires restart)
-#ssl_ciphers = 'ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH'     # allowed SSL ciphers
-                                       # (change requires restart)
-#password_encryption = on
-#db_user_namespace = off
-
-# Kerberos and GSSAPI
-#krb_server_keyfile = ''               # (change requires restart)
-#krb_srvname = 'postgres'              # (change requires restart, Kerberos only)
-#krb_server_hostname = ''              # empty string matches any keytab entry
-                                       # (change requires restart, Kerberos only)
-#krb_caseins_users = off               # (change requires restart)
-#krb_realm = ''                        # (change requires restart)
-
-# - TCP Keepalives -
-# see "man 7 tcp" for details
-
-#tcp_keepalives_idle = 0               # TCP_KEEPIDLE, in seconds;
-                                       # 0 selects the system default
-#tcp_keepalives_interval = 0           # TCP_KEEPINTVL, in seconds;
-                                       # 0 selects the system default
-#tcp_keepalives_count = 0              # TCP_KEEPCNT;
-                                       # 0 selects the system default
-
-
-#------------------------------------------------------------------------------
-# RESOURCE USAGE (except WAL)
-#------------------------------------------------------------------------------
-
-# - Memory -
-
-shared_buffers = 24MB                  # min 128kB or max_connections*16kB
-                                       # (change requires restart)
-#temp_buffers = 8MB                    # min 800kB
-#max_prepared_transactions = 5         # can be 0 or more
-                                       # (change requires restart)
-# Note:  Increasing max_prepared_transactions costs ~600 bytes of shared memory
-# per transaction slot, plus lock space (see max_locks_per_transaction).
-#work_mem = 1MB                                # min 64kB
-#maintenance_work_mem = 16MB           # min 1MB
-#max_stack_depth = 2MB                 # min 100kB
-
-# - Free Space Map -
-
-max_fsm_pages = 153600                 # min max_fsm_relations*16, 6 bytes each
-                                       # (change requires restart)
-#max_fsm_relations = 1000              # min 100, ~70 bytes each
-                                       # (change requires restart)
-
-# - Kernel Resource Usage -
-
-#max_files_per_process = 1000          # min 25
-                                       # (change requires restart)
-#shared_preload_libraries = ''         # (change requires restart)
-
-# - Cost-Based Vacuum Delay -
-
-#vacuum_cost_delay = 0                 # 0-1000 milliseconds
-#vacuum_cost_page_hit = 1              # 0-10000 credits
-#vacuum_cost_page_miss = 10            # 0-10000 credits
-#vacuum_cost_page_dirty = 20           # 0-10000 credits
-#vacuum_cost_limit = 200               # 1-10000 credits
-
-# - Background Writer -
-
-#bgwriter_delay = 200ms                        # 10-10000ms between rounds
-#bgwriter_lru_maxpages = 100           # 0-1000 max buffers written/round
-#bgwriter_lru_multiplier = 2.0         # 0-10.0 multipler on buffers scanned/round
-
-
-#------------------------------------------------------------------------------
-# WRITE AHEAD LOG
-#------------------------------------------------------------------------------
-
-# - Settings -
-
-#fsync = on                            # turns forced synchronization on or off
-#synchronous_commit = on               # immediate fsync at commit
-#wal_sync_method = fsync               # the default is the first option 
-                                       # supported by the operating system:
-                                       #   open_datasync
-                                       #   fdatasync
-                                       #   fsync
-                                       #   fsync_writethrough
-                                       #   open_sync
-#full_page_writes = on                 # recover from partial page writes
-#wal_buffers = 64kB                    # min 32kB
-                                       # (change requires restart)
-#wal_writer_delay = 200ms              # 1-10000 milliseconds
-
-#commit_delay = 0                      # range 0-100000, in microseconds
-#commit_siblings = 5                   # range 1-1000
-
-# - Checkpoints -
-
-#checkpoint_segments = 3               # in logfile segments, min 1, 16MB each
-#checkpoint_timeout = 5min             # range 30s-1h
-#checkpoint_completion_target = 0.5    # checkpoint target duration, 0.0 - 1.0
-#checkpoint_warning = 30s              # 0 is off
-
-# - Archiving -
-
-#archive_mode = off            # allows archiving to be done
-                               # (change requires restart)
-#archive_command = ''          # command to use to archive a logfile segment
-#archive_timeout = 0           # force a logfile segment switch after this
-                               # time; 0 is off
-
-
-#------------------------------------------------------------------------------
-# QUERY TUNING
-#------------------------------------------------------------------------------
-
-# - Planner Method Configuration -
-
-#enable_bitmapscan = on
-#enable_hashagg = on
-#enable_hashjoin = on
-#enable_indexscan = on
-#enable_mergejoin = on
-#enable_nestloop = on
-#enable_seqscan = on
-#enable_sort = on
-#enable_tidscan = on
-
-# - Planner Cost Constants -
-
-#seq_page_cost = 1.0                   # measured on an arbitrary scale
-#random_page_cost = 4.0                        # same scale as above
-#cpu_tuple_cost = 0.01                 # same scale as above
-#cpu_index_tuple_cost = 0.005          # same scale as above
-#cpu_operator_cost = 0.0025            # same scale as above
-#effective_cache_size = 128MB
-
-# - Genetic Query Optimizer -
-
-#geqo = on
-#geqo_threshold = 12
-#geqo_effort = 5                       # range 1-10
-#geqo_pool_size = 0                    # selects default based on effort
-#geqo_generations = 0                  # selects default based on effort
-#geqo_selection_bias = 2.0             # range 1.5-2.0
-
-# - Other Planner Options -
-
-#default_statistics_target = 10                # range 1-1000
-#constraint_exclusion = off
-#from_collapse_limit = 8
-#join_collapse_limit = 8               # 1 disables collapsing of explicit 
-                                       # JOIN clauses
-
-
-#------------------------------------------------------------------------------
-# ERROR REPORTING AND LOGGING
-#------------------------------------------------------------------------------
-
-# - Where to Log -
-
-#log_destination = 'stderr'            # Valid values are combinations of
-                                       # stderr, csvlog, syslog and eventlog,
-                                       # depending on platform.  csvlog
-                                       # requires logging_collector to be on.
-
-# This is used when logging to stderr:
-#logging_collector = off               # Enable capturing of stderr and csvlog
-                                       # into log files. Required to be on for
-                                       # csvlogs.
-                                       # (change requires restart)
-
-# These are only used if logging_collector is on:
-#log_directory = 'pg_log'              # directory where log files are written,
-                                       # can be absolute or relative to PGDATA
-#log_filename = 'postgresql-%Y-%m-%d_%H%M%S.log'       # log file name pattern,
-                                       # can include strftime() escapes
-#log_truncate_on_rotation = off                # If on, an existing log file of the
-                                       # same name as the new log file will be
-                                       # truncated rather than appended to.
-                                       # But such truncation only occurs on
-                                       # time-driven rotation, not on restarts
-                                       # or size-driven rotation.  Default is
-                                       # off, meaning append to existing files
-                                       # in all cases.
-#log_rotation_age = 1d                 # Automatic rotation of logfiles will
-                                       # happen after that time.  0 to disable.
-#log_rotation_size = 10MB              # Automatic rotation of logfiles will 
-                                       # happen after that much log output.
-                                       # 0 to disable.
-
-# These are relevant when logging to syslog:
-#syslog_facility = 'LOCAL0'
-#syslog_ident = 'postgres'
-
-
-# - When to Log -
-
-#client_min_messages = notice          # values in order of decreasing detail:
-                                       #   debug5
-                                       #   debug4
-                                       #   debug3
-                                       #   debug2
-                                       #   debug1
-                                       #   log
-                                       #   notice
-                                       #   warning
-                                       #   error
-
-#log_min_messages = notice             # values in order of decreasing detail:
-                                       #   debug5
-                                       #   debug4
-                                       #   debug3
-                                       #   debug2
-                                       #   debug1
-                                       #   info
-                                       #   notice
-                                       #   warning
-                                       #   error
-                                       #   log
-                                       #   fatal
-                                       #   panic
-
-#log_error_verbosity = default         # terse, default, or verbose messages
-
-#log_min_error_statement = error       # values in order of decreasing detail:
-                                       #   debug5
-                                       #   debug4
-                                       #   debug3
-                                       #   debug2
-                                       #   debug1
-                                       #   info
-                                       #   notice
-                                       #   warning
-                                       #   error
-                                       #   log
-                                       #   fatal
-                                       #   panic (effectively off)
-
-#log_min_duration_statement = -1       # -1 is disabled, 0 logs all statements
-                                       # and their durations, > 0 logs only
-                                       # statements running at least this time.
-
-#silent_mode = off                     # DO NOT USE without syslog or
-                                       # logging_collector
-                                       # (change requires restart)
-
-# - What to Log -
-
-#debug_print_parse = off
-#debug_print_rewritten = off
-#debug_print_plan = off
-#debug_pretty_print = off
-#log_checkpoints = off
-#log_connections = off
-#log_disconnections = off
-#log_duration = off
-#log_hostname = off
-log_line_prefix = '%t '                        # special values:
-                                       #   %u = user name
-                                       #   %d = database name
-                                       #   %r = remote host and port
-                                       #   %h = remote host
-                                       #   %p = process ID
-                                       #   %t = timestamp without milliseconds
-                                       #   %m = timestamp with milliseconds
-                                       #   %i = command tag
-                                       #   %c = session ID
-                                       #   %l = session line number
-                                       #   %s = session start timestamp
-                                       #   %v = virtual transaction ID
-                                       #   %x = transaction ID (0 if none)
-                                       #   %q = stop here in non-session
-                                       #        processes
-                                       #   %% = '%'
-                                       # e.g. '<%u%%%d> '
-#log_lock_waits = off                  # log lock waits >= deadlock_timeout
-#log_statement = 'none'                        # none, ddl, mod, all
-#log_temp_files = -1                   # log temporary files equal or larger
-                                       # than specified size;
-                                       # -1 disables, 0 logs all temp files
-#log_timezone = unknown                        # actually, defaults to TZ environment
-                                       # setting
-
-
-#------------------------------------------------------------------------------
-# RUNTIME STATISTICS
-#------------------------------------------------------------------------------
-
-# - Query/Index Statistics Collector -
-
-#track_activities = on
-#track_counts = on
-#update_process_title = on
-
-
-# - Statistics Monitoring -
-
-#log_parser_stats = off
-#log_planner_stats = off
-#log_executor_stats = off
-#log_statement_stats = off
-
-
-#------------------------------------------------------------------------------
-# AUTOVACUUM PARAMETERS
-#------------------------------------------------------------------------------
-
-#autovacuum = on                       # Enable autovacuum subprocess?  'on' 
-                                       # requires track_counts to also be on.
-#log_autovacuum_min_duration = -1      # -1 disables, 0 logs all actions and
-                                       # their durations, > 0 logs only
-                                       # actions running at least that time.
-#autovacuum_max_workers = 3            # max number of autovacuum subprocesses
-#autovacuum_naptime = 1min             # time between autovacuum runs
-#autovacuum_vacuum_threshold = 50      # min number of row updates before
-                                       # vacuum
-#autovacuum_analyze_threshold = 50     # min number of row updates before 
-                                       # analyze
-#autovacuum_vacuum_scale_factor = 0.2  # fraction of table size before vacuum
-#autovacuum_analyze_scale_factor = 0.1 # fraction of table size before analyze
-#autovacuum_freeze_max_age = 200000000 # maximum XID age before forced vacuum
-                                       # (change requires restart)
-#autovacuum_vacuum_cost_delay = 20     # default vacuum cost delay for
-                                       # autovacuum, -1 means use
-                                       # vacuum_cost_delay
-#autovacuum_vacuum_cost_limit = -1     # default vacuum cost limit for
-                                       # autovacuum, -1 means use
-                                       # vacuum_cost_limit
-
-
-#------------------------------------------------------------------------------
-# CLIENT CONNECTION DEFAULTS
-#------------------------------------------------------------------------------
-
-# - Statement Behavior -
-
-#search_path = '"$user",public'                # schema names
-#default_tablespace = ''               # a tablespace name, '' uses the default
-#temp_tablespaces = ''                 # a list of tablespace names, '' uses
-                                       # only default tablespace
-#check_function_bodies = on
-#default_transaction_isolation = 'read committed'
-#default_transaction_read_only = off
-#session_replication_role = 'origin'
-#statement_timeout = 0                 # 0 is disabled
-#vacuum_freeze_min_age = 100000000
-#xmlbinary = 'base64'
-#xmloption = 'content'
-
-# - Locale and Formatting -
-
-datestyle = 'iso, mdy'
-#timezone = unknown                    # actually, defaults to TZ environment
-                                       # setting
-#timezone_abbreviations = 'Default'     # Select the set of available time zone
-                                       # abbreviations.  Currently, there are
-                                       #   Default
-                                       #   Australia
-                                       #   India
-                                       # You can create your own file in
-                                       # share/timezonesets/.
-#extra_float_digits = 0                        # min -15, max 2
-#client_encoding = sql_ascii           # actually, defaults to database
-                                       # encoding
-
-# These settings are initialized by initdb, but they can be changed.
-lc_messages = 'en_US.UTF-8'                    # locale for system error message
-                                       # strings
-lc_monetary = 'en_US.UTF-8'                    # locale for monetary formatting
-lc_numeric = 'en_US.UTF-8'                     # locale for number formatting
-lc_time = 'en_US.UTF-8'                                # locale for time formatting
-
-# default configuration for text search
-default_text_search_config = 'pg_catalog.english'
-
-# - Other Defaults -
-
-#explain_pretty_print = on
-#dynamic_library_path = '$libdir'
-#local_preload_libraries = ''
-
-
-#------------------------------------------------------------------------------
-# LOCK MANAGEMENT
-#------------------------------------------------------------------------------
-
-#deadlock_timeout = 1s
-#max_locks_per_transaction = 64                # min 10
-                                       # (change requires restart)
-# Note:  Each lock table slot uses ~270 bytes of shared memory, and there are
-# max_locks_per_transaction * (max_connections + max_prepared_transactions)
-# lock table slots.
-
-
-#------------------------------------------------------------------------------
-# VERSION/PLATFORM COMPATIBILITY
-#------------------------------------------------------------------------------
-
-# - Previous PostgreSQL Versions -
-
-#add_missing_from = off
-#array_nulls = on
-#backslash_quote = safe_encoding       # on, off, or safe_encoding
-#default_with_oids = off
-#escape_string_warning = on
-#regex_flavor = advanced               # advanced, extended, or basic
-#sql_inheritance = on
-#standard_conforming_strings = off
-#synchronize_seqscans = on
-
-# - Other Platforms and Clients -
-
-#transform_null_equals = off
-
-
-#------------------------------------------------------------------------------
-# CUSTOMIZED OPTIONS
-#------------------------------------------------------------------------------
-
-#custom_variable_classes = ''          # list of custom variable class names

diff --git a/gss/external-services/shibboleth/AAP.xml b/gss/external-services/shibboleth/AAP.xml
deleted file mode 100644 (file)
index 5cb17c9..0000000
--- a/gss/external-services/shibboleth/AAP.xml
+++ /dev/null
@@ -1,312 +0,0 @@
-<AttributeAcceptancePolicy xmlns="urn:mace:shibboleth:1.0"
-    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
-    xsi:schemaLocation="urn:mace:shibboleth:1.0 /opt/shibboleth-1.3/share/xml/shibboleth/shibboleth.xsd">
-
-       <!--
-       An AAP is a set of AttributeRule elements, each one
-       referencing a specific attribute by URI. All attributes that
-       should be visible to an application running at the target should
-       be listed, or they will be filtered out.
-       
-       The Header and Alias attributes map an attribute to an HTTP header
-       and to an htaccess rule name respectively. Without Header, the attribute
-       will only be obtainable from the exported SAML assertion in raw XML.
-       
-       Scoped attributes can also be filtered on Scope via rules in the
-       asserting identity provider's metadata.
-       
-       Finally, a note on naming. The attributes in this file are mostly drawn from
-       the set documented here:
-       
-       http://middleware.internet2.edu/urn-mace/urn-mace-dir-attribute-def.html
-       
-       The     actual naming convention most of them follow is NOT to be used for
-       any subsequent attributes bound to SAML, and you are NOT free to just
-       make up names using it, because the urn:mace:dir namespace tree is
-       controlled. For help and advice on defining new attributes, refer to:
-       
-       https://spaces.internet2.edu/display/SHIB/AttributeNaming
-       -->
-       
-       <!-- First some useful eduPerson attributes that many sites might use. -->
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:eduPersonScopedAffiliation" Scoped="true" CaseSensitive="false" Header="Shib-EP-Affiliation" Alias="affiliation">
-               <!-- Filtering rule to limit values to eduPerson-defined enumeration. -->
-        <AnySite>
-            <Value>MEMBER</Value>
-            <Value>FACULTY</Value>
-            <Value>STUDENT</Value>
-            <Value>STAFF</Value>
-            <Value>ALUM</Value>
-            <Value>AFFILIATE</Value>
-            <Value>EMPLOYEE</Value>
-        </AnySite>
-        
-        <!-- Example of Scope rule to override site metadata. -->
-        <SiteRule Name="urn:mace:inqueue:shibdev.edu">
-               <Scope Accept="false">shibdev.edu</Scope>
-               <Scope Type="regexp">^.+\.shibdev\.edu$</Scope>
-        </SiteRule>
-       </AttributeRule>
-
-       <!--
-       This attribute is provided mostly to ease testing because an IdP out of the box only
-       sends the unscoped version. It has little use because it lacks the context needed to
-       work in a multi-domain scenario and is a subset of the scoped version anyway.
-        -->
-       <AttributeRule Name="urn:mace:dir:attribute-def:eduPersonAffiliation" CaseSensitive="false" Header="Shib-EP-UnscopedAffiliation" Alias="unscoped-affiliation">
-        <AnySite>
-            <Value>MEMBER</Value>
-            <Value>FACULTY</Value>
-            <Value>STUDENT</Value>
-            <Value>STAFF</Value>
-            <Value>ALUM</Value>
-            <Value>AFFILIATE</Value>
-            <Value>EMPLOYEE</Value>
-        </AnySite>
-       </AttributeRule>
-       
-    <AttributeRule Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" Scoped="true" Header="REMOTE_USER" Alias="user">
-               <!-- Basic rule to pass through any value. -->
-        <AnySite>
-            <Value Type="regexp">^[^@]+$</Value>
-        </AnySite>
-    </AttributeRule>
-
-       <AttributeRule Name="urn:mace:dir:attribute-def:eduPersonEntitlement" Header="Shib-EP-Entitlement" Alias="entitlement">
-               <!-- Entitlements tend to be filtered per-site. -->
-               
-               <!--
-               Optional site rule that applies to any site
-               <AnySite>
-                       <Value>urn:mace:example.edu:exampleEntitlement</Value>
-               </AnySite>
-               -->
-               
-               <!-- Specific rules for an origin site, these are just development/sample sites. -->
-               <SiteRule Name="urn:mace:inqueue:example.edu">
-                       <Value Type="regexp">^urn:mace:.+$</Value>
-               </SiteRule>
-               <SiteRule Name="urn:mace:inqueue:shibdev.edu">
-                       <Value Type="regexp">^urn:mace:.+$</Value>
-               </SiteRule>
-       </AttributeRule>
-
-       <!-- A persistent id attribute that supports personalized anonymous access. -->
-       
-       <!-- First, the deprecated version: -->
-       <AttributeRule Name="urn:mace:dir:attribute-def:eduPersonTargetedID" Scoped="true" Header="Shib-TargetedID" Alias="targeted_id">
-        <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-
-       <!-- Second, the new version (note the OID-style name): -->
-       <AttributeRule Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" Header="Shib-TargetedID" Alias="targeted_id">
-        <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <!-- Some more eduPerson attributes, uncomment these to use them... -->
-       <!--
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:eduPersonNickname">
-        <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-
-       <AttributeRule Name="urn:mace:dir:attribute-def:eduPersonPrimaryAffiliation" CaseSensitive="false" Header="Shib-EP-PrimaryAffiliation">
-        <AnySite>
-            <Value>MEMBER</Value>
-            <Value>FACULTY</Value>
-            <Value>STUDENT</Value>
-            <Value>STAFF</Value>
-            <Value>ALUM</Value>
-            <Value>AFFILIATE</Value>
-            <Value>EMPLOYEE</Value>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:eduPersonPrimaryOrgUnitDN" Header="Shib-EP-PrimaryOrgUnitDN">
-        <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:eduPersonOrgUnitDN" Header="Shib-EP-OrgUnitDN">
-        <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:eduPersonOrgDN" Header="Shib-EP-OrgDN">
-        <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-
-       -->
-
-
-       <!--Examples of common LDAP-based attributes, uncomment to use these... -->
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:cn" Header="Shib-Person-commonName">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:sn" Header="Shib-Person-surname">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-
-       <AttributeRule Name="urn:mace:dir:attribute-def:mail" Header="Shib-InetOrgPerson-mail">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:telephoneNumber" Header="Shib-Person-telephoneNumber">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:title" Header="Shib-OrgPerson-title">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:initials" Header="Shib-InetOrgPerson-initials">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:description" Header="Shib-Person-description">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:carLicense" Header="Shib-InetOrgPerson-carLicense">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:departmentNumber" Header="Shib-InetOrgPerson-deptNum">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:displayName" Header="Shib-InetOrgPerson-displayName">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:employeeNumber" Header="Shib-InetOrgPerson-employeeNum">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:employeeType" Header="Shib-InetOrgPerson-employeeType">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:preferredLanguage" Header="Shib-InetOrgPerson-prefLang">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:manager" Header="Shib-InetOrgPerson-manager">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:roomNumber" Header="Shib-InetOrgPerson-roomNum">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:seeAlso" Header="Shib-OrgPerson-seeAlso">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:facsimileTelephoneNumber" Header="Shib-OrgPerson-fax">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:street" Header="Shib-OrgPerson-street">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:postOfficeBox" Header="Shib-OrgPerson-POBox">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:postalCode" Header="Shib-OrgPerson-postalCode">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:st" Header="Shib-OrgPerson-state">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:givenName" Header="Shib-InetOrgPerson-givenName">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:l" Header="Shib-OrgPerson-locality">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:businessCategory" Header="Shib-InetOrgPerson-businessCat">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:ou" Header="Shib-OrgPerson-orgUnit">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-       <AttributeRule Name="urn:mace:dir:attribute-def:physicalDeliveryOfficeName" Header="Shib-OrgPerson-OfficeName">
-               <AnySite>
-            <AnyValue/>
-        </AnySite>
-       </AttributeRule>
-       
-
-</AttributeAcceptancePolicy>

diff --git a/gss/external-services/shibboleth/gss-metadata.xml b/gss/external-services/shibboleth/gss-metadata.xml
deleted file mode 100644 (file)
index 470181d..0000000
--- a/gss/external-services/shibboleth/gss-metadata.xml
+++ /dev/null
@@ -1,2623 +0,0 @@
-<?xml version="1.0"?>
-<!-- 2008082001 -->
-<EntitiesDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:metadata ../schemas/saml-schema-metadata-2.0.xsd urn:mace:shibboleth:metadata:1.0 ../schemas/shibboleth-metadata-1.0.xsd http://www.w3.org/2000/09/xmldsig# ../schemas/xmldsig-core-schema.xsd" Name="http://www.grnet.gr/aai" validUntil="2010-01-01T00:00:00Z">
-    <Extensions>
-        <shibmd:KeyAuthority VerifyDepth="6">
-            <!-- GRNET Root CA 2004 -->
-            <ds:KeyInfo>
-                <ds:X509Data>
-                    <ds:X509Certificate>
-                        MIIIfDCCBmSgAwIBAgIBADANBgkqhkiG9w0BAQQFADBvMQswCQYDVQQGEwJHUjEu
-                        MCwGA1UEChMlR3JlZWsgUmVzZWFyY2ggYW5kIFRlY2hub2xvZ3kgTmV0d29yazEw
-                        MC4GA1UEAxMnR1JORVQgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAyMDA0
-                        MB4XDTA0MDYwMzA3MTIzMloXDTI0MDUyOTA3MTIzMlowbzELMAkGA1UEBhMCR1Ix
-                        LjAsBgNVBAoTJUdyZWVrIFJlc2VhcmNoIGFuZCBUZWNobm9sb2d5IE5ldHdvcmsx
-                        MDAuBgNVBAMTJ0dSTkVUIFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgMjAw
-                        NDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAPcYtrIcDW3U0BeAjOrY
-                        1ZMzFZsnw4XV3gC9qdx06iKH+NGCTTfsA258n7HalJHz/Tr7aHYFIXQD/hXip/IF
-                        3A0eS++sW2Ltiw3uTeH2cdCe1/sRkcgapmflvpOCpOqxaJZLx02qw2EUWo1k7Nfj
-                        shR+cqusbZyLJk7tpDTZqFf5F5HwU7qHHR1PxlcyBjohghKiuXNmqlbNBfct/MOr
-                        eURdhRP9i7kK4oVGCD6f7JHmAo2/lMX94tJpd5ZGlmQ5WD7KkYzU2uOOlgt4qqdP
-                        ymrUuXOg1tr+ItIxpEnXyOm+jC866S8X0HrNHyvL1zRP/zeJx37TAwJQuqwY7AKx
-                        nT3p0h+PUawref6up6fP94283PF/tcKDyi/kgKxLV60Xkbe08j/J5QBdHSE7SqRF
-                        OCX//kqwFvrJXwJy/B6SlogVlfKRpI2bViGFXDqv6aqEhRGEYRSMsuj7UA/7FE8M
-                        vGrU+8UNUMlRtCCnzSn6Tll2sNIbCO0MA/QKHzRpwHavHY4NB7hfFl+a09cNn+zi
-                        l7iQSqPyw3zuE9EzENil9IPmutXD3z2iOHXsrhc73WmW8nFOOC3biUXg9Dt++XJC
-                        Jag77nnYgAKQM4b1Ex/pO/uoHvBfGCoSqvSMNDtcNKmsDscORuP0GWJjjcI01JWY
-                        DU+oKryhHijehMyZ2reCX7TvAgMBAAGjggMhMIIDHTAdBgNVHQ4EFgQUhRi/w687
-                        gZ/lecbhEzRt0gQG2OgwgZkGA1UdIwSBkTCBjoAUhRi/w687gZ/lecbhEzRt0gQG
-                        2Oihc6RxMG8xCzAJBgNVBAYTAkdSMS4wLAYDVQQKEyVHcmVlayBSZXNlYXJjaCBh
-                        bmQgVGVjaG5vbG9neSBOZXR3b3JrMTAwLgYDVQQDEydHUk5FVCBSb290IENlcnRp
-                        ZmljYXRpb24gQXV0aG9yaXR5IDIwMDSCAQAwDwYDVR0TAQH/BAUwAwEB/zALBgNV
-                        HQ8EBAMCAQYwEQYJYIZIAYb4QgEBBAQDAgAHMEoGCWCGSAGG+EIBCAQ9FjtodHRw
-                        Oi8vd3d3LmNhLmdybmV0LmdyL2RvY3VtZW50cy9Hcm5ldFJvb3RDQTIwMDQvQ1Ax
-                        LjAuaHRtbDCBmgYJYIZIAYb4QgENBIGMFoGJVGhpcyBjZXJ0aWZpY2F0ZSBpcyBz
-                        dWJqZWN0IHRvIEdyZWVrIGxhd3MgYW5kIG91ciBDUFMuIFRoaXMgQ2VydGlmaWNh
-                        dGUgbXVzdCBvbmx5IGJlIHVzZWQgZm9yIGFjYWRlbWljLCByZXNlYXJjaCBvciBl
-                        ZHVjYXRpb25hbCBwdXJwb3Nlcy4wHgYDVR0RBBcwFYETcm9vdGNhMjAwNEBncm5l
-                        dC5ncjCCASQGA1UdIASCARswggEXMIIBEwYMKwYBBAGBgQMBAQEBMIIBATA1Bggr
-                        BgEFBQcCARYpaHR0cDovL3d3dy5jYS5ncm5ldC5nci9kb2N1bWVudHMvQ1BTLmh0
-                        bWwwgccGCCsGAQUFBwICMIG6MCwWJUdyZWVrIFJlc2VhcmNoIGFuZCBUZWNobm9s
-                        b2d5IE5ldHdvcmswAwIBARqBiVRoaXMgY2VydGlmaWNhdGUgaXMgc3ViamVjdCB0
-                        byBHcmVlayBsYXdzIGFuZCBvdXIgQ1BTLiBUaGlzIENlcnRpZmljYXRlIG11c3Qg
-                        b25seSBiZSB1c2VkIGZvciBhY2FkZW1pYywgcmVzZWFyY2ggb3IgZWR1Y2F0aW9u
-                        YWwgcHVycG9zZXMuMA0GCSqGSIb3DQEBBAUAA4ICAQBdASA/ILFXKRbtOBqdX7k6
-                        5nc57dYjVZiTJqlSFGQ8ELoUHpAEoRTsIqQN8xUnv1hJwRfCK01TAJ280i8YvlbM
-                        VipH4iRujoqzY/JLGWYkF/eXPK9OWLl7YKK6OV7IE9ogWJ//K5YjTyLidYZWBpdo
-                        s19fCxP0a/4wNJTyl9fM2TNOU1VHon0mgbUjzGi+ZUbgcmq8tsQW/tNKh0q6HvgB
-                        mbCj1cEKzqSq3llG1DQLqmxz69z4mjt7t92fEs5zrfEwDpUct+UfNis0tOsgqPPV
-                        Xyrm6C0gVN9//Usolc3TSFFXCcAtB/iUY7MtHgntyKh0ugwAcG/0GISMytzBVNfy
-                        WsAFLeOT74JoHPzjkDgNc11wsKZmfQomXaI12W6ZAC/NhLPxkEh42gFmzYyqRe0o
-                        Avc+XjioPa3vv1ruBuBZzvEo3yfksQJSJLW0ZXPtEIQaUY98WoMlwpPLE2IRiJE0
-                        Hk8yXUCj1iZbRkYdyE7YiL7TDkGqvIGAYW37j+6ZH8vhJ30YYiihJo6vzr3X9Chs
-                        HiSa66v/Z1smpQ4UXtCd8t7fQIKwR6IOXpqjBB7Icddlpq1rdh0IsgrfjenlATKS
-                        bPD0MyJiauWxcGAGlYWx2rm6q32WM8ps5h4XqDAX0L+95tRWjCf7Hi0O91B4rUiG
-                        v+f0zaAh42selhbMQpf/hw==
-                    </ds:X509Certificate>
-                </ds:X509Data>
-            </ds:KeyInfo>
-            <!-- GRNET Servers CA 2004 -->
-            <ds:KeyInfo>
-                <ds:X509Data>
-                    <ds:X509Certificate>
-                        MIIIqzCCBpOgAwIBAgIFAQAAAAAwDQYJKoZIhvcNAQEEBQAwbzELMAkGA1UEBhMC
-                        R1IxLjAsBgNVBAoTJUdyZWVrIFJlc2VhcmNoIGFuZCBUZWNobm9sb2d5IE5ldHdv
-                        cmsxMDAuBgNVBAMTJ0dSTkVUIFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkg
-                        MjAwNDAeFw0wNDA5MjcxMDUwNDVaFw0wODA5MjYxMDUwNDVaMIGZMQswCQYDVQQG
-                        EwJHUjEuMCwGA1UEChMlR3JlZWsgUmVzZWFyY2ggYW5kIFRlY2hub2xvZ3kgTmV0
-                        d29yazEzMDEGA1UEAxMqR1JORVQgU2VydmVycyBDZXJ0aWZpY2F0aW9uIEF1dGhv
-                        cml0eSAyMDA0MSUwIwYJKoZIhvcNAQkBFhZzZXJ2ZXJzY2EyMDA0QGdybmV0Lmdy
-                        MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs8fr8AyHzZk4J1KOauX
-                        ZGKhkdP755ciqKPzy3KeA+T/UewLHZaGyUlRYh809L1CuVjOmtOdU2GkD7SJfZsE
-                        gE/9xN6N5V0R+RlQb25zMXpOIpgtem3aDvKUYOCbT5HCsQcme3P4OVj8evAaPB3P
-                        78T6BlIRz2ogdQDlybqDAQgDT+Le4niZZr/rTkD7o0V+iZpuWdwTPOBOfErnkxdH
-                        0CTOoMoYteJg0/393GOm0I0kaT24smFMrPnSyWEWambfjh1rF0yigtl6Sg9+Cw9P
-                        vV37zR+4nYprkyg4oF+XDjLQBbTKcP6/qy47aM9kpp0gbYRh5kh6t3WUZ80o0Ver
-                        jQIDAQABo4IEITCCBB0wDwYDVR0TAQH/BAUwAwEB/zALBgNVHQ8EBAMCAQYwEQYJ
-                        YIZIAYb4QgEBBAQDAgAHMB0GA1UdDgQWBBQieHgJ5vNwMO/xqRDUzUjIEpJw7TAh
-                        BgNVHREEGjAYgRZzZXJ2ZXJzY2EyMDA0QGdybmV0LmdyMB4GA1UdEgQXMBWBE3Jv
-                        b3RjYTIwMDRAZ3JuZXQuZ3IwRwYDVR0fBEAwPjA8oDqgOIY2aHR0cDovL2NybHYx
-                        LmNhLmdybmV0LmdyL0dybmV0Um9vdENBMjAwNC9jcmx2MS5kZXIuY3JsMCMGCWCG
-                        SAGG+EIBBAQWFhRuc19yZXZva2VfcXVlcnkucGhwPzA3BglghkgBhvhCAQIEKhYo
-                        aHR0cDovL2NybHYxLmNhLmdybmV0LmdyL0dybmV0Um9vdENBMjAwNDBKBglghkgB
-                        hvhCAQgEPRY7aHR0cDovL3d3dy5jYS5ncm5ldC5nci9kb2N1bWVudHMvR3JuZXRS
-                        b290Q0EyMDA0L0NQMS4xLmh0bWwwgZoGCWCGSAGG+EIBDQSBjBaBiVRoaXMgY2Vy
-                        dGlmaWNhdGUgaXMgc3ViamVjdCB0byBHcmVlayBsYXdzIGFuZCBvdXIgQ1BTLiBU
-                        aGlzIENlcnRpZmljYXRlIG11c3Qgb25seSBiZSB1c2VkIGZvciBhY2FkZW1pYywg
-                        cmVzZWFyY2ggb3IgZWR1Y2F0aW9uYWwgcHVycG9zZXMuMIGZBgNVHSMEgZEwgY6A
-                        FIUYv8OvO4Gf5XnG4RM0bdIEBtjooXOkcTBvMQswCQYDVQQGEwJHUjEuMCwGA1UE
-                        ChMlR3JlZWsgUmVzZWFyY2ggYW5kIFRlY2hub2xvZ3kgTmV0d29yazEwMC4GA1UE
-                        AxMnR1JORVQgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAyMDA0ggEAMDQG
-                        CCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuY2EuZ3JuZXQu
-                        Z3IvMIIBJAYDVR0gBIIBGzCCARcwggETBgwrBgEEAYGBAwEBAQEwggEBMDUGCCsG
-                        AQUFBwIBFilodHRwOi8vd3d3LmNhLmdybmV0LmdyL2RvY3VtZW50cy9DUFMuaHRt
-                        bDCBxwYIKwYBBQUHAgIwgbowLBYlR3JlZWsgUmVzZWFyY2ggYW5kIFRlY2hub2xv
-                        Z3kgTmV0d29yazADAgEBGoGJVGhpcyBjZXJ0aWZpY2F0ZSBpcyBzdWJqZWN0IHRv
-                        IEdyZWVrIGxhd3MgYW5kIG91ciBDUFMuIFRoaXMgQ2VydGlmaWNhdGUgbXVzdCBv
-                        bmx5IGJlIHVzZWQgZm9yIGFjYWRlbWljLCByZXNlYXJjaCBvciBlZHVjYXRpb25h
-                        bCBwdXJwb3Nlcy4wDQYJKoZIhvcNAQEEBQADggIBAL/DM6PHdMU+UtlrSuEec1jN
-                        X108ytAUKnpwj79yGc7VjC3R44Z4INJF4JWo3Ong9QxtgP/tsAFwKb1kcHUUJSIW
-                        GnojKAWguBnPKZA/7um4N/p5fqIGoW6Rk02K8eA1VQjYbLroXfXRhJ/WRQpaXmYT
-                        6fspmJWeBCiKzPZt45NgOl1qS9jGeWqgTQWQhxMr8/oukTdsiX1U3Nf2Yk9jgigE
-                        E5xjMcdqglxBbz8pFU/03UsyqIx7K9lvr2Umkn9+ssRkU/3E1flLgIrMHAqa26mk
-                        DJC13QvirVJbfqcpTBTcdCNzb+aoFlst9MqyZ9Ypb94N3+v44tmG+Nf/VbZDPK+u
-                        UJNLWA65M1Vvwpjur40w+s3HqlUy7D5HNAZSm/RM5NVhUM22VOqw1ZnVt8JCmWd1
-                        yN0gfEQXQa+YLJY7im6pX1akwYRlmnDpjf1ZRKJZuZYfDPruTkM8wqa84w3KFbxX
-                        qnyKCrKZfNrEWER/w3kfgevEDNNtpEL3/2fMa9eU4eYiT6WSWr0WKgTT95+nqGvV
-                        yd0UkN3S/eCo8/IzxBCYskcibohwtUpYoql0yxajGTgkPYTX9lbWgI1VVSRvLdke
-                        IDUj7MfrVN5/1Xhn369LnGkeqnj+sa7bAaLdnx+6y94q0kce4ZFf8LDYvpOmzgJm
-                        nnOZivu0tOuqlPUZv06i
-                    </ds:X509Certificate>
-                </ds:X509Data>
-            </ds:KeyInfo>
-            <!-- GRNET Servers CA 2008 -->
-            <ds:KeyInfo>
-                <ds:X509Data>
-                    <ds:X509Certificate>
-                        MIIIfTCCBmWgAwIBAgIFAQAAAAswDQYJKoZIhvcNAQEEBQAwbzELMAkGA1UEBhMC
-                        R1IxLjAsBgNVBAoTJUdyZWVrIFJlc2VhcmNoIGFuZCBUZWNobm9sb2d5IE5ldHdv
-                        cmsxMDAuBgNVBAMTJ0dSTkVUIFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkg
-                        MjAwNDAeFw0wODA1MTQxMDI3MDlaFw0xNjA1MTIxMDI3MDlaMHIxCzAJBgNVBAYT
-                        AkdSMS4wLAYDVQQKEyVHcmVlayBSZXNlYXJjaCBhbmQgVGVjaG5vbG9neSBOZXR3
-                        b3JrMTMwMQYDVQQDEypHUk5FVCBTZXJ2ZXJzIENlcnRpZmljYXRpb24gQXV0aG9y
-                        aXR5IDIwMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh7lnsliRh
-                        rnedSWt37iiZqaMwjGHAHYWbcapcV04QtCdvBSslM0OLmYANVT/4HihSyLA9CTrG
-                        YnuH1TsxNnO/+PnEnLYB3gNLJQMik4YoEFu7+Cw3iUVxF+B5PKnfMLABMfwMAbmT
-                        5ymRckb2jqEiauSJXpvn9uPu87g9oY28uqTBqOrp6hkkKJ/0dwRTtc4TDta0/u5+
-                        D7Y8sT+bHM3wBSqTk0cVL4UyGm7vUAz1vyg8qZGcZUlR8V02wh1Od/Pcye+e4WPn
-                        xTJqFRZtyE4tNDIGjEevM9wAIdBFujnAtcZhq5shv8ylSGNWWsrQoA1sQlR7XMXS
-                        Ql9mGTm3STU/AgMBAAGjggQbMIIEFzAPBgNVHRMBAf8EBTADAQH/MAsGA1UdDwQE
-                        AwIBBjARBglghkgBhvhCAQEEBAMCAAcwHQYDVR0OBBYEFBTKcn0i5+lBYAgT04O1
-                        jCvZtW5gMBYGA1UdEQQPMA2BC2NhQGdybmV0LmdyMB4GA1UdEgQXMBWBE3Jvb3Rj
-                        YTIwMDRAZ3JuZXQuZ3IwRwYDVR0fBEAwPjA8oDqgOIY2aHR0cDovL2NybHYxLmNh
-                        LmdybmV0LmdyL0dybmV0Um9vdENBMjAwNC9jcmx2MS5kZXIuY3JsMCMGCWCGSAGG
-                        +EIBBAQWFhRuc19yZXZva2VfcXVlcnkucGhwPzA3BglghkgBhvhCAQIEKhYoaHR0
-                        cDovL2NybHYxLmNhLmdybmV0LmdyL0dybmV0Um9vdENBMjAwNDBKBglghkgBhvhC
-                        AQgEPRY7aHR0cDovL3d3dy5jYS5ncm5ldC5nci9kb2N1bWVudHMvR3JuZXRSb290
-                        Q0EyMDA0L0NQMS4xLmh0bWwwgZoGCWCGSAGG+EIBDQSBjBaBiVRoaXMgY2VydGlm
-                        aWNhdGUgaXMgc3ViamVjdCB0byBHcmVlayBsYXdzIGFuZCBvdXIgQ1BTLiBUaGlz
-                        IENlcnRpZmljYXRlIG11c3Qgb25seSBiZSB1c2VkIGZvciBhY2FkZW1pYywgcmVz
-                        ZWFyY2ggb3IgZWR1Y2F0aW9uYWwgcHVycG9zZXMuMIGZBgNVHSMEgZEwgY6AFIUY
-                        v8OvO4Gf5XnG4RM0bdIEBtjooXOkcTBvMQswCQYDVQQGEwJHUjEuMCwGA1UEChMl
-                        R3JlZWsgUmVzZWFyY2ggYW5kIFRlY2hub2xvZ3kgTmV0d29yazEwMC4GA1UEAxMn
-                        R1JORVQgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAyMDA0ggEAMDkGCCsG
-                        AQUFBwEBBC0wKzApBggrBgEFBQcwAYYdaHR0cDovL29jc3AuY2EuZ3JuZXQuZ3I6
-                        ODAwMC8wggEkBgNVHSAEggEbMIIBFzCCARMGDCsGAQQBgYEDAQEBATCCAQEwNQYI
-                        KwYBBQUHAgEWKWh0dHA6Ly93d3cuY2EuZ3JuZXQuZ3IvZG9jdW1lbnRzL0NQUy5o
-                        dG1sMIHHBggrBgEFBQcCAjCBujAsFiVHcmVlayBSZXNlYXJjaCBhbmQgVGVjaG5v
-                        bG9neSBOZXR3b3JrMAMCAQEagYlUaGlzIGNlcnRpZmljYXRlIGlzIHN1YmplY3Qg
-                        dG8gR3JlZWsgbGF3cyBhbmQgb3VyIENQUy4gVGhpcyBDZXJ0aWZpY2F0ZSBtdXN0
-                        IG9ubHkgYmUgdXNlZCBmb3IgYWNhZGVtaWMsIHJlc2VhcmNoIG9yIGVkdWNhdGlv
-                        bmFsIHB1cnBvc2VzLjANBgkqhkiG9w0BAQQFAAOCAgEA1EB4rh3A40ATQWo/tb/3
-                        ErKL9n00+zlQvYSPKMbBhT+q6IF5GajpyxmhbmPUIRejvrYf3tCU06LroHMU6KIt
-                        q1XnPxgyUIzTHRXer3L6blHnTCzHSDf3G7Xr8olPntqYgb284TflcUOhD8vfsCjc
-                        0Rf2D9d28svk3h6lYP8m0T4v2VSP1/BR6crkmNGenSRO99eyjtvEmQD0oapXYdJ+
-                        Ck7RCrP14XdbIRPjjyXIfzDAuLHEuV/gc2vikQ3q4/ids2vGyW9AV+GgcPWH/v3G
-                        ynt+17Wkb0HzilzA/c6J0QO0HCLnnJD343+Rfvkeh9TkMWyX0z1kcJgS8m6AfpUV
-                        npqhe6uJST6RLbkdTK7Vc3hfr2Cv0XLec6JJ5KhV5XxK1xMkEYdsGQUTUSUE9I2D
-                        pydHFzcWpR+uJqOkTvv24GE3WUaRPCPpT5NZbmD45gjJJAf50U05JRXyNeWJr725
-                        M3bIKUqznz2F4TENapHHdUCHTcCJeqz8fj2E/MmPKN0W2Ag7Qf3iDiayjHPsLyw5
-                        h2OH914cBxZEULyUwx4sHjQxf7sw84/GCQeD9KICSrcQPkGO96BbH+KXSk5yi0Xh
-                        kENc4zvSshOazPtaHByE6zDrRFi/tALROJkRrGt5P5ylyoyMNSqLGbLYZEHfiE2R
-                        U298cfmNfD+iJSMniHJDQJ0=
-                    </ds:X509Certificate>
-                </ds:X509Data>
-            </ds:KeyInfo>
-            <!-- Hellenic Academic and Research Institutions RootCA 2006 -->
-            <ds:KeyInfo>
-                <ds:X509Data>
-                    <ds:X509Certificate>
-                        MIIG9DCCBdygAwIBAgIBADANBgkqhkiG9w0BAQQFADCBlTELMAkGA1UEBhMCR1Ix
-                        RDBCBgNVBAoTO0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1
-                        dGlvbnMgQ2VydC4gQXV0aG9yaXR5MUAwPgYDVQQDEzdIZWxsZW5pYyBBY2FkZW1p
-                        YyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25zIFJvb3RDQSAyMDA2MB4XDTA2MDcy
-                        NTA2MTQ1NVoXDTI2MDcyMDA2MTQ1NVowgZUxCzAJBgNVBAYTAkdSMUQwQgYDVQQK
-                        EztIZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRpb25zIENl
-                        cnQuIEF1dGhvcml0eTFAMD4GA1UEAxM3SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl
-                        c2VhcmNoIEluc3RpdHV0aW9ucyBSb290Q0EgMjAwNjCCASIwDQYJKoZIhvcNAQEB
-                        BQADggEPADCCAQoCggEBALd3SoZSDS8gxC4xPA38p5vuYovfrJXDSvjihoYExIGZ
-                        SjH6OxO5BqSfiMt01chEaXa/sI4TXauj77bToeF2Uz4wxXtsCdG1Hnd+Hui94EGs
-                        NtPU38WMJZpcohLY5og+iJWGfyCM/FFL8QYbpoKc+rb2J5gwd1vgQkafLMnpguB5
-                        SksB23AI6ZQ35grTkWsPdv5qUi4GeNmPFHjVd0J+hLH1trxRhv+ID4BYMsx8nAan
-                        zOh3+o9eLmEpTeK5u0FMlIMIC5PiCadtzwkNxcPkz/5HiI7G1UTaJf/9beNfCINL
-                        ZA9bRjW4MJiQeO31PL0aOoJPVjp4fRfyMc8HVil1/CsCAwEAAaOCA0swggNHMB0G
-                        A1UdDgQWBBS4ju9E3e77Dxz/oWSXqpKot3CoGDCBwgYDVR0jBIG6MIG3gBS4ju9E
-                        3e77Dxz/oWSXqpKot3CoGKGBm6SBmDCBlTELMAkGA1UEBhMCR1IxRDBCBgNVBAoT
-                        O0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgQ2Vy
-                        dC4gQXV0aG9yaXR5MUAwPgYDVQQDEzdIZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVz
-                        ZWFyY2ggSW5zdGl0dXRpb25zIFJvb3RDQSAyMDA2ggEAMA8GA1UdEwEB/wQFMAMB
-                        Af8wCwYDVR0PBAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIABzA2BglghkgBhvhCAQgE
-                        KRYnaHR0cDovL3d3dy5oYXJpY2EuZ3IvZG9jdW1lbnRzL0NQUy5odG1sMIGaBglg
-                        hkgBhvhCAQ0EgYwWgYlUaGlzIGNlcnRpZmljYXRlIGlzIHN1YmplY3QgdG8gR3Jl
-                        ZWsgbGF3cyBhbmQgb3VyIENQUy4gVGhpcyBDZXJ0aWZpY2F0ZSBtdXN0IG9ubHkg
-                        YmUgdXNlZCBmb3IgYWNhZGVtaWMsIHJlc2VhcmNoIG9yIGVkdWNhdGlvbmFsIHB1
-                        cnBvc2VzLjAXBgNVHREEEDAOgQxjYUBoYXJpY2EuZ3IwggFABgNVHSAEggE3MIIB
-                        MzCCAS8GDCsGAQQBgc8RAQABADCCAR0wMwYIKwYBBQUHAgEWJ2h0dHA6Ly93d3cu
-                        aGFyaWNhLmdyL2RvY3VtZW50cy9DUFMuaHRtbDCB5QYIKwYBBQUHAgIwgdgwShZD
-                        SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBDZXJ0
-                        aWZpY2F0aW9uIEF1dGhvcml0eTADAgEBGoGJVGhpcyBjZXJ0aWZpY2F0ZSBpcyBz
-                        dWJqZWN0IHRvIEdyZWVrIGxhd3MgYW5kIG91ciBDUFMuIFRoaXMgQ2VydGlmaWNh
-                        dGUgbXVzdCBvbmx5IGJlIHVzZWQgZm9yIGFjYWRlbWljLCByZXNlYXJjaCBvciBl
-                        ZHVjYXRpb25hbCBwdXJwb3Nlcy4wDQYJKoZIhvcNAQEEBQADggEBAHNf1+MjfgYv
-                        nG0yV71PBTPQ0zvdJyKBm/9h5FidMdPOOp0Bx3Y25uuSMJC670VJ8QrVff6DhwMe
-                        lM+kTJgGRmD2A77SRyrKPckSLVgzJTJd6DQWNT1qkehvaz2IUDYic6akVfjqfHiZ
-                        KPMNIOnN9B0Fa4bcH5sI69hazLfr+//EEKAZ+6x8nkq0tawLiSTymGnzm0CnKefD
-                        zCmcIKNwt/vdSpoJ/CkTQXG3a/NlYTIBQlSQniuRE/3yTH93ynIGJD3JkGJ8U98N
-                        KaS1yR4S25E0E0W5VR42Nf+QRAhb8NwJLtTOzFktn+1GMTcacjCiKe2CC67A7qUV
-                        ziBldkPfSDA=
-                    </ds:X509Certificate>
-                </ds:X509Data>
-            </ds:KeyInfo>
-            <!-- Aristotle University of Thessaloniki Central CA 2008 -->
-            <ds:KeyInfo>
-                <ds:X509Data>
-                    <ds:X509Certificate>
-                        MIIIFTCCBv2gAwIBAgIFAQAAAAgwDQYJKoZIhvcNAQEEBQAwgZUxCzAJBgNVBAYT
-                        AkdSMUQwQgYDVQQKEztIZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5z
-                        dGl0dXRpb25zIENlcnQuIEF1dGhvcml0eTFAMD4GA1UEAxM3SGVsbGVuaWMgQWNh
-                        ZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0aW9ucyBSb290Q0EgMjAwNjAeFw0w
-                        ODAxMDkxMTE0NThaFw0xNjAxMDcxMTE0NThaMIGhMQswCQYDVQQGEwJHUjEtMCsG
-                        A1UEChMkQXJpc3RvdGxlIFVuaXZlcnNpdHkgb2YgVGhlc3NhbG9uaWtpMT0wOwYD
-                        VQQDEzRBcmlzdG90bGUgVW5pdmVyc2l0eSBvZiBUaGVzc2Fsb25pa2kgQ2VudHJh
-                        bCBDQSAyMDA4MSQwIgYJKoZIhvcNAQkBFhVjZW50cmFsY2EyMDA4QGF1dGguZ3Iw
-                        ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4Aa00kXkKWXV0JuvaTzp
-                        768mwhIADdg/MFQc+NgXCOCTTdCKoylhBP/OkTHv4OFRfP217yegqe2z/97H9YVq
-                        EqJJUDO0EzEB+aqg7xISuStFIgeO/ULW2CoGrK2NyaV4F2VeoHxjKnrDXvPdg+Ht
-                        1oFHDgMYHGxC99rBd7uejfDdA7Pi6xgjxw1YeVdcpz166YNBTPpLwaqcwb7MvmIc
-                        Qnz3rbQWb9vMnVMjsVDQh1N2WHj7x0Bd/z/rRVBJMDKgGdSExjCdEtC/mUdmj/ez
-                        v3FVKpUEaE6Nw+Xpyk219q2+jFzrj5dOC6bv8JzEbygMjtZkxPLPtQgm8Lij4vcH
-                        AgMBAAGjggRcMIIEWDAPBgNVHRMBAf8EBTADAQH/MAsGA1UdDwQEAwIBBjARBglg
-                        hkgBhvhCAQEEBAMCAAcwHQYDVR0OBBYEFCa2nnM9LhoGdqDyBI2WCWQtc/1eMCAG
-                        A1UdEQQZMBeBFWNlbnRyYWxjYTIwMDhAYXV0aC5ncjAXBgNVHRIEEDAOgQxjYUBo
-                        YXJpY2EuZ3IwRgYDVR0fBD8wPTA7oDmgN4Y1aHR0cDovL2NybHYxLmhhcmljYS5n
-                        ci9IYXJpY2FSb290Q0EyMDA2L2NybHYxLmRlci5jcmwwIwYJYIZIAYb4QgEEBBYW
-                        FG5zX3Jldm9rZV9xdWVyeS5waHA/MDYGCWCGSAGG+EIBAgQpFidodHRwOi8vY3Js
-                        djEuaGFyaWNhLmdyL0hhcmljYVJvb3RDQTIwMDYwRwYJYIZIAYb4QgEIBDoWOGh0
-                        dHA6Ly93d3cuaGFyaWNhLmdyL2RvY3VtZW50cy9IYXJpY2FSb290Q0EyMDA2L0NQ
-                        Uy5odG1sMIGaBglghkgBhvhCAQ0EgYwWgYlUaGlzIGNlcnRpZmljYXRlIGlzIHN1
-                        YmplY3QgdG8gR3JlZWsgbGF3cyBhbmQgb3VyIENQUy4gVGhpcyBDZXJ0aWZpY2F0
-                        ZSBtdXN0IG9ubHkgYmUgdXNlZCBmb3IgYWNhZGVtaWMsIHJlc2VhcmNoIG9yIGVk
-                        dWNhdGlvbmFsIHB1cnBvc2VzLjCBwgYDVR0jBIG6MIG3gBS4ju9E3e77Dxz/oWSX
-                        qpKot3CoGKGBm6SBmDCBlTELMAkGA1UEBhMCR1IxRDBCBgNVBAoTO0hlbGxlbmlj
-                        IEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgQ2VydC4gQXV0aG9y
-                        aXR5MUAwPgYDVQQDEzdIZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5z
-                        dGl0dXRpb25zIFJvb3RDQSAyMDA2ggEAMDcGCCsGAQUFBwEBBCswKTAnBggrBgEF
-                        BQcwAYYbaHR0cDovL29jc3AuaGFyaWNhLmdyOjcwMDAvMIIBQAYDVR0gBIIBNzCC
-                        ATMwggEvBgwrBgEEAYHPEQEAAQAwggEdMDMGCCsGAQUFBwIBFidodHRwOi8vd3d3
-                        LmhhcmljYS5nci9kb2N1bWVudHMvQ1BTLmh0bWwwgeUGCCsGAQUFBwICMIHYMEoW
-                        Q0hlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgQ2Vy
-                        dGlmaWNhdGlvbiBBdXRob3JpdHkwAwIBARqBiVRoaXMgY2VydGlmaWNhdGUgaXMg
-                        c3ViamVjdCB0byBHcmVlayBsYXdzIGFuZCBvdXIgQ1BTLiBUaGlzIENlcnRpZmlj
-                        YXRlIG11c3Qgb25seSBiZSB1c2VkIGZvciBhY2FkZW1pYywgcmVzZWFyY2ggb3Ig
-                        ZWR1Y2F0aW9uYWwgcHVycG9zZXMuMA0GCSqGSIb3DQEBBAUAA4IBAQBLPloqtj/s
-                        3+fH3F3goaKHE98o4idS3ymXFDMHW3qow43XME5JyFnsBFdnMmXUzQyO/Xm5E5rN
-                        ZQdqqiR48DvsOFXjikJxPsBX8eMVIKQFE0Xx5XjKtXUp6g/tNS6zP083n9Sv4xbk
-                        xHo8+WVLSQgikzfNxfW/cCZ7pYBsfHXjxsr2rE9BTxH7GztrC4+MTSjpztKhuufm
-                        rq4GmgPME+2NUsHxg26fdx8KRyV/2RVenmDyfYgvmHxKFv2BD17C8K3XFk6XYtux
-                        GTeJec84Q0JaYgt/+W8EHTveVIqgkhHaOoVDNN0l4PzMJlLd/FCibs6Sjn/Wg7d5
-                        EtGfheoaLt3T
-                    </ds:X509Certificate>
-                </ds:X509Data>
-            </ds:KeyInfo>
-            <!-- AUTH Network Operations Center Certification Authority 2008 -->
-            <ds:KeyInfo>
-                <ds:X509Data>
-                    <ds:X509Certificate>
-                        MIIIHzCCBwegAwIBAgIFAgAAAAAwDQYJKoZIhvcNAQEEBQAwgaExCzAJBgNVBAYT
-                        AkdSMS0wKwYDVQQKEyRBcmlzdG90bGUgVW5pdmVyc2l0eSBvZiBUaGVzc2Fsb25p
-                        a2kxPTA7BgNVBAMTNEFyaXN0b3RsZSBVbml2ZXJzaXR5IG9mIFRoZXNzYWxvbmlr
-                        aSBDZW50cmFsIENBIDIwMDgxJDAiBgkqhkiG9w0BCQEWFWNlbnRyYWxjYTIwMDhA
-                        YXV0aC5ncjAeFw0wODAxMDkxNTUwNDFaFw0xMjAxMDgxNTUwNDFaMIHJMQswCQYD
-                        VQQGEwJHUjEtMCsGA1UEChMkQXJpc3RvdGxlIFVuaXZlcnNpdHkgb2YgVGhlc3Nh
-                        bG9uaWtpMSkwJwYDVQQLEyBDZW50cmFsIENvbW11bmljYXRpb24gRmFjaWxpdGll
-                        czFEMEIGA1UEAxM7QVVUSCBOZXR3b3JrIE9wZXJhdGlvbnMgQ2VudGVyIENlcnRp
-                        ZmljYXRpb24gQXV0aG9yaXR5IDIwMDgxGjAYBgkqhkiG9w0BCQEWC3BraUBhdXRo
-                        LmdyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+JCZHHPex8kw1Pz
-                        A8OPhFCTKSdvDEog/2zeuNlEbadbOni6tUFC+pvFc+6K/q4ANq4AB2gg4cGFFRli
-                        jh4/vKsVpA3vlEa90KJ3R28TLFg0dH8PGaNuAS6nuDUDG0CeOtICQRFb/Sbfa8Yn
-                        +xmdLse+XEUTsZhA+mqSjhFdLuH3kbyx5LbtgZwXfsTzeFSQm/auurWKrXBImVav
-                        xG5Mxf/j1khRNmvmD8hNGobrABgTrI77jUskTPNQYR11aRh/mIViY6mHO848O4Yk
-                        T6FsH1JQug9UQSJfYWOX3iNf3QgPdWEqrF0cUz3wYywvf8XJsfOJ63gvr3+6L4NP
-                        QuJedwIDAQABo4IEMjCCBC4wDwYDVR0TAQH/BAUwAwEB/zALBgNVHQ8EBAMCAQYw
-                        EQYJYIZIAYb4QgEBBAQDAgAHMB0GA1UdDgQWBBTMg82j6PpDzs73XLFuMWHulaa1
-                        HTAWBgNVHREEDzANgQtwa2lAYXV0aC5ncjAgBgNVHRIEGTAXgRVjZW50cmFsY2Ey
-                        MDA4QGF1dGguZ3IwSQYDVR0fBEIwQDA+oDygOoY4aHR0cDovL2NybHYxLnBraS5h
-                        dXRoLmdyL0F1dGhDZW50cmFsQ0EyMDA4L2NybHYxLmRlci5jcmwwIwYJYIZIAYb4
-                        QgEEBBYWFG5zX3Jldm9rZV9xdWVyeS5waHA/MDkGCWCGSAGG+EIBAgQsFipodHRw
-                        Oi8vY3JsdjEucGtpLmF1dGguZ3IvQXV0aENlbnRyYWxDQTIwMDgwOAYJYIZIAYb4
-                        QgEIBCsWKWh0dHA6Ly93d3cucGtpLmF1dGguZ3IvZG9jdW1lbnRzL0NQUy5odG1s
-                        MIGaBglghkgBhvhCAQ0EgYwWgYlUaGlzIGNlcnRpZmljYXRlIGlzIHN1YmplY3Qg
-                        dG8gR3JlZWsgbGF3cyBhbmQgb3VyIENQUy4gVGhpcyBDZXJ0aWZpY2F0ZSBtdXN0
-                        IG9ubHkgYmUgdXNlZCBmb3IgYWNhZGVtaWMsIHJlc2VhcmNoIG9yIGVkdWNhdGlv
-                        bmFsIHB1cnBvc2VzLjCBxgYDVR0jBIG+MIG7gBQmtp5zPS4aBnag8gSNlglkLXP9
-                        XqGBm6SBmDCBlTELMAkGA1UEBhMCR1IxRDBCBgNVBAoTO0hlbGxlbmljIEFjYWRl
-                        bWljIGFuZCBSZXNlYXJjaCBJbnN0aXR1dGlvbnMgQ2VydC4gQXV0aG9yaXR5MUAw
-                        PgYDVQQDEzdIZWxsZW5pYyBBY2FkZW1pYyBhbmQgUmVzZWFyY2ggSW5zdGl0dXRp
-                        b25zIFJvb3RDQSAyMDA2ggUBAAAACDAzBggrBgEFBQcBAQQnMCUwIwYIKwYBBQUH
-                        MAGGF2h0dHA6Ly9vY3NwLnBraS5hdXRoLmdyMIIBIAYDVR0gBIIBFzCCARMwggEP
-                        BgsrBgEEAbwdAgACBDCB/zA0BggrBgEFBQcCARYoaHR0cDovL3d3dy5wa2kuYXV0
-                        aC5nci9kb2N1bWVudHMvQ1BTLnBocDCBxgYIKwYBBQUHAgIwgbkwKxYkQXJpc3Rv
-                        dGxlIFVuaXZlcnNpdHkgb2YgVGhlc3NhbG9uaWtpMAMCAQEagYlUaGlzIGNlcnRp
-                        ZmljYXRlIGlzIHN1YmplY3QgdG8gR3JlZWsgbGF3cyBhbmQgb3VyIENQUy4gVGhp
-                        cyBDZXJ0aWZpY2F0ZSBtdXN0IG9ubHkgYmUgdXNlZCBmb3IgYWNhZGVtaWMsIHJl
-                        c2VhcmNoIG9yIGVkdWNhdGlvbmFsIHB1cnBvc2VzLjANBgkqhkiG9w0BAQQFAAOC
-                        AQEADe9YdaM4syVse0HFn2Z4kpJ8OIo0JENLq7yg7I0nWxudxelbmeUbJO883ehI
-                        fqtSQVo8Vfqh5PiXwT61JdnPrjZ4rhRtZ8QLxEO7H+dKwcENLmhZYCURb29lvDTa
-                        ApN/U79xexjx6Zah3rWlgp9H2xnjl0pEjK3j1XltYeb+hZMD2aFojZRDQx9CBuoF
-                        O0wJ6D9Qwkf3J8GX/Nr+2TKWIq/oa+qasCHqS0N6sqfAtDpy++6rUEER93JyvNN3
-                        6Yh2kIlLKBEW8f9vA0HjkxQ9TJMsS3/1h+qGi+L9ji/MfwcT7Sj7LbQ0hxJYhTRa
-                        Yan++VLxImYGvOcKKmIMGhnYdQ==
-                    </ds:X509Certificate>
-                </ds:X509Data>
-            </ds:KeyInfo>
-            <!-- AUTH Root CA 2001 -->
-            <ds:KeyInfo>
-                <ds:X509Data>
-                    <ds:X509Certificate>
-                        MIIE3zCCA8egAwIBAgIBADANBgkqhkiG9w0BAQQFADCBkzELMAkGA1UEBhMCR1Ix
-                        LTArBgNVBAoTJEFyaXN0b3RsZSBVbml2ZXJzaXR5IG9mIFRoZXNzYWxvbmlraTEp
-                        MCcGA1UECxMgQ2VudHJhbCBDb21tdW5pY2F0aW9uIEZhY2lsaXRpZXMxKjAoBgNV
-                        BAMTIVJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgMjAwMTAeFw0wMjAxMTYw
-                        OTQzNDdaFw0xMjAxMTQwOTQzNDdaMIGTMQswCQYDVQQGEwJHUjEtMCsGA1UEChMk
-                        QXJpc3RvdGxlIFVuaXZlcnNpdHkgb2YgVGhlc3NhbG9uaWtpMSkwJwYDVQQLEyBD
-                        ZW50cmFsIENvbW11bmljYXRpb24gRmFjaWxpdGllczEqMCgGA1UEAxMhUm9vdCBD
-                        ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAyMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOC
-                        AQ8AMIIBCgKCAQEAwtBhdb+ZAfCjDysKe25tmSlpRwqpsUC9r9NDtPGYTOv+nv6P
-                        grPGBLrH5lhfrO+f9QEMX1TvoUoCT2vLyY/s2w+Wz/5f8S6xZ4fREDmVQEHiZMDU
-                        rBEucTCF5kKK7IWgQawvVgrVroSpqOZhsB43+Y9qsew0J0J+PS8Hs8Ft5AJRVYrW
-                        /etjCCZjbq/PHZEH+4czFuJI9+yLYZGzxFWGOtOabwdMJBvKUcLV1Ym/naA5oyxV
-                        BifFuZqZL2kSNzpiQQoaZtnlGqZOVc7VqLV7yG0RYct4qcDTdFsZoebPomS3aa0I
-                        HSWu8mL7a1saeJEed75GekK/pbEq43JcjRMqewIDAQABo4IBOjCCATYwHQYDVR0O
-                        BBYEFDPlMGCJVGuicWlFIWobZwL5M0ngMIHABgNVHSMEgbgwgbWAFDPlMGCJVGui
-                        cWlFIWobZwL5M0ngoYGZpIGWMIGTMQswCQYDVQQGEwJHUjEtMCsGA1UEChMkQXJp
-                        c3RvdGxlIFVuaXZlcnNpdHkgb2YgVGhlc3NhbG9uaWtpMSkwJwYDVQQLEyBDZW50
-                        cmFsIENvbW11bmljYXRpb24gRmFjaWxpdGllczEqMCgGA1UEAxMhUm9vdCBDZXJ0
-                        aWZpY2F0aW9uIEF1dGhvcml0eSAyMDAxggEAMA8GA1UdEwEB/wQFMAMBAf8wCwYD
-                        VR0PBAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIABzAhBgNVHREEGjAYgRZyb290Y2Ey
-                        MDAxQGNjZi5hdXRoLmdyMA0GCSqGSIb3DQEBBAUAA4IBAQAwf1bIsW9ckxRYrzTV
-                        noiWVpHNhNwCVQVuhMbmbaQTDmstFEgKZkLo4sLJy2bNEDKAHUt6+bNWB4o1O37o
-                        OkFmVI+hlnCbUdva59F7VYn38K7pi/tr7iuLaZD8oqySPJ05tpbQsQGvVD230dbM
-                        ncse96xjkFcwtwBmWWXWRmSz+HeCMf5RI4Eu5/GbqDdpNl0pki3hw+4P56knl33w
-                        eForeT+8n9NsSzIRM6N0HJ+n1RA/FEjqv5tCg7ksIJUhX+diJcHsbnT/mcEyElKm
-                        Qta1B43aU45NL5tuZuq4KGvi9TCpokDsbBBVyW9yd07MVUXAnGsLCuN2ZYcLrE75
-                        bPUq
-                    </ds:X509Certificate>
-                </ds:X509Data>
-            </ds:KeyInfo>
-            <!-- AUTH Servers Certification Authority 2007  -->
-            <ds:KeyInfo>
-                <!-- <ds:KeyName>AUTH Servers Certification Authority 2007</ds:KeyName> -->
-                <ds:X509Data>
-                    <ds:X509Certificate>
-                        MIIGdzCCBV+gAwIBAgIFAQAAABQwDQYJKoZIhvcNAQEEBQAwgZMxCzAJBgNVBAYT
-                        AkdSMS0wKwYDVQQKEyRBcmlzdG90bGUgVW5pdmVyc2l0eSBvZiBUaGVzc2Fsb25p
-                        a2kxKTAnBgNVBAsTIENlbnRyYWwgQ29tbXVuaWNhdGlvbiBGYWNpbGl0aWVzMSow
-                        KAYDVQQDEyFSb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IDIwMDEwHhcNMDcw
-                        MTExMTM0MTIxWhcNMDkwMTEwMTM0MTIxWjCBujELMAkGA1UEBhMCR1IxLTArBgNV
-                        BAoTJEFyaXN0b3RsZSBVbml2ZXJzaXR5IG9mIFRoZXNzYWxvbmlraTEiMCAGA1UE
-                        CxMZTmV0d29yayBPcGVyYXRpb25zIENlbnRlcjEyMDAGA1UEAxMpQVVUSCBTZXJ2
-                        ZXJzIENlcnRpZmljYXRpb24gQXV0aG9yaXR5IDIwMDcxJDAiBgkqhkiG9w0BCQEW
-                        FW5vY2NhMjAwN0BjY2YuYXV0aC5ncjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
-                        AQoCggEBAP2tMiMNcYxm+QfOihQNOIykr+zpI/TP6FLukkmLLoeSr0EagrUcSeeP
-                        yzwrg+qmZIuSsUXlTMYcdS43AII6tBmqzsqoVpf94vsHVR8lpmCQbbbutNT8XBmJ
-                        gIeqYd89Ii5w0x42/PlDZ86K8mz1GNqEZHHUA89WiosysFq4Nz9SWspefvkxfG8e
-                        RAU1IuqlVjzY5r20yc/8Ble/fvb2gOWW3WcB/qvAYakCM97vgHZ2tuv6I5QXvVmx
-                        LJ2fmYo9fySmeGWRdB6+EwArslUaYjMo0Mgbp1AN3NeRTtKuZnQyG+lRZ95Kz32W
-                        1F/j+lO0mr/UTCtDzk716WyZIINZV50CAwEAAaOCAqcwggKjMBIGA1UdEwEB/wQI
-                        MAYBAf8CAQAwCwYDVR0PBAQDAgEGMBEGCWCGSAGG+EIBAQQEAwIABzAdBgNVHQ4E
-                        FgQUelXMuqQMkMkvO39x6c9tkIs+6+QwgcAGA1UdIwSBuDCBtYAUM+UwYIlUa6Jx
-                        aUUhahtnAvkzSeChgZmkgZYwgZMxCzAJBgNVBAYTAkdSMS0wKwYDVQQKEyRBcmlz
-                        dG90bGUgVW5pdmVyc2l0eSBvZiBUaGVzc2Fsb25pa2kxKTAnBgNVBAsTIENlbnRy
-                        YWwgQ29tbXVuaWNhdGlvbiBGYWNpbGl0aWVzMSowKAYDVQQDEyFSb290IENlcnRp
-                        ZmljYXRpb24gQXV0aG9yaXR5IDIwMDGCAQAwIAYDVR0RBBkwF4EVbm9jY2EyMDA3
-                        QGNjZi5hdXRoLmdyMCEGA1UdEgQaMBiBFnJvb3RjYTIwMDFAY2NmLmF1dGguZ3Iw
-                        PQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL3d3dy5hdXRoLmdyL0NBL3Jvb3QyMDAx
-                        L2NybHYxLmRlci5jcmwwggEFBgNVHSAEgf0wgfowgfcGDCsGAQQBvB0CAQEBATCB
-                        5jAsBggrBgEFBQcCARYgaHR0cDovL3d3dy5hdXRoLmdyL0NBL0NQU3YxLmh0bWww
-                        gbUGCCsGAQUFBwICMIGoMDQWLUFyaXN0b3RsZSBVbml2ZXJzaXR5IE5ldHdvcmsg
-                        T3BlcmF0aW9uIENlbnRlcjADAgEBGnBUaGlzIGNlcnRpZmljYXRlIGlzIHN1Ympl
-                        Y3QgdG8gR3JlZWsgbGF3cyBhbmQgb3VyIENQUy4gVGhpcyBDZXJ0aWZpY2F0ZSBt
-                        dXN0IG9ubHkgYmUgdXNlZCBmb3IgYWNhZGVtaWMgcHVycG9zZXMuMA0GCSqGSIb3
-                        DQEBBAUAA4IBAQCMsZf9i6r2ME01vwIvXpCvO9pHNCv9mTYSFhAZcCoyRCPk+Tha
-                        GYmrW4Up8JTsddQNGzr4fzGessc8lYmNr/oCjik/ReVqLEWyNQwFVRVkVx075ODw
-                        PR+HU7RdC5bF1FjqMYiyFBa+qgJinkeWJlArBXCAGwTMWc48OYu/Pwq/ZDIoo4tp
-                        6w+b/QRDUXq7cmlDS11w/mFHrp83tKya7BeVNIddTnEHenUvgIkW2UoXy4oIACFJ
-                        7axd1GHs8q2yNgVhu4WLch6BTmaHq9Sm9bNsD+ZFMZLk0zU2ub4HEYGkemcKIAG9
-                        nvbuPXxIFqOWeSUWRtnJaZz85bvA6dNNIZsz
-                    </ds:X509Certificate>
-                </ds:X509Data>
-            </ds:KeyInfo>
-            <!-- UOA Server Certification Authority  -->
-            <ds:KeyInfo>
-                <ds:X509Data>
-                    <ds:X509Certificate>
-                        MIIFWzCCBEOgAwIBAgIJAK3QBfvQygtLMA0GCSqGSIb3DQEBBQUAMIHOMQswCQYD
-                        VQQGEwJHUjEPMA0GA1UECBMGR3JlZWNlMQ8wDQYDVQQHEwZBdGhlbnMxNTAzBgNV
-                        BAoULE5hdGlvbmFsICYgS2Fwb2Rpc3RyaWFuIFVuaXZlcnNpdHkgb2YgQXRoZW5z
-                        MSIwIAYDVQQLExlOZXR3b3JrIE9wZXJhdGlvbnMgQ2VudGVyMSQwIgYDVQQDExtV
-                        b0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxHDAaBgkqhkiG9w0BCQEWDWNhQG5v
-                        Yy51b2EuZ3IwHhcNMDYxMTA3MTExNjA4WhcNMTYxMTA0MTExNjA4WjCBzjELMAkG
-                        A1UEBhMCR1IxDzANBgNVBAgTBkdyZWVjZTEPMA0GA1UEBxMGQXRoZW5zMTUwMwYD
-                        VQQKFCxOYXRpb25hbCAmIEthcG9kaXN0cmlhbiBVbml2ZXJzaXR5IG9mIEF0aGVu
-                        czEiMCAGA1UECxMZTmV0d29yayBPcGVyYXRpb25zIENlbnRlcjEkMCIGA1UEAxMb
-                        VW9BIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRwwGgYJKoZIhvcNAQkBFg1jYUBu
-                        b2MudW9hLmdyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+TMGWx2c
-                        hKuuC6dVPkOrVw/tQoUhDUsqLgkzZvq48FpjCyTjGVUZaxCQbNmUwWcCMx1HF7e1
-                        2b5yygC7qmYw06y2xbLiFDPQw0tzcQr6c4GVloUj61DZVkrpxrepi7SV5K4dn8v+
-                        8cVXrEQqYZiPdbnQ/8/BsrVHIlk8NyG4agciYUt0l1229kY22v55nVPV+T8gU2+L
-                        XEyxhGCpkt+MXZtx2QmmhId2oYXVwUdAc7sKoD92pAMCSWG+TJ8SzY/+lzuGHbCn
-                        trZU4qtfL7ZsGYJkw2XfzQ1fJLCqSM5xVmobp3NtdvFXl2g6nNgXkzxd556SFbHB
-                        A/E4D3MPdGaOawIDAQABo4IBODCCATQwHQYDVR0OBBYEFInJKUAapXIpThigXx2h
-                        7kScHVu5MIIBAwYDVR0jBIH7MIH4gBSJySlAGqVyKU4YoF8doe5EnB1buaGB1KSB
-                        0TCBzjELMAkGA1UEBhMCR1IxDzANBgNVBAgTBkdyZWVjZTEPMA0GA1UEBxMGQXRo
-                        ZW5zMTUwMwYDVQQKFCxOYXRpb25hbCAmIEthcG9kaXN0cmlhbiBVbml2ZXJzaXR5
-                        IG9mIEF0aGVuczEiMCAGA1UECxMZTmV0d29yayBPcGVyYXRpb25zIENlbnRlcjEk
-                        MCIGA1UEAxMbVW9BIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MRwwGgYJKoZIhvcN
-                        AQkBFg1jYUBub2MudW9hLmdyggkArdAF+9DKC0swDAYDVR0TBAUwAwEB/zANBgkq
-                        hkiG9w0BAQUFAAOCAQEABD5uYkGQ/LxVAvxgodBg232n9Hfe0Lz6oQFmPf3F+bod
-                        wwfOxjCsM97N5nTocJnHp4nePHwUUqgKQGhzn1QEx30pPfOcBz2yJICQow9GrUZo
-                        VZYnl8XwVeFZpQp6nGI4XjeblD/hbek6eyxcPlacdXIdPq+kOO9laFK6EwizoBLl
-                        sqMpAzeBU7/u9yMuyjnmV5c8GCsUzffo2zMFe+f6Bs8Pp+nJMTRsfACyLRMMgVqx
-                        hjmbz4RI9930gh1y7hZcpX+fWQ+Oy6Y1At2P67f3GP+OHkzx+98hzLJA04idkuRa
-                        zUWhPqB9Hfy1fRgyRpWjlWkQSLiTgb3DjoEK2SuILg==
-                    </ds:X509Certificate>
-                </ds:X509Data>
-            </ds:KeyInfo>
-        </shibmd:KeyAuthority>
-    </Extensions>
-    <!--######################### Identity Providers ########################################-->
-    <!-- TEICRETE - HERACLION Test Shib2.0 IdP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" entityID="https://idp.teicrete.gr/idp/shibboleth">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:mace:shibboleth:1.0 urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
-            <Extensions>
-                <shibmd:Scope regexp="false">teicrete.gr</shibmd:Scope>
-            </Extensions>
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:X509Data>
-                        <ds:X509Certificate>
-                            MIIDaDCCAlACBQEAAAAoMA0GCSqGSIb3DQEBBAUAMIGxMQswCQYDVQQGEwJHUjFE
-                            MEIGA1UEChM7SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0
-                            aW9ucyBDZXJ0LiBBdXRob3JpdHkxPzA9BgNVBAMTNlRlY2hub2xvZ2ljYWwgRWR1
-                            Y2F0aW9uYWwgSW5zdGl0dXRpb24gb2YgQ3JldGUgQ0EgMjAwNzEbMBkGCSqGSIb3
-                            DQEJARYMY2FAaGFyaWNhLmdyMB4XDTA4MDYxMTAwMDAwMFoXDTA5MDYxMTIzNTk1
-                            OVowPjELMAkGA1UEBhMCR1IxFTATBgNVBAoTDFRFSSBvZiBDcmV0ZTEYMBYGA1UE
-                            AxMPaWRwLnRlaWNyZXRlLmdyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
-                            AQEAybY5+V7tIBEBKRAKEHWo9sp063jPhZ7UUJZTP7v0hIk2+YUYhx8czj31S448
-                            5vaH8BK1NuOdpZvVBc+y9EHki0O9Fws176ezSqwDRQPvfli5DDzSIbCd1g5eMOjR
-                            UXIVux3Z/L/g4Q1X6KeG+p4rCeZ+6bL/dDu0kryTdOAyXJRWMEjkqgtZWFGMqNq9
-                            hFOa+s4VYhptJCyA8GmbMkvOl8A8UqLcEArUyw09nxXHLVS131rsddmmT4X3DVLn
-                            wBA+rn+5sLsHyon3yS6Qdtb4jMivIpinlpgR+uWHhPpPOy9Lt5UOUqKuI95Dy58Q
-                            BMvVEp5pvgN9qqqEj7X1XjZ0ywIDAQABMA0GCSqGSIb3DQEBBAUAA4IBAQBjY6XT
-                            SE1NyOlDRwAa+/YRT12YBaJrJhuCsQkWKPmlg6ww8IklUO0+5tVnhMq4k1yh9NyJ
-                            MLiBV0MIy8m9NBXKWHEGgP05qiE+dJcB6836FtNck2lk4W1u8gOqrXZ2n97XmxWl
-                            Jj3maXIXVC6g0EDe3RcO11Kd2PGtXKGAcEShtU2cgx4F8/3pOBmFHg+q6ry0hYa+
-                            W5OZeSJSEnbWWGgU82kdszzyGLbKvfDV0b/ZdWuQCwhiLfcxwJDaq+dWzYFv/jWK
-                            HmFppadR32T2l2Zit/GBpzB2kbhGk39b5Q5z/mlcaC3fWxQbzLm5A5OeAdKKQV03
-                            GV/gvRxVmq554ian
-                        </ds:X509Certificate>
-                    </ds:X509Data>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.teicrete.gr:8443/idp/profile/SAML1/SOAP/ArtifactResolution" index="1"/>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.teicrete.gr:8443/idp/profile/SAML2/SOAP/ArtifactResolution" index="2"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
-            <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.teicrete.gr/idp/profile/Shibboleth/SSO"/>
-            <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://idp.teicrete.gr/idp/profile/SAML2/POST/SSO"/>
-            <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign" Location="https://idp.teicrete.gr/idp/profile/SAML2/POST-SimpleSign/SSO"/>
-            <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://idp.teicrete.gr/idp/profile/SAML2/Redirect/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:oasis:names:tc:SAML:2.0:protocol">
-            <Extensions>
-                <shibmd:Scope regexp="false">teicrete.gr</shibmd:Scope>
-            </Extensions>
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:X509Data>
-                        <ds:X509Certificate>
-                            MIIDaDCCAlACBQEAAAAoMA0GCSqGSIb3DQEBBAUAMIGxMQswCQYDVQQGEwJHUjFE
-                            MEIGA1UEChM7SGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJlc2VhcmNoIEluc3RpdHV0
-                            aW9ucyBDZXJ0LiBBdXRob3JpdHkxPzA9BgNVBAMTNlRlY2hub2xvZ2ljYWwgRWR1
-                            Y2F0aW9uYWwgSW5zdGl0dXRpb24gb2YgQ3JldGUgQ0EgMjAwNzEbMBkGCSqGSIb3
-                            DQEJARYMY2FAaGFyaWNhLmdyMB4XDTA4MDYxMTAwMDAwMFoXDTA5MDYxMTIzNTk1
-                            OVowPjELMAkGA1UEBhMCR1IxFTATBgNVBAoTDFRFSSBvZiBDcmV0ZTEYMBYGA1UE
-                            AxMPaWRwLnRlaWNyZXRlLmdyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
-                            AQEAybY5+V7tIBEBKRAKEHWo9sp063jPhZ7UUJZTP7v0hIk2+YUYhx8czj31S448
-                            5vaH8BK1NuOdpZvVBc+y9EHki0O9Fws176ezSqwDRQPvfli5DDzSIbCd1g5eMOjR
-                            UXIVux3Z/L/g4Q1X6KeG+p4rCeZ+6bL/dDu0kryTdOAyXJRWMEjkqgtZWFGMqNq9
-                            hFOa+s4VYhptJCyA8GmbMkvOl8A8UqLcEArUyw09nxXHLVS131rsddmmT4X3DVLn
-                            wBA+rn+5sLsHyon3yS6Qdtb4jMivIpinlpgR+uWHhPpPOy9Lt5UOUqKuI95Dy58Q
-                            BMvVEp5pvgN9qqqEj7X1XjZ0ywIDAQABMA0GCSqGSIb3DQEBBAUAA4IBAQBjY6XT
-                            SE1NyOlDRwAa+/YRT12YBaJrJhuCsQkWKPmlg6ww8IklUO0+5tVnhMq4k1yh9NyJ
-                            MLiBV0MIy8m9NBXKWHEGgP05qiE+dJcB6836FtNck2lk4W1u8gOqrXZ2n97XmxWl
-                            Jj3maXIXVC6g0EDe3RcO11Kd2PGtXKGAcEShtU2cgx4F8/3pOBmFHg+q6ry0hYa+
-                            W5OZeSJSEnbWWGgU82kdszzyGLbKvfDV0b/ZdWuQCwhiLfcxwJDaq+dWzYFv/jWK
-                            HmFppadR32T2l2Zit/GBpzB2kbhGk39b5Q5z/mlcaC3fWxQbzLm5A5OeAdKKQV03
-                            GV/gvRxVmq554ian
-                        </ds:X509Certificate>
-                    </ds:X509Data>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.teicrete.gr:8443/idp/profile/SAML1/SOAP/AttributeQuery"/>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://idp.teicrete.gr:8443/idp/profile/SAML2/SOAP/AttributeQuery"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</NameIDFormat>
-            <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Technological Educational Institute of Crete</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Technological Educational Institute of Crete</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.teicrete.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Network Management Center</SurName>
-            <EmailAddress>noc@teicrete.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- AUTH IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://login.auth.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">auth.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>login.auth.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://login.auth.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://login.auth.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">auth.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>login.auth.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://login.auth.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Aristotle University of Thessaloniki</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Aristotle University of Thessaloniki</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.auth.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Apostolos Papagiannakis</SurName>
-            <EmailAddress>apap@ccf.auth.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- AUTH GRNETBOX IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.ccf.auth.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">auth.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-ccf-auth-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-ccf-auth-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://grnetbox.ccf.auth.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">auth.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-ccf-auth-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-ccf-auth-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Grnet Service Box at AUTH*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Grnet Service Box at AUTH*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.auth.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- NTUA IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:metadata ./schemas/saml-schema-metadata-2.0.xsd urn:mace:shibboleth:metadata:1.0 ./schemas/shibboleth-metadata-1.0.xsd" entityID="https://idp.ntua.gr/shibboleth">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shibmd:Scope>ntua.gr</shibmd:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:X509Data>
-                        <ds:X509Certificate>
-                            MIIEmzCCA4OgAwIBAgIBTDANBgkqhkiG9w0BAQUFADA4MQswCQYDVQQGEwJHUjEN
-                            MAsGA1UEChMETlRVQTEaMBgGA1UEAxMRTlRVQSBDQSAyMDA2LTIwMTgwHhcNMDcw
-                            MzIzMTE0NjAyWhcNMTcwMzIwMTE0NjAyWjBTMQswCQYDVQQGEwJncjENMAsGA1UE
-                            ChMEbnR1YTEQMA4GA1UECxMHc2VydmVyczEWMBQGA1UEAxMNbG9naW4ubnR1YS5n
-                            cjELMAkGA1UEBRMCNzYwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALZ9Qnww
-                            BRe5Kc0EYuVdbkMASUIBc624cYA8QCv9e0S769ePElXSndg7caaSRXG8pN4gkc9+
-                            LUhvqefUt3ihIDsOIcdDW1tGOJ5b9UH9zjRpUCjubKOcYSxaxFjs+15RGhMweSwm
-                            DwYcFLpmDvFC7vbh+X8rt5ri4S3YSpT9eZdVAgMBAAGjggIXMIICEzAJBgNVHRME
-                            AjAAMEwGA1UdIARFMEMwDQYLKwYBBAGHSQMCAQEwMgYLKwYBBAGHSQMBAQEwIzAh
-                            BggrBgEFBQcCARYVaHR0cDovL2NhLm50dWEuZ3IvY3BzMBEGCWCGSAGG+EIBAQQE
-                            AwIGQDALBgNVHQ8EBAMCBPAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwIQYJYIZIAYb4
-                            QgENBBQWEldXVy1TZXJ2ZXIgb2YgTlRVQTAdBgNVHQ4EFgQUiEqRWLpVT7bpJ6K4
-                            9EfC0UPUGpkwWwYDVR0jBFQwUoAUfNqsx+A0dIrLwYwYsWoolK95CJWhN6Q1MDMx
-                            CzAJBgNVBAYTAkdSMQ0wCwYDVQQKEwROVFVBMRUwEwYDVQQDEwxOVFVBIFJPT1Qg
-                            Q0GCAQIwLwYDVR0RBCgwJoEPbm9jQG5vYy5udHVhLmdyhwSTZt7dgg1sb2dpbi5u
-                            dHVhLmdyMBUGA1UdEgQOMAyBCmNhQG50dWEuZ3IwMgYJYIZIAYb4QgEEBCUWI2h0
-                            dHA6Ly9jYS5udHVhLmdyL3B1Yi9jcmwvY2FjcmwuY3JsMDIGCWCGSAGG+EIBAwQl
-                            FiNodHRwOi8vY2EubnR1YS5nci9wdWIvY3JsL2NhY3JsLmNybDA0BgNVHR8ELTAr
-                            MCmgJ6AlhiNodHRwOi8vY2EubnR1YS5nci9wdWIvY3JsL2NhY3JsLmNybDANBgkq
-                            hkiG9w0BAQUFAAOCAQEAXHXewa99f7iIlhvgdMWp6NXfT9TG9FCGWhtO2V5GeUii
-                            2TBYddAH6+tYrVlJ4cN6p444Dhvin8eVA/Y0WfeVll4YasViq6zxSH9FLZkszbKr
-                            f7CfFyYqChsjcrn/oGJWsfsqGqMGPfdAQSkkpyGOHVMMARCY+gP0S973yK89frkA
-                            QGG+elGtKx786IeEEbm4YS4Z0VMkD3obJk/QRmiy6lvHadODGcpiGLCZq9G1Es2i
-                            mcNedy126VjwlNcg6XBbl0shvgGkjqzA89TPFY/FwtklJGfNl8SP88p8I41CsM8Q
-                            /PFGb40C/OoiQncMfOelJJXz6O+w4jNGdUoJdTCpdQ==
-                        </ds:X509Certificate>
-                    </ds:X509Data>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService index="1" Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://login.ntua.gr:8443/shibboleth-idp/Artifact"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://login.ntua.gr/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shibmd:Scope>ntua.gr</shibmd:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:X509Data>
-                        <ds:X509Certificate>
-                            MIIEmzCCA4OgAwIBAgIBTDANBgkqhkiG9w0BAQUFADA4MQswCQYDVQQGEwJHUjEN
-                            MAsGA1UEChMETlRVQTEaMBgGA1UEAxMRTlRVQSBDQSAyMDA2LTIwMTgwHhcNMDcw
-                            MzIzMTE0NjAyWhcNMTcwMzIwMTE0NjAyWjBTMQswCQYDVQQGEwJncjENMAsGA1UE
-                            ChMEbnR1YTEQMA4GA1UECxMHc2VydmVyczEWMBQGA1UEAxMNbG9naW4ubnR1YS5n
-                            cjELMAkGA1UEBRMCNzYwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBALZ9Qnww
-                            BRe5Kc0EYuVdbkMASUIBc624cYA8QCv9e0S769ePElXSndg7caaSRXG8pN4gkc9+
-                            LUhvqefUt3ihIDsOIcdDW1tGOJ5b9UH9zjRpUCjubKOcYSxaxFjs+15RGhMweSwm
-                            DwYcFLpmDvFC7vbh+X8rt5ri4S3YSpT9eZdVAgMBAAGjggIXMIICEzAJBgNVHRME
-                            AjAAMEwGA1UdIARFMEMwDQYLKwYBBAGHSQMCAQEwMgYLKwYBBAGHSQMBAQEwIzAh
-                            BggrBgEFBQcCARYVaHR0cDovL2NhLm50dWEuZ3IvY3BzMBEGCWCGSAGG+EIBAQQE
-                            AwIGQDALBgNVHQ8EBAMCBPAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwIQYJYIZIAYb4
-                            QgENBBQWEldXVy1TZXJ2ZXIgb2YgTlRVQTAdBgNVHQ4EFgQUiEqRWLpVT7bpJ6K4
-                            9EfC0UPUGpkwWwYDVR0jBFQwUoAUfNqsx+A0dIrLwYwYsWoolK95CJWhN6Q1MDMx
-                            CzAJBgNVBAYTAkdSMQ0wCwYDVQQKEwROVFVBMRUwEwYDVQQDEwxOVFVBIFJPT1Qg
-                            Q0GCAQIwLwYDVR0RBCgwJoEPbm9jQG5vYy5udHVhLmdyhwSTZt7dgg1sb2dpbi5u
-                            dHVhLmdyMBUGA1UdEgQOMAyBCmNhQG50dWEuZ3IwMgYJYIZIAYb4QgEEBCUWI2h0
-                            dHA6Ly9jYS5udHVhLmdyL3B1Yi9jcmwvY2FjcmwuY3JsMDIGCWCGSAGG+EIBAwQl
-                            FiNodHRwOi8vY2EubnR1YS5nci9wdWIvY3JsL2NhY3JsLmNybDA0BgNVHR8ELTAr
-                            MCmgJ6AlhiNodHRwOi8vY2EubnR1YS5nci9wdWIvY3JsL2NhY3JsLmNybDANBgkq
-                            hkiG9w0BAQUFAAOCAQEAXHXewa99f7iIlhvgdMWp6NXfT9TG9FCGWhtO2V5GeUii
-                            2TBYddAH6+tYrVlJ4cN6p444Dhvin8eVA/Y0WfeVll4YasViq6zxSH9FLZkszbKr
-                            f7CfFyYqChsjcrn/oGJWsfsqGqMGPfdAQSkkpyGOHVMMARCY+gP0S973yK89frkA
-                            QGG+elGtKx786IeEEbm4YS4Z0VMkD3obJk/QRmiy6lvHadODGcpiGLCZq9G1Es2i
-                            mcNedy126VjwlNcg6XBbl0shvgGkjqzA89TPFY/FwtklJGfNl8SP88p8I41CsM8Q
-                            /PFGb40C/OoiQncMfOelJJXz6O+w4jNGdUoJdTCpdQ==
-                        </ds:X509Certificate>
-                    </ds:X509Data>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://login.ntua.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">National Technical University of Athens</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">National Technical University of Athens</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.ntua.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Network Management Center</SurName>
-            <EmailAddress>noc@noc.ntua.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- NTUA GRNETBOX IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.noc.ntua.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">ntua.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-noc-ntua-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-noc-ntua-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://grnetbox.noc.ntua.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">ntua.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-noc-ntua-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-noc-ntua-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Grnet Service Box at NTUA*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Grnet Service Box at NTUA*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.ntua.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- CTI GRNETBOX IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.cti.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">cti.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-cti-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-cti-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://grnetbox.cti.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">cti.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-cti-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-cti-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Computer Technology Institute*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Computer Technology Institute*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.cti.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- AUA GRNETBOX IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.aua.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">aua.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-aua-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-aua-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://grnetbox.aua.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">aua.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-aua-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-aua-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Agricultural University of Athens*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Agricultural University of Athens*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.aua.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- TEIATH GRNETBOX IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.teiath.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">teiath.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-teiath-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-teiath-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://grnetbox.teiath.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">teiath.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-teiath-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-teiath-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Technological Educational Institute of Athens*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Technological Educational Institute of Athens*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.teiath.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- TEISER GRNETBOX IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.teiser.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">teiser.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-teiser-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-teiser-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://grnetbox.teiser.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">teiser.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-teiser-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-teiser-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Technological Educational Institute of Serres*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Technological Educational Institute of Serres*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.teiser.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- TEIMES GRNETBOX IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.teimes.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">teimes.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-teimes-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-teimes-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://grnetbox.teimes.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">teimes.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-teimes-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-teimes-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Technological Educational Institute of Messolonghi*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Technological Educational Institute of Messolonghi*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.teimes.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- TEICRETE CHANIA GRNETBOX IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.chania.teicrete.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">chania.teicrete.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-chania-teicrete-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-chania-teicrete-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://grnetbox.chania.teicrete.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">chania.teicrete.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-chania-teicrete-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-chania-teicrete-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Technological Educational Institute of Crete-Chania*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Technological Educational Institute of Crete-Chania*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.chania.teicrete.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- AEGEAN IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.aegean.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">aegean.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-aegean-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-aegean-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://grnetbox.aegean.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">aegean.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-aegean-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-aegean-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">University of Aegean*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">University of Aegean*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.agean.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- DUTH IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.duth.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">duth.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-duth-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-duth-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://grnetbox.duth.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">duth.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-duth-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-duth-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Democritus University of Thrace*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Democritus University of Thrace*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.duth.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- GRNET-BB IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://blackbox.admin.grnet.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0" regexp="true">(grnet-hq\.)?admin\.grnet\.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>blackbox-admin-grnet-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://blackbox-admin-grnet-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://blackbox.admin.grnet.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0" regexp="true">(grnet-hq\.)?admin\.grnet\.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>blackbox-admin-grnet-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://blackbox-admin-grnet-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Grnet Service Box*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Grnet Service Box*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.grnet.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- HUA IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.hua.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">hua.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-hua-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-hua-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://grnetbox.hua.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">hua.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-hua-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-hua-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Harokopion University*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Harokopion University*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.hua.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- TUC IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.tuc.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">tuc.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-tuc-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-tuc-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://grnetbox.tuc.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">tuc.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-tuc-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-tuc-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Technical University of Crete*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Technical University of Crete*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.tuc.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- UOA GRNETBOX IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.noc.uoa.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">uoa.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-noc-uoa-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-noc-uoa-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://grnetbox.noc.uoa.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">uoa.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-noc-uoa-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-noc-uoa-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">University of Athens*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">University of Athens*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.uoa.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- VNOC TEST IDP (@UOA) -->
-    <EntityDescriptor entityID="https://idp.edunet.gr/shibboleth">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <!-- This is a Shibboleth extension to express attribute scope rules. -->
-                <shibmd:Scope>uoa.gr</shibmd:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:X509Data>
-                        <ds:X509Certificate>
-                            MIIFZDCCBEygAwIBAgIBJDANBgkqhkiG9w0BAQQFADCBzjELMAkGA1UEBhMCR1Ix
-                            DzANBgNVBAgTBkdyZWVjZTEPMA0GA1UEBxMGQXRoZW5zMTUwMwYDVQQKFCxOYXRp
-                            b25hbCAmIEthcG9kaXN0cmlhbiBVbml2ZXJzaXR5IG9mIEF0aGVuczEiMCAGA1UE
-                            CxMZTmV0d29yayBPcGVyYXRpb25zIENlbnRlcjEkMCIGA1UEAxMbVW9BIENlcnRp
-                            ZmljYXRpb24gQXV0aG9yaXR5MRwwGgYJKoZIhvcNAQkBFg1jYUBub2MudW9hLmdy
-                            MB4XDTA3MDkyODE2NTkxM1oXDTA4MDkyNzE2NTkxM1owgbQxCzAJBgNVBAYTAkdS
-                            MQ8wDQYDVQQIEwZHcmVlY2UxNTAzBgNVBAoULE5hdGlvbmFsICYgS2Fwb2Rpc3Ry
-                            aWFuIFVuaXZlcnNpdHkgb2YgQXRoZW5zMSIwIAYDVQQLExlOZXR3b3JrIE9wZXJh
-                            dGlvbnMgQ2VudGVyMRYwFAYDVQQDEw1pZHAuZWR1bmV0LmdyMSEwHwYJKoZIhvcN
-                            AQkBFhJjZXJ0QG5vYy5lZHVuZXQuZ3IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
-                            ggEKAoIBAQCxtGa68vqsXjR+NZ/reSO4GoY9JpPlif0VojNrdciqMgYx9UcLKEZS
-                            jdDkrJ/Qs6VtqNQJWknAhB0zkopJFA2I1F7RVeZm5WG0tnv51KLj1h4EIBuMWBAs
-                            qosHuViwUOx5LINRri4nBMQ1IcJTMWoEY16ZSWSN8zK4mjUlFrZxSld+aQJ9DhEB
-                            HpPPs9G3QbA72qH1ATXIa/TcYZhZMEWKTPA1cR+FRpcw7G6J+xarqdQAD+vUqYwt
-                            6739whGhff6vwfnhngYW2M4mO3jyrwZTMb0aGd1NiP2CD/BdBWyqAm+HDkjCu+To
-                            i6UgIYRNXhXoEWJZjeCEM2YuCNqVvm9/AgMBAAGjggFjMIIBXzAJBgNVHRMEAjAA
-                            MCwGCWCGSAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAd
-                            BgNVHQ4EFgQUtI2LRkqHnm+W9hIsLU5RfKWrDKAwggEDBgNVHSMEgfswgfiAFInJ
-                            KUAapXIpThigXx2h7kScHVu5oYHUpIHRMIHOMQswCQYDVQQGEwJHUjEPMA0GA1UE
-                            CBMGR3JlZWNlMQ8wDQYDVQQHEwZBdGhlbnMxNTAzBgNVBAoULE5hdGlvbmFsICYg
-                            S2Fwb2Rpc3RyaWFuIFVuaXZlcnNpdHkgb2YgQXRoZW5zMSIwIAYDVQQLExlOZXR3
-                            b3JrIE9wZXJhdGlvbnMgQ2VudGVyMSQwIgYDVQQDExtVb0EgQ2VydGlmaWNhdGlv
-                            biBBdXRob3JpdHkxHDAaBgkqhkiG9w0BCQEWDWNhQG5vYy51b2EuZ3KCCQCt0AX7
-                            0MoLSzANBgkqhkiG9w0BAQQFAAOCAQEA4NyPUpqWOK4kkUcT0B7gM8m3YA4y0Im2
-                            xfFirfUIv1e6WNgav3EncTjl9j19CG4KakzAA1VdZImkHcHBipkN4KB245GN2Qi5
-                            3UvFQVr7Y/ZKyUbCgMOsX9LkYg9+WGWTP+X5O3Im52YNxG3oxHxIdgNNvAmpEHQ9
-                            aAYG0fC1kJvuciMVewbVzmBEhD8rgQPLGFS3thc/R9e9DukzakyXMCDUcV6oRc78
-                            LW77JWXnqdBdfWabbyWFePuqLYYqh6awNH3W1BzTa1sr1hTJq5kqdcjai8ss1kQx
-                            F0LsfdHuQ5WQF3xM/eWvIrXnGH+yhN3/+VCKjjkfg7dgfgcap7yq9g==
-                        </ds:X509Certificate>
-                    </ds:X509Data>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <!-- This tells SPs where/how to resolve SAML 1.x artifacts into SAML assertions. -->
-            <ArtifactResolutionService index="1" Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://login.edunet.gr:8443/shibboleth-idp/Artifact"/>
-            <!-- This tells SPs that you support only the Shib handle format. -->
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <!-- This tells SPs how and where to request authentication. -->
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://login.edunet.gr/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shibmd:Scope>uoa.gr</shibmd:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:X509Data>
-                        <ds:X509Certificate>
-                            MIIFZDCCBEygAwIBAgIBJDANBgkqhkiG9w0BAQQFADCBzjELMAkGA1UEBhMCR1Ix
-                            DzANBgNVBAgTBkdyZWVjZTEPMA0GA1UEBxMGQXRoZW5zMTUwMwYDVQQKFCxOYXRp
-                            b25hbCAmIEthcG9kaXN0cmlhbiBVbml2ZXJzaXR5IG9mIEF0aGVuczEiMCAGA1UE
-                            CxMZTmV0d29yayBPcGVyYXRpb25zIENlbnRlcjEkMCIGA1UEAxMbVW9BIENlcnRp
-                            ZmljYXRpb24gQXV0aG9yaXR5MRwwGgYJKoZIhvcNAQkBFg1jYUBub2MudW9hLmdy
-                            MB4XDTA3MDkyODE2NTkxM1oXDTA4MDkyNzE2NTkxM1owgbQxCzAJBgNVBAYTAkdS
-                            MQ8wDQYDVQQIEwZHcmVlY2UxNTAzBgNVBAoULE5hdGlvbmFsICYgS2Fwb2Rpc3Ry
-                            aWFuIFVuaXZlcnNpdHkgb2YgQXRoZW5zMSIwIAYDVQQLExlOZXR3b3JrIE9wZXJh
-                            dGlvbnMgQ2VudGVyMRYwFAYDVQQDEw1pZHAuZWR1bmV0LmdyMSEwHwYJKoZIhvcN
-                            AQkBFhJjZXJ0QG5vYy5lZHVuZXQuZ3IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
-                            ggEKAoIBAQCxtGa68vqsXjR+NZ/reSO4GoY9JpPlif0VojNrdciqMgYx9UcLKEZS
-                            jdDkrJ/Qs6VtqNQJWknAhB0zkopJFA2I1F7RVeZm5WG0tnv51KLj1h4EIBuMWBAs
-                            qosHuViwUOx5LINRri4nBMQ1IcJTMWoEY16ZSWSN8zK4mjUlFrZxSld+aQJ9DhEB
-                            HpPPs9G3QbA72qH1ATXIa/TcYZhZMEWKTPA1cR+FRpcw7G6J+xarqdQAD+vUqYwt
-                            6739whGhff6vwfnhngYW2M4mO3jyrwZTMb0aGd1NiP2CD/BdBWyqAm+HDkjCu+To
-                            i6UgIYRNXhXoEWJZjeCEM2YuCNqVvm9/AgMBAAGjggFjMIIBXzAJBgNVHRMEAjAA
-                            MCwGCWCGSAGG+EIBDQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAd
-                            BgNVHQ4EFgQUtI2LRkqHnm+W9hIsLU5RfKWrDKAwggEDBgNVHSMEgfswgfiAFInJ
-                            KUAapXIpThigXx2h7kScHVu5oYHUpIHRMIHOMQswCQYDVQQGEwJHUjEPMA0GA1UE
-                            CBMGR3JlZWNlMQ8wDQYDVQQHEwZBdGhlbnMxNTAzBgNVBAoULE5hdGlvbmFsICYg
-                            S2Fwb2Rpc3RyaWFuIFVuaXZlcnNpdHkgb2YgQXRoZW5zMSIwIAYDVQQLExlOZXR3
-                            b3JrIE9wZXJhdGlvbnMgQ2VudGVyMSQwIgYDVQQDExtVb0EgQ2VydGlmaWNhdGlv
-                            biBBdXRob3JpdHkxHDAaBgkqhkiG9w0BCQEWDWNhQG5vYy51b2EuZ3KCCQCt0AX7
-                            0MoLSzANBgkqhkiG9w0BAQQFAAOCAQEA4NyPUpqWOK4kkUcT0B7gM8m3YA4y0Im2
-                            xfFirfUIv1e6WNgav3EncTjl9j19CG4KakzAA1VdZImkHcHBipkN4KB245GN2Qi5
-                            3UvFQVr7Y/ZKyUbCgMOsX9LkYg9+WGWTP+X5O3Im52YNxG3oxHxIdgNNvAmpEHQ9
-                            aAYG0fC1kJvuciMVewbVzmBEhD8rgQPLGFS3thc/R9e9DukzakyXMCDUcV6oRc78
-                            LW77JWXnqdBdfWabbyWFePuqLYYqh6awNH3W1BzTa1sr1hTJq5kqdcjai8ss1kQx
-                            F0LsfdHuQ5WQF3xM/eWvIrXnGH+yhN3/+VCKjjkfg7dgfgcap7yq9g==
-                        </ds:X509Certificate>
-                    </ds:X509Data>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://login.edunet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Test Identity Provider</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">edunet.gr (Test Identity Provider)</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">https://login.edunet.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Technical Support</SurName>
-            <EmailAddress>aai-support@grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- UOI IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.uoi.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">uoi.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-uoi-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-uoi-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://grnetbox.uoi.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">uoi.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-uoi-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-uoi-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">University of Ioannina*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">University of Ioannina*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.uoi.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- UOC IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.ucnet.uoc.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">uoc.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-ucnet-uoc-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-ucnet-uoc-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://grnetbox.ucnet.uoc.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">uoc.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-ucnet-uoc-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-ucnet-uoc-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">University of Crete*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">University of Crete*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.uoc.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- UOP IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.uop.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">uop.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-uop-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-uop-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://grnetbox.uop.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">uop.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-uop-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-uop-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">University of Peloponnese*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">University of Peloponnese*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.uop.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- OPA IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.aueb.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">aueb.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-aueb-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-aueb-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://grnetbox.aueb.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">aueb.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-aueb-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-aueb-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Athens University of Economics and Business*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Athens University of Economics and Business*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.aueb.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- UTH IDP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.uth.gr/shibboleth-idp/" validUntil="2010-01-01T00:00:00Z">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">uth.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-uth-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-uth-gr.aai.grnet.gr:8443/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://grnetbox.uth.gr:443/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0">uth.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-uth-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://grnetbox-uth-gr.aai.grnet.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">University of Thessaly*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">University of Thessaly*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.uth.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- UPATRAS IDP -->
-    <EntityDescriptor entityID="https://idp.upatras.gr/shibboleth-idp/">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0" regexp="false">upatras.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:KeyName>upatras.gr</ds:KeyName>
-                    <ds:X509Data>
-                        <ds:X509Certificate>
-                            MIIEizCCA3OgAwIBAgIBADANBgkqhkiG9w0BAQQFADCBjzELMAkGA1UEBhMCR1Ix
-                            DzANBgNVBAgTBkFjaGFpYTEOMAwGA1UEBxMFUGF0cmExEDAOBgNVBAoTB1VQYXRy
-                            YXMxEDAOBgNVBAsTB1VQYXRyYXMxFzAVBgNVBAMTDmlkcC51cGF0cmFzLmdyMSIw
-                            IAYJKoZIhvcNAQkBFhNoZWxwZGVza0B1cGF0cmFzLmdyMB4XDTA3MDcwOTExMjkz
-                            MVoXDTE3MDcwNjExMjkzMVowgY8xCzAJBgNVBAYTAkdSMQ8wDQYDVQQIEwZBY2hh
-                            aWExDjAMBgNVBAcTBVBhdHJhMRAwDgYDVQQKEwdVUGF0cmFzMRAwDgYDVQQLEwdV
-                            UGF0cmFzMRcwFQYDVQQDEw5pZHAudXBhdHJhcy5ncjEiMCAGCSqGSIb3DQEJARYT
-                            aGVscGRlc2tAdXBhdHJhcy5ncjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
-                            ggEBAKbJfWG+WoxO1IxagYKV+K3UGD7T0KAEh+bgmmQLJ3ouwK9loQt2HGJYcOVZ
-                            KN5mH82vPWcjOXUVZw6w8m+eSL82rRcd4Zzo9mBm2yh9i5+yTFNJxo2ToA1bKNEF
-                            RPgn1zioiG1Y5HEwOkUq3ahkgvAC+hWxRptqBOJDigTcAkCtZQofLenolKW6mAXF
-                            moM7Cwn9T7Ez7jWjVtmH155aIoSzCF+JUvEemQ8D7X8WKpFALsfDcnqXGIcKBYug
-                            vi77+OKou/vfuIZdtzFuzQ4MMcNLmnJrNm5HMBAoh8oDQAKQ9XlUa8jlWz5BCbDM
-                            SE30U1ATpsjDe02swjqlUyfXozECAwEAAaOB7zCB7DAdBgNVHQ4EFgQUXS4Qbfxy
-                            Hqdv9yZIZTxuAsEh0bgwgbwGA1UdIwSBtDCBsYAUXS4QbfxyHqdv9yZIZTxuAsEh
-                            0bihgZWkgZIwgY8xCzAJBgNVBAYTAkdSMQ8wDQYDVQQIEwZBY2hhaWExDjAMBgNV
-                            BAcTBVBhdHJhMRAwDgYDVQQKEwdVUGF0cmFzMRAwDgYDVQQLEwdVUGF0cmFzMRcw
-                            FQYDVQQDEw5pZHAudXBhdHJhcy5ncjEiMCAGCSqGSIb3DQEJARYTaGVscGRlc2tA
-                            dXBhdHJhcy5ncoIBADAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBAUAA4IBAQBE
-                            a/Dl7Eeyhrrw5iWsIlClDM5wUkxJrCWEM1V5DvSrLkbjP7Pef2bn6u2j3PGxLizs
-                            pTqftYK2FdJt7ZBkbkA310OK7plsbzQyWiiEqsJH7gGvplVFVHVr7EBVNPlscFrj
-                            MeISJzslFW11cLyji+gxNU3e95VdqMez33FNz2B+qywYgBKXlNyJ7qy85zktFD5x
-                            kochqgcJR6sUkmjlILSMHhz0U1XqxVel3D1CP8B5v745aCUXzeT5mE6iSf+g4J0G
-                            UNL9Iya1q1punf71+xHH/99DWx8FlNYxNrjl3NMi0TfSoF61ZzEgW2yUh5/2y435
-                            0BaaMSLaXxTPyAz1DJwA
-                        </ds:X509Certificate>
-                    </ds:X509Data>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.upatras.gr/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://idp.upatras.gr/shibboleth-idp/SSO"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shib:Scope xmlns:shib="urn:mace:shibboleth:metadata:1.0" regexp="false">upatras.gr</shib:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
-                    <ds:KeyName>upatras.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo>
-                    <ds:X509Data>
-                        <ds:X509Certificate>
-                            MIIEizCCA3OgAwIBAgIBADANBgkqhkiG9w0BAQQFADCBjzELMAkGA1UEBhMCR1Ix
-                            DzANBgNVBAgTBkFjaGFpYTEOMAwGA1UEBxMFUGF0cmExEDAOBgNVBAoTB1VQYXRy
-                            YXMxEDAOBgNVBAsTB1VQYXRyYXMxFzAVBgNVBAMTDmlkcC51cGF0cmFzLmdyMSIw
-                            IAYJKoZIhvcNAQkBFhNoZWxwZGVza0B1cGF0cmFzLmdyMB4XDTA3MDcwOTExMjkz
-                            MVoXDTE3MDcwNjExMjkzMVowgY8xCzAJBgNVBAYTAkdSMQ8wDQYDVQQIEwZBY2hh
-                            aWExDjAMBgNVBAcTBVBhdHJhMRAwDgYDVQQKEwdVUGF0cmFzMRAwDgYDVQQLEwdV
-                            UGF0cmFzMRcwFQYDVQQDEw5pZHAudXBhdHJhcy5ncjEiMCAGCSqGSIb3DQEJARYT
-                            aGVscGRlc2tAdXBhdHJhcy5ncjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
-                            ggEBAKbJfWG+WoxO1IxagYKV+K3UGD7T0KAEh+bgmmQLJ3ouwK9loQt2HGJYcOVZ
-                            KN5mH82vPWcjOXUVZw6w8m+eSL82rRcd4Zzo9mBm2yh9i5+yTFNJxo2ToA1bKNEF
-                            RPgn1zioiG1Y5HEwOkUq3ahkgvAC+hWxRptqBOJDigTcAkCtZQofLenolKW6mAXF
-                            moM7Cwn9T7Ez7jWjVtmH155aIoSzCF+JUvEemQ8D7X8WKpFALsfDcnqXGIcKBYug
-                            vi77+OKou/vfuIZdtzFuzQ4MMcNLmnJrNm5HMBAoh8oDQAKQ9XlUa8jlWz5BCbDM
-                            SE30U1ATpsjDe02swjqlUyfXozECAwEAAaOB7zCB7DAdBgNVHQ4EFgQUXS4Qbfxy
-                            Hqdv9yZIZTxuAsEh0bgwgbwGA1UdIwSBtDCBsYAUXS4QbfxyHqdv9yZIZTxuAsEh
-                            0bihgZWkgZIwgY8xCzAJBgNVBAYTAkdSMQ8wDQYDVQQIEwZBY2hhaWExDjAMBgNV
-                            BAcTBVBhdHJhMRAwDgYDVQQKEwdVUGF0cmFzMRAwDgYDVQQLEwdVUGF0cmFzMRcw
-                            FQYDVQQDEw5pZHAudXBhdHJhcy5ncjEiMCAGCSqGSIb3DQEJARYTaGVscGRlc2tA
-                            dXBhdHJhcy5ncoIBADAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBAUAA4IBAQBE
-                            a/Dl7Eeyhrrw5iWsIlClDM5wUkxJrCWEM1V5DvSrLkbjP7Pef2bn6u2j3PGxLizs
-                            pTqftYK2FdJt7ZBkbkA310OK7plsbzQyWiiEqsJH7gGvplVFVHVr7EBVNPlscFrj
-                            MeISJzslFW11cLyji+gxNU3e95VdqMez33FNz2B+qywYgBKXlNyJ7qy85zktFD5x
-                            kochqgcJR6sUkmjlILSMHhz0U1XqxVel3D1CP8B5v745aCUXzeT5mE6iSf+g4J0G
-                            UNL9Iya1q1punf71+xHH/99DWx8FlNYxNrjl3NMi0TfSoF61ZzEgW2yUh5/2y435
-                            0BaaMSLaXxTPyAz1DJwA
-                        </ds:X509Certificate>
-                    </ds:X509Data>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://idp.upatras.gr:8443/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">University of Patras</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">University of Patras</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.upatras.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>UPnet Helpdesk</SurName>
-            <EmailAddress>helpdesk@upatras.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- eduGAIN IdP -->
-    <EntityDescriptor entityID="urn:mace:switch.ch:aaitest:">
-        <IDPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol urn:mace:shibboleth:1.0">
-            <Extensions>
-                <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">edugain.switch.ch</shibmd:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
-                    <ds:KeyName>edugain-login.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <ArtifactResolutionService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://edugain-login.grnet.gr/shibboleth-idp/Artifact" index="1"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <SingleSignOnService Binding="urn:mace:shibboleth:1.0:profiles:AuthnRequest" Location="https://edugain-login.grnet.gr/ShiBE-R/ShiBEWebSSORequester"/>
-        </IDPSSODescriptor>
-        <AttributeAuthorityDescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <Extensions>
-                <shibmd:Scope xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" regexp="false">edugain.switch.ch</shibmd:Scope>
-            </Extensions>
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
-                    <ds:KeyName>edugain-login.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <AttributeService Binding="urn:oasis:names:tc:SAML:1.0:bindings:SOAP-binding" Location="https://this.is.not.used/shibboleth-idp/AA"/>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-        </AttributeAuthorityDescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">EduGAIN Bridging Element</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">EduGAIN Bridging Element</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.switch.ch/aai/help/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>GRNETaai Team</SurName>
-            <EmailAddress>aai@grnet.gr</EmailAddress>
-        </ContactPerson>
-        <ContactPerson contactType="support">
-            <SurName>GRNETaai Team</SurName>
-            <EmailAddress>aai@grnet.gr</EmailAddress>
-        </ContactPerson>
-        <ContactPerson contactType="administrative">
-            <SurName>GRNETaai Team</SurName>
-            <EmailAddress>aai@grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!--############################## Service Providers ####################################-->
-    <!-- SP for rts.grnet.gr -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://rts.grnet.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>rts.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://rts.grnet.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="http://rts.grnet.gr/Shibboleth.sso/SAML/Artifact"/>
-            <AssertionConsumerService index="2" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://rts.grnet.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="3" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://rts.grnet.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">rts.grnet.gr</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">rts.grnet.gr</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.grnet.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Apostolos Papagiannakis</SurName>
-            <EmailAddress>apap@ccf.auth.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- SP for edugain-login.grnet.gr -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://edugain-login.grnet.gr" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>edugain-login.grnet.gr</ds:KeyName>
-                    <ds:X509Data>
-                        <ds:X509Certificate>
-                            MIIHKzCCBhOgAwIBAgIFAQAAACIwDQYJKoZIhvcNAQEEBQAwgZkxCzAJBgNVBAYT
-                            AkdSMS4wLAYDVQQKEyVHcmVlayBSZXNlYXJjaCBhbmQgVGVjaG5vbG9neSBOZXR3
-                            b3JrMTMwMQYDVQQDEypHUk5FVCBTZXJ2ZXJzIENlcnRpZmljYXRpb24gQXV0aG9y
-                            aXR5IDIwMDQxJTAjBgkqhkiG9w0BCQEWFnNlcnZlcnNjYTIwMDRAZ3JuZXQuZ3Iw
-                            HhcNMDcwNTE3MDAwMDAwWhcNMDgwNTE2MjM1OTU5WjBUMQswCQYDVQQGEwJHUjEu
-                            MCwGA1UEChMlR3JlZWsgUmVzZWFyY2ggYW5kIFRlY2hub2xvZ3kgTmV0d29yazEV
-                            MBMGA1UEAxMMcnRzLmdybmV0LmdyMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB
-                            gQC9lQUIftdwTIGI0tOwJleHv+zepge8uMi37W5MvBu1iaHzFTEVHq7zJbcDEo/s
-                            TOQI1KKJjekGEcAYJDrPoCNsojjL9NqdrdKF0XMc9GvcVbpqA7bxDcArcm3chVrC
-                            yiHgs4z+sdjHhT1NsSkUgVx54EByfDDKyB5K3E3AOcP1bwIDAQABo4IEQDCCBDww
-                            DAYDVR0TAQH/BAIwADARBglghkgBhvhCAQEEBAMCBsAwDgYDVR0PAQH/BAQDAgTw
-                            MCAGA1UdJQEB/wQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATAdBgNVHQ4EFgQU0Rbr
-                            V6ndcEadlxnLCH/TBknH58UwgZ0GA1UdIwSBlTCBkoAUInh4CebzcDDv8akQ1M1I
-                            yBKScO2hc6RxMG8xCzAJBgNVBAYTAkdSMS4wLAYDVQQKEyVHcmVlayBSZXNlYXJj
-                            aCBhbmQgVGVjaG5vbG9neSBOZXR3b3JrMTAwLgYDVQQDEydHUk5FVCBSb290IENl
-                            cnRpZmljYXRpb24gQXV0aG9yaXR5IDIwMDSCBQEAAAAAMAkGA1UdEQQCMAAwIQYD
-                            VR0SBBowGIEWc2VydmVyc2NhMjAwNEBncm5ldC5ncjA5BggrBgEFBQcBAQQtMCsw
-                            KQYIKwYBBQUHMAGGHWh0dHA6Ly9vY3NwLmNhLmdybmV0LmdyOjg4MDAvMEoGA1Ud
-                            HwRDMEEwP6A9oDuGOWh0dHA6Ly9jcmx2MS5jYS5ncm5ldC5nci9Hcm5ldFNlcnZl
-                            cnNDQTIwMDQvY3JsdjEuZGVyLmNybDCBmgYJYIZIAYb4QgENBIGMFoGJVGhpcyBj
-                            ZXJ0aWZpY2F0ZSBpcyBzdWJqZWN0IHRvIEdyZWVrIGxhd3MgYW5kIG91ciBDUFMu
-                            IFRoaXMgQ2VydGlmaWNhdGUgbXVzdCBvbmx5IGJlIHVzZWQgZm9yIGFjYWRlbWlj
-                            LCByZXNlYXJjaCBvciBlZHVjYXRpb25hbCBwdXJwb3Nlcy4wOgYJYIZIAYb4QgEC
-                            BC0WK2h0dHA6Ly9jcmx2MS5jYS5ncm5ldC5nci9Hcm5ldFNlcnZlcnNDQTIwMDQw
-                            IwYJYIZIAYb4QgEEBBYWFG5zX3Jldm9rZV9xdWVyeS5waHA/ME0GCWCGSAGG+EIB
-                            CARAFj5odHRwOi8vd3d3LmNhLmdybmV0LmdyL2RvY3VtZW50cy9Hcm5ldFNlcnZl
-                            cnNDQTIwMDQvQ1AxLjAuaHRtbDCCASQGA1UdIASCARswggEXMIIBEwYMKwYBBAGB
-                            gQMBAgEAMIIBATA1BggrBgEFBQcCARYpaHR0cDovL3d3dy5jYS5ncm5ldC5nci9k
-                            b2N1bWVudHMvQ1BTLmh0bWwwgccGCCsGAQUFBwICMIG6MCwWJUdyZWVrIFJlc2Vh
-                            cmNoIGFuZCBUZWNobm9sb2d5IE5ldHdvcmswAwIBARqBiVRoaXMgY2VydGlmaWNh
-                            dGUgaXMgc3ViamVjdCB0byBHcmVlayBsYXdzIGFuZCBvdXIgQ1BTLiBUaGlzIENl
-                            cnRpZmljYXRlIG11c3Qgb25seSBiZSB1c2VkIGZvciBhY2FkZW1pYywgcmVzZWFy
-                            Y2ggb3IgZWR1Y2F0aW9uYWwgcHVycG9zZXMuMA0GCSqGSIb3DQEBBAUAA4IBAQCm
-                            Kw8HEJV6AYCoN3w1pz5uq4l80PVaDwR0ZMyLfOx/GyBT99QPV9X1VY7os36bwqJ8
-                            MhFDSeaT4aY6cttwSjkAeeSryqmGiFa8KywphikP4Cy5/ZOGrq0RZqLNUD0EtN8e
-                            MrjokwXxNTIBSjWLXy7xWHq7TteWreNQqD2QRychWSCwdDVFT3P0mBSOEecuAIas
-                            siJ7+vDHxGRktLiWHURr5HQGZcDMIRRsgiuMkfopnILBVuDEPxa2FCcorhyA96oL
-                            fUfGviZ6/U7xzPiVhEtMmZcBiKbe1n0AB14LTkpZxA16yX8I4qDuSgumITYGbn9m
-                            D/XyetvZEPwXkkavdSkB
-                        </ds:X509Certificate>
-                    </ds:X509Data>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://edugain-login.grnet.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="http://edugain-login.grnet.gr/Shibboleth.sso/SAML/Artifact"/>
-            <AssertionConsumerService index="2" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://edugain-login.grnet.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="3" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://edugain-login.grnet.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">GRNET-EDUGAIN</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">GRNET-EDUGAIN</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.grnet.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Savvas Anastasiades</SurName>
-            <EmailAddress>sanastas@ccf.auth.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- UPATRAS TEST SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://frodo.upatras.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>frodo.upatras.gr</ds:KeyName>
-                    <ds:X509Data>
-                        <ds:X509Certificate>
-                            MIIDZDCCAs2gAwIBAgICBjswDQYJKoZIhvcNAQEEBQAwgakxCzAJBgNVBAYTAlVT
-                            MRIwEAYDVQQIEwlXaXNjb25zaW4xEDAOBgNVBAcTB01hZGlzb24xIDAeBgNVBAoT
-                            F1VuaXZlcnNpdHkgb2YgV2lzY29uc2luMSswKQYDVQQLEyJEaXZpc2lvbiBvZiBJ
-                            bmZvcm1hdGlvbiBUZWNobm9sb2d5MSUwIwYDVQQDExxIRVBLSSBTZXJ2ZXIgQ0Eg
-                            LS0gMjAwMjA3MDFBMB4XDTA1MTAyMDA3MTE1NFoXDTA5MTEyOTA3MTE1NFowgaEx
-                            CzAJBgNVBAYTAkdSMQ8wDQYDVQQIEwZBY2hhaWExDjAMBgNVBAcTBVBhdHJhMR0w
-                            GwYDVQQKExRVbml2ZXJzaXR5IG9mIFBhdHJhczEMMAoGA1UECxMDTk9DMRkwFwYD
-                            VQQDExBmcm9kby51cGF0cmFzLmdyMSkwJwYJKoZIhvcNAQkBFhprb25zdGFudG9w
-                            b3Vsb3NAdXBhdHJhcy5ncjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
-                            AMDAOuqJH33i3boiJSZenIICa24+I9ZpDp1nMpz2UuCjZgyj3BnhIEmATGztl6F2
-                            Uy3cvTrlWN+OKWv87wXuJZPSskNoACVTqaiKN41DdejoEM5ZJIoF8qO4BNbJllVP
-                            V7aos4aq3TOVzXVD58XWItjR7raD15E+dlA8Xbh/KZm9RFljA3VSBvAff2WEvHxs
-                            2rx+0Ofv2Q7fWDNASel1hI5Slrsn4Krr7U61H+IUMjItVDni9J18XD9dBM0GujzJ
-                            Md/XAGVxyscm0LbKiYUSK/Q+zgrT0QHZTmRsejjumf4fAmxVUKzGYWEkyQpe0RAG
-                            pEORok+9Nqotr7S/ec4zP8MCAwEAAaMdMBswDAYDVR0TAQH/BAIwADALBgNVHQ8E
-                            BAMCBaAwDQYJKoZIhvcNAQEEBQADgYEAVDlO+RWEeSeCtXhV+4/91Do5eLcViOaD
-                            sQGkXyiNZRcfJSBbxSn0IIIt9ZqYinUed7U+378/PoqMbeD16oArGKA9Ofsd0m/6
-                            yheRnQkHqVobcv1yobPhHVx1aTjMrxE+WooItTzwvmc+ex48EETONmc/u+ILEceE
-                            9aRFhoM6OHQ=
-                        </ds:X509Certificate>
-                    </ds:X509Data>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://frodo.upatras.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://frodo.upatras.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">University of Patras</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">University of Patras</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.upatras.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Victoria Daskalou</SurName>
-            <EmailAddress>daskalou@upatras.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- AUTH BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.ccf.auth.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-ccf-auth-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.ccf.auth.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.ccf.auth.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Grnet Service Box at AUTH*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Grnet Service Box at AUTH*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.auth.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- NTUA BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.noc.ntua.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-noc-ntua-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.noc.ntua.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.noc.ntua.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Grnet Service Box at NTUA*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Grnet Service Box at NTUA*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.ntua.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- CTI BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.cti.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-cti-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.cti.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.cti.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Computer Technology Institute*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Computer Technology Institute*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.cti.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- AUA BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.aua.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-aua-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.aua.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.aua.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Agricultural University of Athens*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Agricultural University of Athens*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.aua.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- TEIATH BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.teiath.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-teiath-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.teiath.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.teiath.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Technological Educational Institute of Athens*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Technological Educational Institute of Athens*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.teiath.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- TEISER BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.teiser.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-teiser-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.teiser.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.teiser.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Technological Educational Institute of Serres*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Technological Educational Institute of Serres*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.teiser.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- TEIMES BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.teimes.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-teimes-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.teimes.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.teimes.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Technological Educational Institute of Messolonghi*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Technological Educational Institute of Messolonghi*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.teimes.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- TEICRETE CHANIA BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.chania.teicrete.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-chania-teicrete-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.chania.teicrete.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.chania.teicrete.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Technological Educational Institute of Crete-Chania*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Technological Educational Institute of Crete-Chania*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.chania.teicrete.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- AEGEAN BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.aegean.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-aegean-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.aegean.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.aegean.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">University of Aegean</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">University of Aegean</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.aegean.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- DUTH BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.duth.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-duth-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.duth.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.duth.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Democritus University of Thrace</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Democritus University of Thrace</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.duth.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- GRNET BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://blackbox.admin.grnet.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>blackbox-admin-grnet-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://blackbox.admin.grnet.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://blackbox.admin.grnet.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Grnet Service Box*</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Grnet Service Box*</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.grnet.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- HUA BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.hua.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-hua-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.hua.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.hua.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Harokopion University</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Harokopion University</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.hua.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- TUC BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.tuc.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-tuc-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.tuc.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.tuc.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Technical University of Crete</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Technical University of Crete</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.tuc.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- UOA BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.noc.uoa.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-noc-uoa-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.noc.uoa.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.noc.uoa.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">University of Athens</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">University of Athens</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.uoa.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- UOC BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.ucnet.uoc.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-ucnet-uoc-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.ucnet.uoc.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.ucnet.uoc.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">University of Crete</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">University of Crete</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.uoc.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- UOP BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.uop.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-uop-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.uoi.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.uoi.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">University of Ioannina</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">University of Ioannina</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.uoi.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- UOI BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.uoi.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-uoi-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.uoi.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.uoi.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">University of Ioannina</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">University of Ioannina</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.uoi.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- UPATRAS BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.upatras.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-upatras-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.upatras.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.upatras.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">University of Patras</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">University of Patras</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.upatras.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- OPA BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.aueb.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-aueb-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.aueb.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.aueb.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Athens University of Economics and Business</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Athens University of Economics and Business</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.aueb.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- UTH BB SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://grnetbox.uth.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>grnetbox-uth-gr.aai.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://grnetbox.uth.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://grnetbox.uth.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">University of Thessaly</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">University of Thessaly</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.uth.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Faidon Liampotis</SurName>
-            <EmailAddress>faidon@admin.grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- DANAE TEST SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://sp.grnet.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>danae.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://sp.grnet.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://sp.grnet.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Servers' Administration Group of GRNET</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Servers' Administration Group of GRNET</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.grnet.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Servers' Administration Group</SurName>
-            <EmailAddress>edetserv-support@grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- Danae Helpdesk SP-->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://helpdesk.grnet.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>danae.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://helpdesk.grnet.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://helpdesk.grnet.gr/Shibboleth.sso/SAML/Artifact"/>
-            <AttributeConsumingService index="0" isDefault="true">
-                <ServiceName xml:lang="en">Helpdesk </ServiceName>
-                <ServiceName xml:lang="el">Helpdesk &#x3C4;&#x3BF;&#x3C5; VNOC</ServiceName>
-                <ServiceDescription xml:lang="en">Under Construction</ServiceDescription>
-                <ServiceDescription xml:lang="el">&#x3A5;&#x3C0;&#x3CC; &#x3BA;&#x3B1;&#x3C4;&#x3B1;&#x3C3;&#x3BA;&#x3B5;&#x3C5;&#x3AE;</ServiceDescription>
-                <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="eduPersonPrincipalName" isRequired="true"/>
-                <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonOrgUnitDN" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="eduPersonOrgUnitDN" isRequired="true"/>
-            </AttributeConsumingService>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Servers' Administration Group of GRNET</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Servers' Administration Group of GRNET</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.grnet.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Servers' Administration Group</SurName>
-            <EmailAddress>edetserv-support@grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- Danae Helpdesk-devel SP-->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://helpdesk-devel.grnet.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>danae.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://helpdesk-devel.grnet.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://helpdesk-devel.grnet.gr/Shibboleth.sso/SAML/Artifact"/>
-            <AttributeConsumingService index="0" isDefault="true">
-                <ServiceName xml:lang="en">Helpdesk Devel</ServiceName>
-                <ServiceName xml:lang="el">Helpdesk Devel &#x3C4;&#x3BF;&#x3C5; VNOC</ServiceName>
-                <ServiceDescription xml:lang="en">Under Construction</ServiceDescription>
-                <ServiceDescription xml:lang="el">&#x3A5;&#x3C0;&#x3CC; &#x3BA;&#x3B1;&#x3C4;&#x3B1;&#x3C3;&#x3BA;&#x3B5;&#x3C5;&#x3AE;</ServiceDescription>
-                <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="eduPersonPrincipalName" isRequired="true"/>
-                <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonOrgUnitDN" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="eduPersonOrgUnitDN" isRequired="true"/>
-            </AttributeConsumingService>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Servers' Administration Group of GRNET</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Servers' Administration Group of GRNET</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.grnet.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Servers' Administration Group</SurName>
-            <EmailAddress>edetserv-support@grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- Danae wiki SP-->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://wiki.grnet.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>danae.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://wiki.grnet.gr:4443/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://wiki.grnet.gr:4443/Shibboleth.sso/SAML/Artifact"/>
-            <AttributeConsumingService index="0" isDefault="true">
-                <ServiceName xml:lang="en">Wiki</ServiceName>
-                <ServiceName xml:lang="el">Wiki &#x3C4;&#x3BF;&#x3C5; VNOC</ServiceName>
-                <ServiceDescription xml:lang="en">Under Construction</ServiceDescription>
-                <ServiceDescription xml:lang="el">&#x3A5;&#x3C0;&#x3CC; &#x3BA;&#x3B1;&#x3C4;&#x3B1;&#x3C3;&#x3BA;&#x3B5;&#x3C5;&#x3AE;</ServiceDescription>
-                <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="eduPersonPrincipalName" isRequired="true"/>
-                <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonOrgUnitDN" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="eduPersonOrgUnitDN" isRequired="true"/>
-            </AttributeConsumingService>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Servers' Administration Group of GRNET</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Servers' Administration Group of GRNET</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.grnet.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Servers' Administration Group</SurName>
-            <EmailAddress>edetserv-support@grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- Danae wiki-devel SP-->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://wiki-devel.grnet.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>danae.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://wiki-devel.grnet.gr:4443/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://wiki-devel.grnet.gr:4443/Shibboleth.sso/SAML/Artifact"/>
-            <AttributeConsumingService index="0" isDefault="true">
-                <ServiceName xml:lang="en">Wiki Devel</ServiceName>
-                <ServiceName xml:lang="el">Wiki Devel &#x3C4;&#x3BF;&#x3C5; VNOC</ServiceName>
-                <ServiceDescription xml:lang="en">Under Construction</ServiceDescription>
-                <ServiceDescription xml:lang="el">&#x3A5;&#x3C0;&#x3CC; &#x3BA;&#x3B1;&#x3C4;&#x3B1;&#x3C3;&#x3BA;&#x3B5;&#x3C5;&#x3AE;</ServiceDescription>
-                <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonPrincipalName" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="eduPersonPrincipalName" isRequired="true"/>
-                <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonOrgUnitDN" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="eduPersonOrgUnitDN" isRequired="true"/>
-            </AttributeConsumingService>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Servers' Administration Group of GRNET</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Servers' Administration Group of GRNET</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.grnet.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Servers' Administration Group</SurName>
-            <EmailAddress>edetserv-support@grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- iptv-devel SP-->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="http://iptv-devel.grnet.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>iptv.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="http://iptv-devel.grnet.gr/Shibboleth.sso/SAML/Artifact"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://iptv-devel.grnet.gr/Shibboleth.sso/SAML/POST"/>
-            <AttributeConsumingService index="0" isDefault="true">
-                <ServiceName xml:lang="en">iptv Devel</ServiceName>
-                <ServiceName xml:lang="el">iptv Devel &#x3C4;&#x3BF;&#x3C5; VNOC</ServiceName>
-                <ServiceDescription xml:lang="en">Under Construction</ServiceDescription>
-                <ServiceDescription xml:lang="el">&#x3A5;&#x3C0;&#x3CC; &#x3BA;&#x3B1;&#x3C4;&#x3B1;&#x3C3;&#x3BA;&#x3B5;&#x3C5;&#x3AE;</ServiceDescription>
-                <RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="eduPersonTargetedID" isRequired="true"/>
-            </AttributeConsumingService>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Servers' Administration Group of GRNET</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Servers' Administration Group of GRNET</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.grnet.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Servers' Administration Group</SurName>
-            <EmailAddress>edetserv-support@grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- iptv SP-->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="http://iptv.grnet.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>iptv.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="http://iptv.grnet.gr/Shibboleth.sso/SAML/Artifact"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://iptv.grnet.gr/Shibboleth.sso/SAML/POST"/>
-            <AttributeConsumingService index="0" isDefault="true">
-                <ServiceName xml:lang="en">iptv </ServiceName>
-                <ServiceName xml:lang="el">iptv &#x3C4;&#x3BF;&#x3C5; VNOC</ServiceName>
-                <ServiceDescription xml:lang="en">Under Construction</ServiceDescription>
-                <ServiceDescription xml:lang="el">&#x3A5;&#x3C0;&#x3CC; &#x3BA;&#x3B1;&#x3C4;&#x3B1;&#x3C3;&#x3BA;&#x3B5;&#x3C5;&#x3AE;</ServiceDescription>
-                <RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="eduPersonTargetedID" isRequired="true"/>
-            </AttributeConsumingService>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Servers' Administration Group of GRNET</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Servers' Administration Group of GRNET</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.grnet.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Servers' Administration Group</SurName>
-            <EmailAddress>edetserv-support@grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- MSDNAA ANAFANDON SP-->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://msdnaa-anafandon.grnet.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>msdnaa-anafandon.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://msdnaa-anafandon.grnet.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://msdnaa-anafandon.grnet.gr/Shibboleth.sso/SAML/Artifact"/>
-            <AttributeConsumingService index="0" isDefault="true">
-                <ServiceName xml:lang="en">GRNET Anafandon MSDNAA</ServiceName>
-                <ServiceName xml:lang="el">&#x395;&#x394;&#x395;&#x3A4; Anafandon MSDNAA</ServiceName>
-                <ServiceDescription xml:lang="en">Under Construction</ServiceDescription>
-                <ServiceDescription xml:lang="el">&#x3A5;&#x3C0;&#x3CC; &#x3BA;&#x3B1;&#x3C4;&#x3B1;&#x3C3;&#x3BA;&#x3B5;&#x3C5;&#x3AE;</ServiceDescription>
-                <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonOrgDN" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="eduPersonOrgDN" isRequired="true"/>
-                <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonPrimaryOrgUnitDN" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="eduPersonPrimaryOrgUnitDN" isRequired="true"/>
-                <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonOrgUnitDN" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="eduPersonOrgUnitDN" isRequired="true"/>
-                <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonPrimaryAffiliation" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="eduPersonPrimaryAffiliation" isRequired="true"/>
-                <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonAffiliation" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="eduPersonAffiliation" isRequired="true"/>
-                <RequestedAttribute Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.10" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="eduPersonTargetedID" isRequired="true"/>
-            </AttributeConsumingService>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">GRNET Anafandon MSDNAA</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">GRNET Anafandon MSDNAA</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.grnet.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Panagiotis Georgantas</SurName>
-            <EmailAddress>msdnaa@dblab.ece.ntua.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- DEVEL VOD SP-->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://node-241.med.uoa.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>node-241.med.uoa.gr</ds:KeyName>
-                    <ds:X509Data>
-                        <ds:X509Certificate>
-                            MIICgTCCAeoCAQAwDQYJKoZIhvcNAQEEBQAwgYgxCzAJBgNVBAYTAkVMMQ8wDQYD
-                            VQQIEwZhdGhlbnMxDzANBgNVBAcTBmF0aGVuczEMMAoGA1UEChMDdW9hMQwwCgYD
-                            VQQLEwNub2MxHDAaBgNVBAMTE25vZGUtMjQxLm1lZC51b2EuZ3IxHTAbBgkqhkiG
-                            9w0BCQEWDm1nbkBub2MudW9hLmdyMB4XDTA4MDUwODEwNTg1MFoXDTA5MDUwODEw
-                            NTg1MFowgYgxCzAJBgNVBAYTAkVMMQ8wDQYDVQQIEwZhdGhlbnMxDzANBgNVBAcT
-                            BmF0aGVuczEMMAoGA1UEChMDdW9hMQwwCgYDVQQLEwNub2MxHDAaBgNVBAMTE25v
-                            ZGUtMjQxLm1lZC51b2EuZ3IxHTAbBgkqhkiG9w0BCQEWDm1nbkBub2MudW9hLmdy
-                            MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNMLmGK8mJLYTx0LwAlQUpV+j+
-                            7DbyRtXOQNdawdaSpx8KC/gk6RjnJBh86AE/KVPYHmmchaCaq7aD5QH82d2ALi4t
-                            RLW+HkzBxtdvNuWWmQassJ5Eutl024rpydulS3Afk+hJo03NSmZnK3Nc3ik0VoLv
-                            1vgnwfM/R6JCWmfZ2QIDAQABMA0GCSqGSIb3DQEBBAUAA4GBACqEaLyHQOBnl2DB
-                            +t7r6Mh5wE20zwHCqrm4aix07nchlJXwNLs5Kkn7iNx9qzgc9QleE6F3/RMjbATY
-                            Vgl7rSkvuC7gFbGAQe1FJpxWyBNxW3AMGDlSHSXvR2n9c2VxPOLltT3foTU9LrcH
-                            obPtp9zhyt4RMc7a3bw5ixfJgxJU
-                        </ds:X509Certificate>
-                    </ds:X509Data>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://node-241.med.uoa.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://node-241.med.uoa.gr/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">UOA</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Michael Gatzonis</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.grnet.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Michael Gatzonis</SurName>
-            <EmailAddress>mgn@noc.uoa.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- VOD SP-->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" entityID="https://vod.grnet.gr/shibboleth/" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>vod.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="0" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://vod.grnet.gr/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://vod.grnet.gr/Shibboleth.sso/SAML/Artifact"/>
-            <AttributeConsumingService index="0" isDefault="true">
-                <ServiceName xml:lang="en">VideoOnDemand </ServiceName>
-                <ServiceName xml:lang="el">VideoOnDemand &#x3C4;&#x3BF;&#x3C5; VNOC</ServiceName>
-                <ServiceDescription xml:lang="en">Under Construction</ServiceDescription>
-                <ServiceDescription xml:lang="el">&#x3A5;&#x3C0;&#x3CC; &#x3BA;&#x3B1;&#x3C4;&#x3B1;&#x3C3;&#x3BA;&#x3B5;&#x3C5;&#x3AE;</ServiceDescription>
-                <RequestedAttribute Name="urn:mace:dir:attribute-def:mail" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="mail" isRequired="true"/>
-                <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonAffiliation" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="eduPersonAffiliation" isRequired="true"/>
-                <RequestedAttribute Name="urn:mace:dir:attribute-def:eduPersonOrgDN" NameFormat="urn:mace:shibboleth:1.0:attributeNamespace:uri" FriendlyName="eduPersonOrgDN" isRequired="true"/>
-            </AttributeConsumingService>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Servers' Administration Group of GRNET</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Servers' Administration Group of GRNET</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://www.grnet.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Servers' Administration Group</SurName>
-            <EmailAddress>edetserv-support@grnet.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- metadata for DreamSpark SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://downloads.channel8.msdn.com/shibboleth-sp">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
-                    <ds:KeyName>downloads.channel8.msdn.com</ds:KeyName>
-                    <ds:X509Data>
-                        <ds:X509Certificate>
-                            MIIDjTCCAvagAwIBAgIQUwxhxfKZzhRd/M8C4oNigDANBgkqhkiG9w0BAQUFADCB
-                            zjELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJ
-                            Q2FwZSBUb3duMR0wGwYDVQQKExRUaGF3dGUgQ29uc3VsdGluZyBjYzEoMCYGA1UE
-                            CxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lvbjEhMB8GA1UEAxMYVGhh
-                            d3RlIFByZW1pdW0gU2VydmVyIENBMSgwJgYJKoZIhvcNAQkBFhlwcmVtaXVtLXNl
-                            cnZlckB0aGF3dGUuY29tMB4XDTA4MDkxNzAwMDAwMFoXDTA5MTAwODIzNTk1OVow
-                            gZExCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS
-                            ZWRtb25kMR8wHQYDVQQKExZNaWNyb3NvZnQgQ29ycG9yYXRpb24gMRQwEgYDVQQL
-                            EwtDZXJ0aWZpY2F0ZTEkMCIGA1UEAxMbZG93bmxvYWRzLmNoYW5uZWw4Lm1zZG4u
-                            Y29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDTag+0DVcPIcHDgOGO/R7Y
-                            fPaOEcyhL5EqqdYwlrI+522pIyAja+R9NFfRSn4gB8BoYoEt6zLG8gzeBu0+vzjZ
-                            npC62Y/oKNcw4DmL1yV7+olRf7jyLV9iK7BvNAj5td+LrKH3da9kuJs2OU6NYhXS
-                            Cy/QL7oHJbc5uF/8OMZ+tQIDAQABo4GmMIGjMAwGA1UdEwEB/wQCMAAwQAYDVR0f
-                            BDkwNzA1oDOgMYYvaHR0cDovL2NybC50aGF3dGUuY29tL1RoYXd0ZVNlcnZlclBy
-                            ZW1pdW1DQS5jcmwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDIGCCsG
-                            AQUFBwEBBCYwJDAiBggrBgEFBQcwAYYWaHR0cDovL29jc3AudGhhd3RlLmNvbTAN
-                            BgkqhkiG9w0BAQUFAAOBgQBpOD//ll0OttZaYYdLKcJHnFwk72T4dzYNenIjpHzF
-                            Bzn4zZjmQbo4YSpdkjimXC3ETHGWJjo+ki5g4o0SAPt8ptfGVXKtUK8fk0ygp36a
-                            VVjNdnJJca7ngGtMFuIPH136QeOyoyWO4DLkoN/77zZeE8fEQryRW6+iWzHcpWbd
-                            5Q==
-                        </ds:X509Certificate>
-                    </ds:X509Data>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://downloads.channel8.msdn.com/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="2" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://downloads.channel8.msdn.com/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">Student Tech Toolbox</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">Student Tech Toolbox</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">https://downloads.channel8.msdn.com</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="support">
-            <GivenName>STT Support</GivenName>
-            <EmailAddress>mailto:stt@9starresearch.com</EmailAddress>
-        </ContactPerson>
-        <ContactPerson contactType="technical">
-            <GivenName>STT Technical</GivenName>
-            <EmailAddress>mailto:stt@9starresearch.com</EmailAddress>
-        </ContactPerson>
-        <ContactPerson contactType="administrative">
-            <GivenName>Bruce</GivenName>
-            <SurName>Curling</SurName>
-            <EmailAddress>mailto:bcurling@microsoft.com</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <!-- metadata for DreamSpark test SP -->
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://winshib.9starresearch.com/shibboleth-sp">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor use="signing">
-                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
-                    <ds:KeyName>winshib.9starresearch.com</ds:KeyName>
-                    <ds:X509Data>
-                        <ds:X509Certificate>
-                            MIIFHzCCBAegAwIBAgIDQ57cMA0GCSqGSIb3DQEBBQUAMIHKMQswCQYDVQQGEwJV
-                            UzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEaMBgGA1UE
-                            ChMRR29EYWRkeS5jb20sIEluYy4xMzAxBgNVBAsTKmh0dHA6Ly9jZXJ0aWZpY2F0
-                            ZXMuZ29kYWRkeS5jb20vcmVwb3NpdG9yeTEwMC4GA1UEAxMnR28gRGFkZHkgU2Vj
-                            dXJlIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MREwDwYDVQQFEwgwNzk2OTI4NzAe
-                            Fw0wODAzMDUxNTIzMzNaFw0wOTAzMjExNjM1MjdaMGsxIjAgBgNVBAoTGXdpbnNo
-                            aWIuOXN0YXJyZXNlYXJjaC5jb20xITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZh
-                            bGlkYXRlZDEiMCAGA1UEAxMZd2luc2hpYi45c3RhcnJlc2VhcmNoLmNvbTCBnzAN
-                            BgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA2CmOmf34oalNSVFbMB1Pw1XgkU+7bnmr
-                            i3PuszGO00wnvnS2ffQ9e7oP6kWUqKdSVOh97avyI7xwRIRfGB+p/s1PgtyPo7cs
-                            OnDYcD3l3NUU1kIumBrpMDXXYf3OIRdBxwCXgwIXLV30nGEvRasa4ChjETbV5B8P
-                            h7O1iMTPmQMCAwEAAaOCAe4wggHqMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgWgMB0G
-                            A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBXBgNVHR8EUDBOMEygSqBIhkZo
-                            dHRwOi8vY2VydGlmaWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvZ29kYWRk
-                            eWV4dGVuZGVkaXNzdWluZzIuY3JsMFIGA1UdIARLMEkwRwYLYIZIAYb9bQEHFwEw
-                            ODA2BggrBgEFBQcCARYqaHR0cDovL2NlcnRpZmljYXRlcy5nb2RhZGR5LmNvbS9y
-                            ZXBvc2l0b3J5MH8GCCsGAQUFBwEBBHMwcTAjBggrBgEFBQcwAYYXaHR0cDovL29j
-                            c3AuZ29kYWRkeS5jb20wSgYIKwYBBQUHMAKGPmh0dHA6Ly9jZXJ0aWZpY2F0ZXMu
-                            Z29kYWRkeS5jb20vcmVwb3NpdG9yeS9nZF9pbnRlcm1lZGlhdGUuY3J0MB0GA1Ud
-                            DgQWBBQHTWdanf5qLlOYz80K8n8eyKOpzjAfBgNVHSMEGDAWgBT9rGEyk2xF1uLu
-                            hV+auud2mWjM5zBDBgNVHREEPDA6ghl3aW5zaGliLjlzdGFycmVzZWFyY2guY29t
-                            gh13d3cud2luc2hpYi45c3RhcnJlc2VhcmNoLmNvbTANBgkqhkiG9w0BAQUFAAOC
-                            AQEAvsvCcZ48MmReChSKdRTOUG+1OK8rUUDPawTg2FzFbJzf5wtHWwoyuGiJjXUG
-                            lk5vIMk6TQt7AB3zlb29WVGu9Qh6NTe6b3YADYMtdih90hyM7dZHWjlUwq3RK5pI
-                            vdq4OvMwGWM6bp4Aq/pQemW/kgMCIg4NQzg8P+3rx23uZgsRPWk9Eh8suE/lWNbN
-                            yZWH1cfzqhHKS9yU/LzTXaFLu9R8DHcSf8j2YSIDtcwjUIz0oRJoUP8/tvYadTMF
-                            +c4RQaW92X7f1AQigFIAT6/HVe6Xwgpgl6wkgfd5O2Eng5Gu5aGYF65AgaxyIyFa
-                            KRwyr87B3kh1OYfoTn3TXk3IUA==
-                        </ds:X509Certificate>
-                    </ds:X509Data>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService index="1" Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://winshib.9starresearch.com/Shibboleth.sso/SAML/POST"/>
-            <AssertionConsumerService index="2" Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://winshib.9starresearch.com/Shibboleth.sso/SAML/Artifact"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">9Star Research, Inc</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">9star</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">https://winshib.9starresearch.com/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="support">
-            <GivenName>9Star Research Support</GivenName>
-            <EmailAddress>mailto:support@9starresearch.com</EmailAddress>
-        </ContactPerson>
-        <ContactPerson contactType="technical">
-            <GivenName>9Star Research Technical</GivenName>
-            <EmailAddress>mailto:support@9starresearch.com</EmailAddress>
-        </ContactPerson>
-        <ContactPerson contactType="administrative">
-            <GivenName>9Star Research Administrative</GivenName>
-            <EmailAddress>mailto:support@9starresearch.com</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-    <EntityDescriptor xmlns="urn:oasis:names:tc:SAML:2.0:metadata" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:shibmd="urn:mace:shibboleth:metadata:1.0" entityID="https://gss.grnet.gr/shibboleth" validUntil="2010-01-01T00:00:00Z">
-        <SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:1.1:protocol">
-            <KeyDescriptor>
-                <ds:KeyInfo>
-                    <ds:KeyName>gss.grnet.gr</ds:KeyName>
-                </ds:KeyInfo>
-            </KeyDescriptor>
-            <NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat>
-            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="https://gss.grnet.gr/Shibboleth.sso/SAML/POST" index="0"/>
-            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="https://gss.grnet.gr/Shibboleth.sso/SAML/Artifact" index="1"/>
-            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post" Location="http://gss.grnet.gr/Shibboleth.sso/SAML/POST" index="2"/>
-            <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01" Location="http://gss.grnet.gr/Shibboleth.sso/SAML/Artifact" index="3"/>
-        </SPSSODescriptor>
-        <Organization>
-            <OrganizationName xml:lang="en">GRnet Storage Service</OrganizationName>
-            <OrganizationDisplayName xml:lang="en">GRnet Storage Service</OrganizationDisplayName>
-            <OrganizationURL xml:lang="en">http://gss.grnet.gr/</OrganizationURL>
-        </Organization>
-        <ContactPerson contactType="technical">
-            <SurName>Panagiotis Astithas</SurName>
-            <EmailAddress>past@ebs.gr</EmailAddress>
-        </ContactPerson>
-    </EntityDescriptor>
-</EntitiesDescriptor>

diff --git a/gss/external-services/shibboleth/gss.grnet.gr.crt b/gss/external-services/shibboleth/gss.grnet.gr.crt
deleted file mode 100644 (file)
index 8cd8bcd..0000000
--- a/gss/external-services/shibboleth/gss.grnet.gr.crt
+++ /dev/null
@@ -1,419 +0,0 @@
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            01:00:00:00:81
-        Signature Algorithm: md5WithRSAEncryption
-        Issuer: C=GR, O=Greek Research and Technology Network, CN=GRNET Servers Certification Authority 2008
-        Validity
-            Not Before: Sep 23 00:00:00 2008 GMT
-            Not After : Sep 23 23:59:59 2009 GMT
-        Subject: C=GR, O=Greek Research and Technology Network, CN=gss.grnet.gr
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-            RSA Public Key: (1024 bit)
-                Modulus (1024 bit):
-                    00:98:da:47:3d:42:1a:46:21:c5:16:fd:a7:96:b5:
-                    ec:84:30:34:06:d0:a3:52:04:f2:75:0b:53:93:53:
-                    07:e9:e6:6a:7d:d0:28:4d:ff:ca:84:27:5f:11:f4:
-                    ee:3e:13:00:4f:bd:3e:56:a5:82:9d:66:46:84:a5:
-                    72:27:1c:35:38:c0:91:a9:13:05:db:74:63:bd:32:
-                    46:bb:70:47:09:75:cb:37:8e:42:58:7b:77:f3:02:
-                    a0:5e:5e:30:a7:69:d1:1b:c7:9f:6f:7a:cf:30:de:
-                    b8:b3:c4:7f:d1:30:da:d4:f5:3a:9c:c3:67:da:7f:
-                    5a:c8:35:87:7c:1b:80:c6:d1
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints: critical
-                CA:FALSE
-            Netscape Cert Type: 
-                SSL Client, SSL Server
-            X509v3 Key Usage: critical
-                Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment
-            X509v3 Extended Key Usage: critical
-                TLS Web Client Authentication, TLS Web Server Authentication
-            X509v3 Subject Key Identifier: 
-                36:5F:DC:FE:F0:9B:5A:3E:7F:44:69:56:36:E7:FE:43:19:52:85:B3
-            X509v3 Authority Key Identifier: 
-                keyid:14:CA:72:7D:22:E7:E9:41:60:08:13:D3:83:B5:8C:2B:D9:B5:6E:60
-                DirName:/C=GR/O=Greek Research and Technology Network/CN=GRNET Root Certification Authority 2004
-                serial:01:00:00:00:0B
-
-            Authority Information Access: 
-                OCSP - URI:http://ocsp.ca.grnet.gr/
-
-            X509v3 CRL Distribution Points: 
-                URI:http://crlv1.ca.grnet.gr/GrnetServersCA2008/crlv1.der.crl
-
-            Netscape Comment: 
-                This certificate is subject to Greek laws and our CPS. This Certificate must only be used for academic, research or educational purposes.
-            X509v3 Certificate Policies: 
-                Policy: 1.3.6.1.4.1.16515.1.2.1.0
-                  CPS: http://www.ca.grnet.gr/documents/CPS.html
-                  User Notice:
-                    Organization: Greek Research and Technology Network
-                    Number: 1
-                    Explicit Text: This certificate is subject to Greek laws and our CPS. This Certificate must only be used for academic, research or educational purposes.
-
-    Signature Algorithm: md5WithRSAEncryption
-        03:93:54:d3:c2:54:0d:2d:76:02:80:68:c5:6d:91:29:50:74:
-        fd:da:8b:f9:8b:93:9a:19:b2:2b:47:09:2b:31:42:ff:50:35:
-        26:b5:2c:87:89:2a:21:17:48:62:db:40:a0:2e:a7:b7:d0:29:
-        a6:c4:c3:92:a7:3f:06:27:7f:14:73:7f:6a:3f:33:6d:3e:79:
-        1f:62:59:9a:37:32:42:11:12:6f:c5:c1:8c:e5:7f:60:24:6f:
-        73:cf:67:8f:b0:ed:c9:70:12:3e:3c:a2:0c:2a:5d:1b:ea:d1:
-        ab:02:c9:bb:b3:bb:d6:c2:b4:02:c5:c4:dc:be:a3:bc:fb:a9:
-        f1:8e:3c:39:21:21:e0:b0:32:3d:6e:e9:d7:cb:54:9b:57:de:
-        2f:b8:98:2b:60:99:4a:70:ad:49:7f:5f:be:73:c1:72:22:cc:
-        b2:c5:2f:b6:aa:d2:31:cf:23:74:f9:78:b5:40:e2:94:06:cd:
-        15:94:4d:19:2f:bb:b3:8c:be:7f:d6:02:ba:bc:58:9f:96:65:
-        72:22:6b:20:6e:58:c4:9a:48:2b:28:e3:e3:d0:af:f9:e7:3f:
-        c4:e9:6a:ad:82:fc:2f:e7:a7:df:c3:6c:8c:b2:87:41:f8:f8:
-        ec:96:ee:8b:b6:60:b9:1f:ae:d1:36:da:9a:0d:04:94:79:a4:
-        88:35:ff:35
------BEGIN CERTIFICATE-----
-MIIGIDCCBQigAwIBAgIFAQAAAIEwDQYJKoZIhvcNAQEEBQAwcjELMAkGA1UEBhMC
-R1IxLjAsBgNVBAoTJUdyZWVrIFJlc2VhcmNoIGFuZCBUZWNobm9sb2d5IE5ldHdv
-cmsxMzAxBgNVBAMTKkdSTkVUIFNlcnZlcnMgQ2VydGlmaWNhdGlvbiBBdXRob3Jp
-dHkgMjAwODAeFw0wODA5MjMwMDAwMDBaFw0wOTA5MjMyMzU5NTlaMFQxCzAJBgNV
-BAYTAkdSMS4wLAYDVQQKEyVHcmVlayBSZXNlYXJjaCBhbmQgVGVjaG5vbG9neSBO
-ZXR3b3JrMRUwEwYDVQQDEwxnc3MuZ3JuZXQuZ3IwgZ8wDQYJKoZIhvcNAQEBBQAD
-gY0AMIGJAoGBAJjaRz1CGkYhxRb9p5a17IQwNAbQo1IE8nULU5NTB+nman3QKE3/
-yoQnXxH07j4TAE+9Plalgp1mRoSlciccNTjAkakTBdt0Y70yRrtwRwl1yzeOQlh7
-d/MCoF5eMKdp0RvHn296zzDeuLPEf9Ew2tT1OpzDZ9p/Wsg1h3wbgMbRAgMBAAGj
-ggNdMIIDWTAMBgNVHRMBAf8EAjAAMBEGCWCGSAGG+EIBAQQEAwIGwDAOBgNVHQ8B
-Af8EBAMCBPAwIAYDVR0lAQH/BBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMB0GA1Ud
-DgQWBBQ2X9z+8JtaPn9EaVY25/5DGVKFszCBnQYDVR0jBIGVMIGSgBQUynJ9Iufp
-QWAIE9ODtYwr2bVuYKFzpHEwbzELMAkGA1UEBhMCR1IxLjAsBgNVBAoTJUdyZWVr
-IFJlc2VhcmNoIGFuZCBUZWNobm9sb2d5IE5ldHdvcmsxMDAuBgNVBAMTJ0dSTkVU
-IFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgMjAwNIIFAQAAAAswNAYIKwYB
-BQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jYS5ncm5ldC5nci8w
-SgYDVR0fBEMwQTA/oD2gO4Y5aHR0cDovL2NybHYxLmNhLmdybmV0LmdyL0dybmV0
-U2VydmVyc0NBMjAwOC9jcmx2MS5kZXIuY3JsMIGaBglghkgBhvhCAQ0EgYwWgYlU
-aGlzIGNlcnRpZmljYXRlIGlzIHN1YmplY3QgdG8gR3JlZWsgbGF3cyBhbmQgb3Vy
-IENQUy4gVGhpcyBDZXJ0aWZpY2F0ZSBtdXN0IG9ubHkgYmUgdXNlZCBmb3IgYWNh
-ZGVtaWMsIHJlc2VhcmNoIG9yIGVkdWNhdGlvbmFsIHB1cnBvc2VzLjCCASQGA1Ud
-IASCARswggEXMIIBEwYMKwYBBAGBgQMBAgEAMIIBATA1BggrBgEFBQcCARYpaHR0
-cDovL3d3dy5jYS5ncm5ldC5nci9kb2N1bWVudHMvQ1BTLmh0bWwwgccGCCsGAQUF
-BwICMIG6MCwWJUdyZWVrIFJlc2VhcmNoIGFuZCBUZWNobm9sb2d5IE5ldHdvcmsw
-AwIBARqBiVRoaXMgY2VydGlmaWNhdGUgaXMgc3ViamVjdCB0byBHcmVlayBsYXdz
-IGFuZCBvdXIgQ1BTLiBUaGlzIENlcnRpZmljYXRlIG11c3Qgb25seSBiZSB1c2Vk
-IGZvciBhY2FkZW1pYywgcmVzZWFyY2ggb3IgZWR1Y2F0aW9uYWwgcHVycG9zZXMu
-MA0GCSqGSIb3DQEBBAUAA4IBAQADk1TTwlQNLXYCgGjFbZEpUHT92ov5i5OaGbIr
-RwkrMUL/UDUmtSyHiSohF0hi20CgLqe30CmmxMOSpz8GJ38Uc39qPzNtPnkfYlma
-NzJCERJvxcGM5X9gJG9zz2ePsO3JcBI+PKIMKl0b6tGrAsm7s7vWwrQCxcTcvqO8
-+6nxjjw5ISHgsDI9bunXy1SbV94vuJgrYJlKcK1Jf1++c8FyIsyyxS+2qtIxzyN0
-+Xi1QOKUBs0VlE0ZL7uzjL5/1gK6vFiflmVyImsgbljEmkgrKOPj0K/55z/E6Wqt
-gvwv56ffw2yMsodB+Pjslu6LtmC5H67RNtqaDQSUeaSINf81
------END CERTIFICATE-----
-
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number:
-            01:00:00:00:0b
-        Signature Algorithm: md5WithRSAEncryption
-        Issuer: C=GR, O=Greek Research and Technology Network, CN=GRNET Root Certification Authority 2004
-        Validity
-            Not Before: May 14 10:27:09 2008 GMT
-            Not After : May 12 10:27:09 2016 GMT
-        Subject: C=GR, O=Greek Research and Technology Network, CN=GRNET Servers Certification Authority 2008
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-            RSA Public Key: (2048 bit)
-                Modulus (2048 bit):
-                    00:a1:ee:59:ec:96:24:61:ae:77:9d:49:6b:77:ee:
-                    28:99:a9:a3:30:8c:61:c0:1d:85:9b:71:aa:5c:57:
-                    4e:10:b4:27:6f:05:2b:25:33:43:8b:99:80:0d:55:
-                    3f:f8:1e:28:52:c8:b0:3d:09:3a:c6:62:7b:87:d5:
-                    3b:31:36:73:bf:f8:f9:c4:9c:b6:01:de:03:4b:25:
-                    03:22:93:86:28:10:5b:bb:f8:2c:37:89:45:71:17:
-                    e0:79:3c:a9:df:30:b0:01:31:fc:0c:01:b9:93:e7:
-                    29:91:72:46:f6:8e:a1:22:6a:e4:89:5e:9b:e7:f6:
-                    e3:ee:f3:b8:3d:a1:8d:bc:ba:a4:c1:a8:ea:e9:ea:
-                    19:24:28:9f:f4:77:04:53:b5:ce:13:0e:d6:b4:fe:
-                    ee:7e:0f:b6:3c:b1:3f:9b:1c:cd:f0:05:2a:93:93:
-                    47:15:2f:85:32:1a:6e:ef:50:0c:f5:bf:28:3c:a9:
-                    91:9c:65:49:51:f1:5d:36:c2:1d:4e:77:f3:dc:c9:
-                    ef:9e:e1:63:e7:c5:32:6a:15:16:6d:c8:4e:2d:34:
-                    32:06:8c:47:af:33:dc:00:21:d0:45:ba:39:c0:b5:
-                    c6:61:ab:9b:21:bf:cc:a5:48:63:56:5a:ca:d0:a0:
-                    0d:6c:42:54:7b:5c:c5:d2:42:5f:66:19:39:b7:49:
-                    35:3f
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Key Usage: 
-                Certificate Sign, CRL Sign
-            Netscape Cert Type: 
-                SSL CA, S/MIME CA, Object Signing CA
-            X509v3 Subject Key Identifier: 
-                14:CA:72:7D:22:E7:E9:41:60:08:13:D3:83:B5:8C:2B:D9:B5:6E:60
-            X509v3 Subject Alternative Name: 
-                email:ca@grnet.gr
-            X509v3 Issuer Alternative Name: 
-                email:rootca2004@grnet.gr
-            X509v3 CRL Distribution Points: 
-                URI:http://crlv1.ca.grnet.gr/GrnetRootCA2004/crlv1.der.crl
-
-            Netscape CA Revocation Url: 
-                ns_revoke_query.php?
-            Netscape Base Url: 
-                http://crlv1.ca.grnet.gr/GrnetRootCA2004
-            Netscape CA Policy Url: 
-                http://www.ca.grnet.gr/documents/GrnetRootCA2004/CP1.1.html
-            Netscape Comment: 
-                This certificate is subject to Greek laws and our CPS. This Certificate must only be used for academic, research or educational purposes.
-            X509v3 Authority Key Identifier: 
-                keyid:85:18:BF:C3:AF:3B:81:9F:E5:79:C6:E1:13:34:6D:D2:04:06:D8:E8
-                DirName:/C=GR/O=Greek Research and Technology Network/CN=GRNET Root Certification Authority 2004
-                serial:00
-
-            Authority Information Access: 
-                OCSP - URI:http://ocsp.ca.grnet.gr:8000/
-
-            X509v3 Certificate Policies: 
-                Policy: 1.3.6.1.4.1.16515.1.1.1.1
-                  CPS: http://www.ca.grnet.gr/documents/CPS.html
-                  User Notice:
-                    Organization: Greek Research and Technology Network
-                    Number: 1
-                    Explicit Text: This certificate is subject to Greek laws and our CPS. This Certificate must only be used for academic, research or educational purposes.
-
-    Signature Algorithm: md5WithRSAEncryption
-        d4:40:78:ae:1d:c0:e3:40:13:41:6a:3f:b5:bf:f7:12:b2:8b:
-        f6:7d:34:fb:39:50:bd:84:8f:28:c6:c1:85:3f:aa:e8:81:79:
-        19:a8:e9:cb:19:a1:6e:63:d4:21:17:a3:be:b6:1f:de:d0:94:
-        d3:a2:eb:a0:73:14:e8:a2:2d:ab:55:e7:3f:18:32:50:8c:d3:
-        1d:15:de:af:72:fa:6e:51:e7:4c:2c:c7:48:37:f7:1b:b5:eb:
-        f2:89:4f:9e:da:98:81:bd:bc:e1:37:e5:71:43:a1:0f:cb:df:
-        b0:28:dc:d1:17:f6:0f:d7:76:f2:cb:e4:de:1e:a5:60:ff:26:
-        d1:3e:2f:d9:54:8f:d7:f0:51:e9:ca:e4:98:d1:9e:9d:24:4e:
-        f7:d7:b2:8e:db:c4:99:00:f4:a1:aa:57:61:d2:7e:0a:4e:d1:
-        0a:b3:f5:e1:77:5b:21:13:e3:8f:25:c8:7f:30:c0:b8:b1:c4:
-        b9:5f:e0:73:6b:e2:91:0d:ea:e3:f8:9d:b3:6b:c6:c9:6f:40:
-        57:e1:a0:70:f5:87:fe:fd:c6:ca:7b:7e:d7:b5:a4:6f:41:f3:
-        8a:5c:c0:fd:ce:89:d1:03:b4:1c:22:e7:9c:90:f7:e3:7f:91:
-        7e:f9:1e:87:d4:e4:31:6c:97:d3:3d:64:70:98:12:f2:6e:80:
-        7e:95:15:9e:9a:a1:7b:ab:89:49:3e:91:2d:b9:1d:4c:ae:d5:
-        73:78:5f:af:60:af:d1:72:de:73:a2:49:e4:a8:55:e5:7c:4a:
-        d7:13:24:11:87:6c:19:05:13:51:25:04:f4:8d:83:a7:27:47:
-        17:37:16:a5:1f:ae:26:a3:a4:4e:fb:f6:e0:61:37:59:46:91:
-        3c:23:e9:4f:93:59:6e:60:f8:e6:08:c9:24:07:f9:d1:4d:39:
-        25:15:f2:35:e5:89:af:bd:b9:33:76:c8:29:4a:b3:9f:3d:85:
-        e1:31:0d:6a:91:c7:75:40:87:4d:c0:89:7a:ac:fc:7e:3d:84:
-        fc:c9:8f:28:dd:16:d8:08:3b:41:fd:e2:0e:26:b2:8c:73:ec:
-        2f:2c:39:87:63:87:f7:5e:1c:07:16:44:50:bc:94:c3:1e:2c:
-        1e:34:31:7f:bb:30:f3:8f:c6:09:07:83:f4:a2:02:4a:b7:10:
-        3e:41:8e:f7:a0:5b:1f:e2:97:4a:4e:72:8b:45:e1:90:43:5c:
-        e3:3b:d2:b2:13:9a:cc:fb:5a:1c:1c:84:eb:30:eb:44:58:bf:
-        b4:02:d1:38:99:11:ac:6b:79:3f:9c:a5:ca:8c:8c:35:2a:8b:
-        19:b2:d8:64:41:df:88:4d:91:53:6f:7c:71:f9:8d:7c:3f:a2:
-        25:23:27:88:72:43:40:9d
------BEGIN CERTIFICATE-----
-MIIIfTCCBmWgAwIBAgIFAQAAAAswDQYJKoZIhvcNAQEEBQAwbzELMAkGA1UEBhMC
-R1IxLjAsBgNVBAoTJUdyZWVrIFJlc2VhcmNoIGFuZCBUZWNobm9sb2d5IE5ldHdv
-cmsxMDAuBgNVBAMTJ0dSTkVUIFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkg
-MjAwNDAeFw0wODA1MTQxMDI3MDlaFw0xNjA1MTIxMDI3MDlaMHIxCzAJBgNVBAYT
-AkdSMS4wLAYDVQQKEyVHcmVlayBSZXNlYXJjaCBhbmQgVGVjaG5vbG9neSBOZXR3
-b3JrMTMwMQYDVQQDEypHUk5FVCBTZXJ2ZXJzIENlcnRpZmljYXRpb24gQXV0aG9y
-aXR5IDIwMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh7lnsliRh
-rnedSWt37iiZqaMwjGHAHYWbcapcV04QtCdvBSslM0OLmYANVT/4HihSyLA9CTrG
-YnuH1TsxNnO/+PnEnLYB3gNLJQMik4YoEFu7+Cw3iUVxF+B5PKnfMLABMfwMAbmT
-5ymRckb2jqEiauSJXpvn9uPu87g9oY28uqTBqOrp6hkkKJ/0dwRTtc4TDta0/u5+
-D7Y8sT+bHM3wBSqTk0cVL4UyGm7vUAz1vyg8qZGcZUlR8V02wh1Od/Pcye+e4WPn
-xTJqFRZtyE4tNDIGjEevM9wAIdBFujnAtcZhq5shv8ylSGNWWsrQoA1sQlR7XMXS
-Ql9mGTm3STU/AgMBAAGjggQbMIIEFzAPBgNVHRMBAf8EBTADAQH/MAsGA1UdDwQE
-AwIBBjARBglghkgBhvhCAQEEBAMCAAcwHQYDVR0OBBYEFBTKcn0i5+lBYAgT04O1
-jCvZtW5gMBYGA1UdEQQPMA2BC2NhQGdybmV0LmdyMB4GA1UdEgQXMBWBE3Jvb3Rj
-YTIwMDRAZ3JuZXQuZ3IwRwYDVR0fBEAwPjA8oDqgOIY2aHR0cDovL2NybHYxLmNh
-LmdybmV0LmdyL0dybmV0Um9vdENBMjAwNC9jcmx2MS5kZXIuY3JsMCMGCWCGSAGG
-+EIBBAQWFhRuc19yZXZva2VfcXVlcnkucGhwPzA3BglghkgBhvhCAQIEKhYoaHR0
-cDovL2NybHYxLmNhLmdybmV0LmdyL0dybmV0Um9vdENBMjAwNDBKBglghkgBhvhC
-AQgEPRY7aHR0cDovL3d3dy5jYS5ncm5ldC5nci9kb2N1bWVudHMvR3JuZXRSb290
-Q0EyMDA0L0NQMS4xLmh0bWwwgZoGCWCGSAGG+EIBDQSBjBaBiVRoaXMgY2VydGlm
-aWNhdGUgaXMgc3ViamVjdCB0byBHcmVlayBsYXdzIGFuZCBvdXIgQ1BTLiBUaGlz
-IENlcnRpZmljYXRlIG11c3Qgb25seSBiZSB1c2VkIGZvciBhY2FkZW1pYywgcmVz
-ZWFyY2ggb3IgZWR1Y2F0aW9uYWwgcHVycG9zZXMuMIGZBgNVHSMEgZEwgY6AFIUY
-v8OvO4Gf5XnG4RM0bdIEBtjooXOkcTBvMQswCQYDVQQGEwJHUjEuMCwGA1UEChMl
-R3JlZWsgUmVzZWFyY2ggYW5kIFRlY2hub2xvZ3kgTmV0d29yazEwMC4GA1UEAxMn
-R1JORVQgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAyMDA0ggEAMDkGCCsG
-AQUFBwEBBC0wKzApBggrBgEFBQcwAYYdaHR0cDovL29jc3AuY2EuZ3JuZXQuZ3I6
-ODAwMC8wggEkBgNVHSAEggEbMIIBFzCCARMGDCsGAQQBgYEDAQEBATCCAQEwNQYI
-KwYBBQUHAgEWKWh0dHA6Ly93d3cuY2EuZ3JuZXQuZ3IvZG9jdW1lbnRzL0NQUy5o
-dG1sMIHHBggrBgEFBQcCAjCBujAsFiVHcmVlayBSZXNlYXJjaCBhbmQgVGVjaG5v
-bG9neSBOZXR3b3JrMAMCAQEagYlUaGlzIGNlcnRpZmljYXRlIGlzIHN1YmplY3Qg
-dG8gR3JlZWsgbGF3cyBhbmQgb3VyIENQUy4gVGhpcyBDZXJ0aWZpY2F0ZSBtdXN0
-IG9ubHkgYmUgdXNlZCBmb3IgYWNhZGVtaWMsIHJlc2VhcmNoIG9yIGVkdWNhdGlv
-bmFsIHB1cnBvc2VzLjANBgkqhkiG9w0BAQQFAAOCAgEA1EB4rh3A40ATQWo/tb/3
-ErKL9n00+zlQvYSPKMbBhT+q6IF5GajpyxmhbmPUIRejvrYf3tCU06LroHMU6KIt
-q1XnPxgyUIzTHRXer3L6blHnTCzHSDf3G7Xr8olPntqYgb284TflcUOhD8vfsCjc
-0Rf2D9d28svk3h6lYP8m0T4v2VSP1/BR6crkmNGenSRO99eyjtvEmQD0oapXYdJ+
-Ck7RCrP14XdbIRPjjyXIfzDAuLHEuV/gc2vikQ3q4/ids2vGyW9AV+GgcPWH/v3G
-ynt+17Wkb0HzilzA/c6J0QO0HCLnnJD343+Rfvkeh9TkMWyX0z1kcJgS8m6AfpUV
-npqhe6uJST6RLbkdTK7Vc3hfr2Cv0XLec6JJ5KhV5XxK1xMkEYdsGQUTUSUE9I2D
-pydHFzcWpR+uJqOkTvv24GE3WUaRPCPpT5NZbmD45gjJJAf50U05JRXyNeWJr725
-M3bIKUqznz2F4TENapHHdUCHTcCJeqz8fj2E/MmPKN0W2Ag7Qf3iDiayjHPsLyw5
-h2OH914cBxZEULyUwx4sHjQxf7sw84/GCQeD9KICSrcQPkGO96BbH+KXSk5yi0Xh
-kENc4zvSshOazPtaHByE6zDrRFi/tALROJkRrGt5P5ylyoyMNSqLGbLYZEHfiE2R
-U298cfmNfD+iJSMniHJDQJ0=
------END CERTIFICATE-----
-
-Certificate:
-    Data:
-        Version: 3 (0x2)
-        Serial Number: 0 (0x0)
-        Signature Algorithm: md5WithRSAEncryption
-        Issuer: C=GR, O=Greek Research and Technology Network, CN=GRNET Root Certification Authority 2004
-        Validity
-            Not Before: Jun  3 07:12:32 2004 GMT
-            Not After : May 29 07:12:32 2024 GMT
-        Subject: C=GR, O=Greek Research and Technology Network, CN=GRNET Root Certification Authority 2004
-        Subject Public Key Info:
-            Public Key Algorithm: rsaEncryption
-            RSA Public Key: (4096 bit)
-                Modulus (4096 bit):
-                    00:f7:18:b6:b2:1c:0d:6d:d4:d0:17:80:8c:ea:d8:
-                    d5:93:33:15:9b:27:c3:85:d5:de:00:bd:a9:dc:74:
-                    ea:22:87:f8:d1:82:4d:37:ec:03:6e:7c:9f:b1:da:
-                    94:91:f3:fd:3a:fb:68:76:05:21:74:03:fe:15:e2:
-                    a7:f2:05:dc:0d:1e:4b:ef:ac:5b:62:ed:8b:0d:ee:
-                    4d:e1:f6:71:d0:9e:d7:fb:11:91:c8:1a:a6:67:e5:
-                    be:93:82:a4:ea:b1:68:96:4b:c7:4d:aa:c3:61:14:
-                    5a:8d:64:ec:d7:e3:b2:14:7e:72:ab:ac:6d:9c:8b:
-                    26:4e:ed:a4:34:d9:a8:57:f9:17:91:f0:53:ba:87:
-                    1d:1d:4f:c6:57:32:06:3a:21:82:12:a2:b9:73:66:
-                    aa:56:cd:05:f7:2d:fc:c3:ab:79:44:5d:85:13:fd:
-                    8b:b9:0a:e2:85:46:08:3e:9f:ec:91:e6:02:8d:bf:
-                    94:c5:fd:e2:d2:69:77:96:46:96:64:39:58:3e:ca:
-                    91:8c:d4:da:e3:8e:96:0b:78:aa:a7:4f:ca:6a:d4:
-                    b9:73:a0:d6:da:fe:22:d2:31:a4:49:d7:c8:e9:be:
-                    8c:2f:3a:e9:2f:17:d0:7a:cd:1f:2b:cb:d7:34:4f:
-                    ff:37:89:c7:7e:d3:03:02:50:ba:ac:18:ec:02:b1:
-                    9d:3d:e9:d2:1f:8f:51:ac:2b:79:fe:ae:a7:a7:cf:
-                    f7:8d:bc:dc:f1:7f:b5:c2:83:ca:2f:e4:80:ac:4b:
-                    57:ad:17:91:b7:b4:f2:3f:c9:e5:00:5d:1d:21:3b:
-                    4a:a4:45:38:25:ff:fe:4a:b0:16:fa:c9:5f:02:72:
-                    fc:1e:92:96:88:15:95:f2:91:a4:8d:9b:56:21:85:
-                    5c:3a:af:e9:aa:84:85:11:84:61:14:8c:b2:e8:fb:
-                    50:0f:fb:14:4f:0c:bc:6a:d4:fb:c5:0d:50:c9:51:
-                    b4:20:a7:cd:29:fa:4e:59:76:b0:d2:1b:08:ed:0c:
-                    03:f4:0a:1f:34:69:c0:76:af:1d:8e:0d:07:b8:5f:
-                    16:5f:9a:d3:d7:0d:9f:ec:e2:97:b8:90:4a:a3:f2:
-                    c3:7c:ee:13:d1:33:10:d8:a5:f4:83:e6:ba:d5:c3:
-                    df:3d:a2:38:75:ec:ae:17:3b:dd:69:96:f2:71:4e:
-                    38:2d:db:89:45:e0:f4:3b:7e:f9:72:42:25:a8:3b:
-                    ee:79:d8:80:02:90:33:86:f5:13:1f:e9:3b:fb:a8:
-                    1e:f0:5f:18:2a:12:aa:f4:8c:34:3b:5c:34:a9:ac:
-                    0e:c7:0e:46:e3:f4:19:62:63:8d:c2:34:d4:95:98:
-                    0d:4f:a8:2a:bc:a1:1e:28:de:84:cc:99:da:b7:82:
-                    5f:b4:ef
-                Exponent: 65537 (0x10001)
-        X509v3 extensions:
-            X509v3 Subject Key Identifier: 
-                85:18:BF:C3:AF:3B:81:9F:E5:79:C6:E1:13:34:6D:D2:04:06:D8:E8
-            X509v3 Authority Key Identifier: 
-                keyid:85:18:BF:C3:AF:3B:81:9F:E5:79:C6:E1:13:34:6D:D2:04:06:D8:E8
-                DirName:/C=GR/O=Greek Research and Technology Network/CN=GRNET Root Certification Authority 2004
-                serial:00
-
-            X509v3 Basic Constraints: critical
-                CA:TRUE
-            X509v3 Key Usage: 
-                Certificate Sign, CRL Sign
-            Netscape Cert Type: 
-                SSL CA, S/MIME CA, Object Signing CA
-            Netscape CA Policy Url: 
-                http://www.ca.grnet.gr/documents/GrnetRootCA2004/CP1.0.html
-            Netscape Comment: 
-                This certificate is subject to Greek laws and our CPS. This Certificate must only be used for academic, research or educational purposes.
-            X509v3 Subject Alternative Name: 
-                email:rootca2004@grnet.gr
-            X509v3 Certificate Policies: 
-                Policy: 1.3.6.1.4.1.16515.1.1.1.1
-                  CPS: http://www.ca.grnet.gr/documents/CPS.html
-                  User Notice:
-                    Organization: Greek Research and Technology Network
-                    Number: 1
-                    Explicit Text: This certificate is subject to Greek laws and our CPS. This Certificate must only be used for academic, research or educational purposes.
-
-    Signature Algorithm: md5WithRSAEncryption
-        5d:01:20:3f:20:b1:57:29:16:ed:38:1a:9d:5f:b9:3a:e6:77:
-        39:ed:d6:23:55:98:93:26:a9:52:14:64:3c:10:ba:14:1e:90:
-        04:a1:14:ec:22:a4:0d:f3:15:27:bf:58:49:c1:17:c2:2b:4d:
-        53:00:9d:bc:d2:2f:18:be:56:cc:56:2a:47:e2:24:6e:8e:8a:
-        b3:63:f2:4b:19:66:24:17:f7:97:3c:af:4e:58:b9:7b:60:a2:
-        ba:39:5e:c8:13:da:20:58:9f:ff:2b:96:23:4f:22:e2:75:86:
-        56:06:97:68:b3:5f:5f:0b:13:f4:6b:fe:30:34:94:f2:97:d7:
-        cc:d9:33:4e:53:55:47:a2:7d:26:81:b5:23:cc:68:be:65:46:
-        e0:72:6a:bc:b6:c4:16:fe:d3:4a:87:4a:ba:1e:f8:01:99:b0:
-        a3:d5:c1:0a:ce:a4:aa:de:59:46:d4:34:0b:aa:6c:73:eb:dc:
-        f8:9a:3b:7b:b7:dd:9f:12:ce:73:ad:f1:30:0e:95:1c:b7:e5:
-        1f:36:2b:34:b4:eb:20:a8:f3:d5:5f:2a:e6:e8:2d:20:54:df:
-        7f:fd:4b:28:95:cd:d3:48:51:57:09:c0:2d:07:f8:94:63:b3:
-        2d:1e:09:ed:c8:a8:74:ba:0c:00:70:6f:f4:18:84:8c:ca:dc:
-        c1:54:d7:f2:5a:c0:05:2d:e3:93:ef:82:68:1c:fc:e3:90:38:
-        0d:73:5d:70:b0:a6:66:7d:0a:26:5d:a2:35:d9:6e:99:00:2f:
-        cd:84:b3:f1:90:48:78:da:01:66:cd:8c:aa:45:ed:28:02:f7:
-        3e:5e:38:a8:3d:ad:ef:bf:5a:ee:06:e0:59:ce:f1:28:df:27:
-        e4:b1:02:52:24:b5:b4:65:73:ed:10:84:1a:51:8f:7c:5a:83:
-        25:c2:93:cb:13:62:11:88:91:34:1e:4f:32:5d:40:a3:d6:26:
-        5b:46:46:1d:c8:4e:d8:88:be:d3:0e:41:aa:bc:81:80:61:6d:
-        fb:8f:ee:99:1f:cb:e1:27:7d:18:62:28:a1:26:8e:af:ce:bd:
-        d7:f4:28:6c:1e:24:9a:eb:ab:ff:67:5b:26:a5:0e:14:5e:d0:
-        9d:f2:de:df:40:82:b0:47:a2:0e:5e:9a:a3:04:1e:c8:71:d7:
-        65:a6:ad:6b:76:1d:08:b2:0a:df:8d:e9:e5:01:32:92:6c:f0:
-        f4:33:22:62:6a:e5:b1:70:60:06:95:85:b1:da:b9:ba:ab:7d:
-        96:33:ca:6c:e6:1e:17:a8:30:17:d0:bf:bd:e6:d4:56:8c:27:
-        fb:1e:2d:0e:f7:50:78:ad:48:86:bf:e7:f4:cd:a0:21:e3:6b:
-        1e:96:16:cc:42:97:ff:87
------BEGIN CERTIFICATE-----
-MIIIfDCCBmSgAwIBAgIBADANBgkqhkiG9w0BAQQFADBvMQswCQYDVQQGEwJHUjEu
-MCwGA1UEChMlR3JlZWsgUmVzZWFyY2ggYW5kIFRlY2hub2xvZ3kgTmV0d29yazEw
-MC4GA1UEAxMnR1JORVQgUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAyMDA0
-MB4XDTA0MDYwMzA3MTIzMloXDTI0MDUyOTA3MTIzMlowbzELMAkGA1UEBhMCR1Ix
-LjAsBgNVBAoTJUdyZWVrIFJlc2VhcmNoIGFuZCBUZWNobm9sb2d5IE5ldHdvcmsx
-MDAuBgNVBAMTJ0dSTkVUIFJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgMjAw
-NDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAPcYtrIcDW3U0BeAjOrY
-1ZMzFZsnw4XV3gC9qdx06iKH+NGCTTfsA258n7HalJHz/Tr7aHYFIXQD/hXip/IF
-3A0eS++sW2Ltiw3uTeH2cdCe1/sRkcgapmflvpOCpOqxaJZLx02qw2EUWo1k7Nfj
-shR+cqusbZyLJk7tpDTZqFf5F5HwU7qHHR1PxlcyBjohghKiuXNmqlbNBfct/MOr
-eURdhRP9i7kK4oVGCD6f7JHmAo2/lMX94tJpd5ZGlmQ5WD7KkYzU2uOOlgt4qqdP
-ymrUuXOg1tr+ItIxpEnXyOm+jC866S8X0HrNHyvL1zRP/zeJx37TAwJQuqwY7AKx
-nT3p0h+PUawref6up6fP94283PF/tcKDyi/kgKxLV60Xkbe08j/J5QBdHSE7SqRF
-OCX//kqwFvrJXwJy/B6SlogVlfKRpI2bViGFXDqv6aqEhRGEYRSMsuj7UA/7FE8M
-vGrU+8UNUMlRtCCnzSn6Tll2sNIbCO0MA/QKHzRpwHavHY4NB7hfFl+a09cNn+zi
-l7iQSqPyw3zuE9EzENil9IPmutXD3z2iOHXsrhc73WmW8nFOOC3biUXg9Dt++XJC
-Jag77nnYgAKQM4b1Ex/pO/uoHvBfGCoSqvSMNDtcNKmsDscORuP0GWJjjcI01JWY
-DU+oKryhHijehMyZ2reCX7TvAgMBAAGjggMhMIIDHTAdBgNVHQ4EFgQUhRi/w687
-gZ/lecbhEzRt0gQG2OgwgZkGA1UdIwSBkTCBjoAUhRi/w687gZ/lecbhEzRt0gQG
-2Oihc6RxMG8xCzAJBgNVBAYTAkdSMS4wLAYDVQQKEyVHcmVlayBSZXNlYXJjaCBh
-bmQgVGVjaG5vbG9neSBOZXR3b3JrMTAwLgYDVQQDEydHUk5FVCBSb290IENlcnRp
-ZmljYXRpb24gQXV0aG9yaXR5IDIwMDSCAQAwDwYDVR0TAQH/BAUwAwEB/zALBgNV
-HQ8EBAMCAQYwEQYJYIZIAYb4QgEBBAQDAgAHMEoGCWCGSAGG+EIBCAQ9FjtodHRw
-Oi8vd3d3LmNhLmdybmV0LmdyL2RvY3VtZW50cy9Hcm5ldFJvb3RDQTIwMDQvQ1Ax
-LjAuaHRtbDCBmgYJYIZIAYb4QgENBIGMFoGJVGhpcyBjZXJ0aWZpY2F0ZSBpcyBz
-dWJqZWN0IHRvIEdyZWVrIGxhd3MgYW5kIG91ciBDUFMuIFRoaXMgQ2VydGlmaWNh
-dGUgbXVzdCBvbmx5IGJlIHVzZWQgZm9yIGFjYWRlbWljLCByZXNlYXJjaCBvciBl
-ZHVjYXRpb25hbCBwdXJwb3Nlcy4wHgYDVR0RBBcwFYETcm9vdGNhMjAwNEBncm5l
-dC5ncjCCASQGA1UdIASCARswggEXMIIBEwYMKwYBBAGBgQMBAQEBMIIBATA1Bggr
-BgEFBQcCARYpaHR0cDovL3d3dy5jYS5ncm5ldC5nci9kb2N1bWVudHMvQ1BTLmh0
-bWwwgccGCCsGAQUFBwICMIG6MCwWJUdyZWVrIFJlc2VhcmNoIGFuZCBUZWNobm9s
-b2d5IE5ldHdvcmswAwIBARqBiVRoaXMgY2VydGlmaWNhdGUgaXMgc3ViamVjdCB0
-byBHcmVlayBsYXdzIGFuZCBvdXIgQ1BTLiBUaGlzIENlcnRpZmljYXRlIG11c3Qg
-b25seSBiZSB1c2VkIGZvciBhY2FkZW1pYywgcmVzZWFyY2ggb3IgZWR1Y2F0aW9u
-YWwgcHVycG9zZXMuMA0GCSqGSIb3DQEBBAUAA4ICAQBdASA/ILFXKRbtOBqdX7k6
-5nc57dYjVZiTJqlSFGQ8ELoUHpAEoRTsIqQN8xUnv1hJwRfCK01TAJ280i8YvlbM
-VipH4iRujoqzY/JLGWYkF/eXPK9OWLl7YKK6OV7IE9ogWJ//K5YjTyLidYZWBpdo
-s19fCxP0a/4wNJTyl9fM2TNOU1VHon0mgbUjzGi+ZUbgcmq8tsQW/tNKh0q6HvgB
-mbCj1cEKzqSq3llG1DQLqmxz69z4mjt7t92fEs5zrfEwDpUct+UfNis0tOsgqPPV
-Xyrm6C0gVN9//Usolc3TSFFXCcAtB/iUY7MtHgntyKh0ugwAcG/0GISMytzBVNfy
-WsAFLeOT74JoHPzjkDgNc11wsKZmfQomXaI12W6ZAC/NhLPxkEh42gFmzYyqRe0o
-Avc+XjioPa3vv1ruBuBZzvEo3yfksQJSJLW0ZXPtEIQaUY98WoMlwpPLE2IRiJE0
-Hk8yXUCj1iZbRkYdyE7YiL7TDkGqvIGAYW37j+6ZH8vhJ30YYiihJo6vzr3X9Chs
-HiSa66v/Z1smpQ4UXtCd8t7fQIKwR6IOXpqjBB7Icddlpq1rdh0IsgrfjenlATKS
-bPD0MyJiauWxcGAGlYWx2rm6q32WM8ps5h4XqDAX0L+95tRWjCf7Hi0O91B4rUiG
-v+f0zaAh42selhbMQpf/hw==
------END CERTIFICATE-----
-

diff --git a/gss/external-services/shibboleth/shibboleth.xml b/gss/external-services/shibboleth/shibboleth.xml
deleted file mode 100644 (file)
index a257eb5..0000000
--- a/gss/external-services/shibboleth/shibboleth.xml
+++ /dev/null
@@ -1,143 +0,0 @@
-<SPConfig
-       clockSkew="180"
-       logger="/opt/shibboleth-1.3/etc/shibboleth/shibboleth.logger"
-       xmlns="urn:mace:shibboleth:target:config:1.0"
-       xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
-       xsi:schemaLocation="urn:mace:shibboleth:target:config:1.0 /opt/shibboleth-1.3/share/xml/shibboleth/shibboleth-targetconfig-1.0.xsd">
-    
-    <Extensions>
-        <Library
-       fatal="true"
-       path="/opt/shibboleth-1.3/libexec/xmlproviders.so"></Library>
-    </Extensions>
-    
-    <Global
-       logger="/opt/shibboleth-1.3/etc/shibboleth/shibd.logger">
-        <UnixListener
-       address="/opt/shibboleth-1.3/var/run/shib-shar.sock"></UnixListener>
-        <MemorySessionCache
-       AAConnectTimeout="15"
-       AATimeout="30"
-       cacheTimeout="3600"
-       cleanupInterval="300"
-       defaultLifetime="1800"
-       propagateErrors="true"
-       retryInterval="300"
-       strictValidity="false"></MemorySessionCache>
-    </Global>
-    
-    <Local
-       localRelayState="true"
-       logger="/opt/shibboleth-1.3/etc/shibboleth/native.logger">
-        
-        <RequestMapProvider
-       type="edu.internet2.middleware.shibboleth.sp.provider.NativeRequestMapProvider">
-            <RequestMap
-       applicationId="default">
-                <Host
-       name="gss.grnet.gr">
-                    <Path
-       authType="shibboleth"
-       name="secure"
-       requireSession="true"></Path>
-                </Host>
-            </RequestMap>
-        </RequestMapProvider>
-        
-    </Local>
-    
-    
-    <Applications
-       homeURL="http://gss.grnet.gr/gss/"
-       id="default"
-       providerId="https://gss.grnet.gr/shibboleth"
-       xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata"
-       xmlns:saml="urn:oasis:names:tc:SAML:1.0:assertion">
-        
-        <Sessions
-       checkAddress="false"
-       consistentAddress="true"
-       handlerSSL="false"
-       handlerURL="/Shibboleth.sso"
-       idpHistory="true"
-       idpHistoryDays="7"
-       lifetime="7200"
-       timeout="3600">
-            
-            
-
-            <SessionInitiator
-       Binding="urn:mace:shibboleth:sp:1.3:SessionInit"
-       Location="/WAYF/GRnet"
-       id="GRnet"
-       isDefault="true"
-       wayfBinding="urn:mace:shibboleth:1.0:profiles:AuthnRequest"
-       wayfURL="https://wayf.grnet.gr/shibboleth-wayf/WAYF"></SessionInitiator>
-            
-            <md:AssertionConsumerService
-       Binding="urn:oasis:names:tc:SAML:1.0:profiles:browser-post"
-       Location="/SAML/POST"
-       index="1"
-       isDefault="true"></md:AssertionConsumerService>
-            <md:AssertionConsumerService
-       Binding="urn:oasis:names:tc:SAML:1.0:profiles:artifact-01"
-       Location="/SAML/Artifact"
-       index="2"></md:AssertionConsumerService>
-            
-            <md:SingleLogoutService
-       Binding="urn:mace:shibboleth:sp:1.3:Logout"
-       ResponseLocation="http://gss.grnet.gr/gss/logout.html"
-       Location="/Logout"></md:SingleLogoutService>
-        </Sessions>
-        
-        
-        <Errors
-       access="/opt/shibboleth-1.3/etc/shibboleth/accessError.html"
-       logoLocation="/shibboleth-sp/logo.jpg"
-       metadata="/opt/shibboleth-1.3/etc/shibboleth/metadataError.html"
-       rm="/opt/shibboleth-1.3/etc/shibboleth/rmError.html"
-       session="/opt/shibboleth-1.3/etc/shibboleth/sessionError.html"
-       ssl="/opt/shibboleth-1.3/etc/shibboleth/sslError.html"
-       styleSheet="/shibboleth-sp/main.css"
-       supportContact="past@ebs.gr"></Errors>
-        
-        <CredentialUse
-       Signing="defcreds"
-       TLS="defcreds"></CredentialUse>
-        
-        <AAPProvider
-       type="edu.internet2.middleware.shibboleth.aap.provider.XMLAAP"
-       uri="/opt/shibboleth-1.3/etc/shibboleth/AAP.xml"></AAPProvider>
-        
-        
-        <MetadataProvider
-       type="edu.internet2.middleware.shibboleth.metadata.provider.XMLMetadata"
-       uri="/opt/shibboleth-1.3/etc/shibboleth/gss-metadata.xml"></MetadataProvider>
-        
-        <TrustProvider
-       type="edu.internet2.middleware.shibboleth.common.provider.ShibbolethTrust"></TrustProvider>
-        
-    </Applications>
-    
-    
-    <CredentialsProvider
-       type="edu.internet2.middleware.shibboleth.common.Credentials">
-        <Credentials
-       xmlns="urn:mace:shibboleth:credentials:1.0">
-            <FileResolver
-       Id="defcreds">
-                <Key>
-                    <Path>/opt/shibboleth-1.3/etc/shibboleth/gss.grnet.gr.key</Path>
-                </Key>
-                <Certificate>
-                    <Path>/opt/shibboleth-1.3/etc/shibboleth/gss.grnet.gr.crt</Path>
-                </Certificate>
-            </FileResolver>
-        </Credentials>
-    </CredentialsProvider>
-    
-    <AttributeFactory
-       AttributeName="urn:oid:1.3.6.1.4.1.5923.1.1.1.10"
-       type="edu.internet2.middleware.shibboleth.common.provider.TargetedIDFactory"></AttributeFactory>
-    
-</SPConfig>

diff --git a/gss/external-services/solr/bin/solr b/gss/external-services/solr/bin/solr
deleted file mode 100644 (file)
index 7bcb61d..0000000
--- a/gss/external-services/solr/bin/solr
+++ /dev/null
@@ -1,87 +0,0 @@
-#!/bin/sh
-### BEGIN INIT INFO
-# Provides:          solr
-# Required-Start:    $local_fs $remote_fs $network $syslog
-# Required-Stop:     $local_fs $remote_fs $network $syslog
-# Default-Start:     2 3 4 5
-# Default-Stop:      0 1 6
-# Short-Description: Start/stop solr indexing server
-### END INIT INFO
-
-#define where solr is 
-SOLR_HOME=${SOLR_HOME:-"/opt/apache-solr-1.3.0"}
-
-#define the user under which jboss will run, or use 'RUNASIS' to run as the current user
-SOLR_USER=${SOLR_USER:-"www-data"}
-
-#make sure java is in your path
-JAVAPTH=${JAVAPTH:-"/usr/bin"}
-
-SOLR_HOST="0.0.0.0"
-
-SOLR_CONSOLE="$SOLR_HOME/example/logs/solr_console.log"
-
-if [ "$SOLR_USER" = "RUNASIS" ]; then
-  SUBIT=""
-else
-  SUBIT="su - $SOLR_USER -c "
-fi
-
-if [ -n "$SOLR_CONSOLE" -a ! -d "$SOLR_CONSOLE" ]; then
-  # ensure the file exists
-  touch $SOLR_CONSOLE
-  if [ ! -z "$SUBIT" ]; then
-    chown $SOLR_USER $SOLR_CONSOLE
-  fi 
-fi
-
-if [ -n "$SOLR_CONSOLE" -a ! -f "$SOLR_CONSOLE" ]; then
-  echo "WARNING: location for saving console log invalid: $SOLR_CONSOLE"
-  echo "WARNING: ignoring it and using /dev/null"
-  SOLR_CONSOLE="/dev/null"
-fi
-
-#define what will be done with the console log
-SOLR_CONSOLE=${SOLR_CONSOLE:-"/dev/null"}
-
-STOP_PORT="8079"
-STOP_KEY="123456"
-SOLR_CMD_START="cd $SOLR_HOME/example; $JAVAPTH/java -DSTOP.PORT=$STOP_PORT -DSTOP.KEY=$STOP_KEY -jar $SOLR_HOME/example/start.jar"
-SOLR_CMD_STOP=${SOLR_CMD_STOP:-"$JAVAPTH/java -DSTOP.PORT=$STOP_PORT -DSTOP.KEY=$STOP_KEY -jar $SOLR_HOME/example/start.jar --stop"}
-
-if [ -z "`echo $PATH | grep $JAVAPTH`" ]; then
-  export PATH=$PATH:$JAVAPTH
-fi
-
-if [ ! -d "$SOLR_HOME" ]; then
-  echo SOLR_HOME does not exist as a valid directory : $SOLR_HOME
-  exit 1
-fi
-
-#echo SOLR_CMD_START = $SOLR_CMD_START
-
-
-case "$1" in
-start)
-    cd $SOLR_HOME
-    if [ -z "$SUBIT" ]; then
-        eval $SOLR_CMD_START >${SOLR_CONSOLE} 2>&1 &
-    else
-        $SUBIT "$SOLR_CMD_START >${SOLR_CONSOLE} 2>&1 &" 
-    fi
-    ;;
-stop)
-    if [ -z "$SUBIT" ]; then
-        $SOLR_CMD_STOP
-    else
-        $SUBIT "$SOLR_CMD_STOP"
-    fi 
-    ;;
-restart)
-    $0 stop
-    $0 start
-    ;;
-*)
-    echo "usage: $0 (start|stop|restart|help)"
-esac
-

diff --git a/gss/external-services/solr/conf/schema.xml b/gss/external-services/solr/conf/schema.xml
deleted file mode 100644 (file)
index 2cd8576..0000000
--- a/gss/external-services/solr/conf/schema.xml
+++ /dev/null
@@ -1,314 +0,0 @@
-<?xml version="1.0" encoding="UTF-8" ?>\r
-<!--\r
- Licensed to the Apache Software Foundation (ASF) under one or more\r
- contributor license agreements.  See the NOTICE file distributed with\r
- this work for additional information regarding copyright ownership.\r
- The ASF licenses this file to You under the Apache License, Version 2.0\r
- (the "License"); you may not use this file except in compliance with\r
- the License.  You may obtain a copy of the License at\r
-\r
-     http://www.apache.org/licenses/LICENSE-2.0\r
-\r
- Unless required by applicable law or agreed to in writing, software\r
- distributed under the License is distributed on an "AS IS" BASIS,\r
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r
- See the License for the specific language governing permissions and\r
- limitations under the License.\r
--->\r
-\r
-<!--  \r
- This is the Solr schema file. This file should be named "schema.xml" and\r
- should be in the conf directory under the solr home\r
- (i.e. ./solr/conf/schema.xml by default) \r
- or located where the classloader for the Solr webapp can find it.\r
-\r
- This example schema is the recommended starting point for users.\r
- It should be kept correct and concise, usable out-of-the-box.\r
-\r
- For more information, on how to customize this file, please see\r
- http://wiki.apache.org/solr/SchemaXml\r
--->\r
-\r
-<schema name="example" version="1.1">\r
-  <!-- attribute "name" is the name of this schema and is only used for display purposes.\r
-       Applications should change this to reflect the nature of the search collection.\r
-       version="1.1" is Solr's version number for the schema syntax and semantics.  It should\r
-       not normally be changed by applications.\r
-       1.0: multiValued attribute did not exist, all fields are multiValued by nature\r
-       1.1: multiValued attribute introduced, false by default -->\r
-\r
-  <types>\r
-    <!-- field type definitions. The "name" attribute is\r
-       just a label to be used by field definitions.  The "class"\r
-       attribute and any other attributes determine the real\r
-       behavior of the fieldType.\r
-         Class names starting with "solr" refer to java classes in the\r
-       org.apache.solr.analysis package.\r
-    -->\r
-\r
-    <!-- The StrField type is not analyzed, but indexed/stored verbatim.  \r
-       - StrField and TextField support an optional compressThreshold which\r
-       limits compression (if enabled in the derived fields) to values which\r
-       exceed a certain size (in characters).\r
-    -->\r
-    <fieldType name="string" class="solr.StrField" sortMissingLast="true" omitNorms="true"/>\r
-\r
-    <!-- boolean type: "true" or "false" -->\r
-    <fieldType name="boolean" class="solr.BoolField" sortMissingLast="true" omitNorms="true"/>\r
-\r
-    <!-- The optional sortMissingLast and sortMissingFirst attributes are\r
-         currently supported on types that are sorted internally as strings.\r
-       - If sortMissingLast="true", then a sort on this field will cause documents\r
-         without the field to come after documents with the field,\r
-         regardless of the requested sort order (asc or desc).\r
-       - If sortMissingFirst="true", then a sort on this field will cause documents\r
-         without the field to come before documents with the field,\r
-         regardless of the requested sort order.\r
-       - If sortMissingLast="false" and sortMissingFirst="false" (the default),\r
-         then default lucene sorting will be used which places docs without the\r
-         field first in an ascending sort and last in a descending sort.\r
-    -->    \r
-\r
-\r
-    <!-- numeric field types that store and index the text\r
-         value verbatim (and hence don't support range queries, since the\r
-         lexicographic ordering isn't equal to the numeric ordering) -->\r
-    <fieldType name="integer" class="solr.IntField" omitNorms="true"/>\r
-    <fieldType name="long" class="solr.LongField" omitNorms="true"/>\r
-    <fieldType name="float" class="solr.FloatField" omitNorms="true"/>\r
-    <fieldType name="double" class="solr.DoubleField" omitNorms="true"/>\r
-\r
-\r
-    <!-- Numeric field types that manipulate the value into\r
-         a string value that isn't human-readable in its internal form,\r
-         but with a lexicographic ordering the same as the numeric ordering,\r
-         so that range queries work correctly. -->\r
-    <fieldType name="sint" class="solr.SortableIntField" sortMissingLast="true" omitNorms="true"/>\r
-    <fieldType name="slong" class="solr.SortableLongField" sortMissingLast="true" omitNorms="true"/>\r
-    <fieldType name="sfloat" class="solr.SortableFloatField" sortMissingLast="true" omitNorms="true"/>\r
-    <fieldType name="sdouble" class="solr.SortableDoubleField" sortMissingLast="true" omitNorms="true"/>\r
-\r
-\r
-    <!-- The format for this date field is of the form 1995-12-31T23:59:59Z, and\r
-         is a more restricted form of the canonical representation of dateTime\r
-         http://www.w3.org/TR/xmlschema-2/#dateTime    \r
-         The trailing "Z" designates UTC time and is mandatory.\r
-         Optional fractional seconds are allowed: 1995-12-31T23:59:59.999Z\r
-         All other components are mandatory.\r
-\r
-         Expressions can also be used to denote calculations that should be\r
-         performed relative to "NOW" to determine the value, ie...\r
-\r
-               NOW/HOUR\r
-                  ... Round to the start of the current hour\r
-               NOW-1DAY\r
-                  ... Exactly 1 day prior to now\r
-               NOW/DAY+6MONTHS+3DAYS\r
-                  ... 6 months and 3 days in the future from the start of\r
-                      the current day\r
-                      \r
-         Consult the DateField javadocs for more information.\r
-      -->\r
-    <fieldType name="date" class="solr.DateField" sortMissingLast="true" omitNorms="true"/>\r
-\r
-\r
-    <!-- The "RandomSortField" is not used to store or search any\r
-         data.  You can declare fields of this type it in your schema\r
-         to generate psuedo-random orderings of your docs for sorting \r
-         purposes.  The ordering is generated based on the field name \r
-         and the version of the index, As long as the index version\r
-         remains unchanged, and the same field name is reused,\r
-         the ordering of the docs will be consistent.  \r
-         If you want differend psuedo-random orderings of documents,\r
-         for the same version of the index, use a dynamicField and\r
-         change the name\r
-     -->\r
-    <fieldType name="random" class="solr.RandomSortField" indexed="true" />\r
-\r
-    <!-- solr.TextField allows the specification of custom text analyzers\r
-         specified as a tokenizer and a list of token filters. Different\r
-         analyzers may be specified for indexing and querying.\r
-\r
-         The optional positionIncrementGap puts space between multiple fields of\r
-         this type on the same document, with the purpose of preventing false phrase\r
-         matching across fields.\r
-\r
-         For more info on customizing your analyzer chain, please see\r
-         http://wiki.apache.org/solr/AnalyzersTokenizersTokenFilters\r
-     -->\r
-\r
-    <!-- One can also specify an existing Analyzer class that has a\r
-         default constructor via the class attribute on the analyzer element\r
-    -->\r
-    <fieldType name="text_greek" class="solr.TextField">\r
-      <analyzer class="org.apache.lucene.analysis.el.GreekAnalyzer"/>\r
-    </fieldType>\r
-\r
-    <!-- A text field that only splits on whitespace for exact matching of words -->\r
-    <fieldType name="text_ws" class="solr.TextField" positionIncrementGap="100">\r
-      <analyzer>\r
-        <tokenizer class="solr.WhitespaceTokenizerFactory"/>\r
-      </analyzer>\r
-    </fieldType>\r
-\r
-    <!-- A text field that uses WordDelimiterFilter to enable splitting and matching of\r
-        words on case-change, alpha numeric boundaries, and non-alphanumeric chars,\r
-        so that a query of "wifi" or "wi fi" could match a document containing "Wi-Fi".\r
-        Synonyms and stopwords are customized by external files, and stemming is enabled.\r
-        Duplicate tokens at the same position (which may result from Stemmed Synonyms or\r
-        WordDelim parts) are removed.\r
-        -->\r
-    <fieldType name="text" class="solr.TextField" positionIncrementGap="100">\r
-      <analyzer type="index">\r
-        <tokenizer class="solr.WhitespaceTokenizerFactory"/>\r
-        <!-- in this example, we will only use synonyms at query time\r
-        <filter class="solr.SynonymFilterFactory" synonyms="index_synonyms.txt" ignoreCase="true" expand="false"/>\r
-        -->\r
-        <!-- Case insensitive stop word removal.\r
-             enablePositionIncrements=true ensures that a 'gap' is left to\r
-             allow for accurate phrase queries.\r
-        -->\r
-        <filter class="solr.StopFilterFactory"\r
-                ignoreCase="true"\r
-                words="stopwords.txt"\r
-                enablePositionIncrements="true"\r
-                />\r
-        <filter class="solr.WordDelimiterFilterFactory" generateWordParts="1" generateNumberParts="1" catenateWords="1" catenateNumbers="1" catenateAll="0" splitOnCaseChange="1"/>\r
-        <filter class="solr.LowerCaseFilterFactory"/>\r
-        <filter class="solr.EnglishPorterFilterFactory" protected="protwords.txt"/>\r
-        <filter class="solr.RemoveDuplicatesTokenFilterFactory"/>\r
-      </analyzer>\r
-      <analyzer type="query">\r
-        <tokenizer class="solr.WhitespaceTokenizerFactory"/>\r
-        <filter class="solr.SynonymFilterFactory" synonyms="synonyms.txt" ignoreCase="true" expand="true"/>\r
-        <filter class="solr.StopFilterFactory" ignoreCase="true" words="stopwords.txt"/>\r
-        <filter class="solr.WordDelimiterFilterFactory" generateWordParts="1" generateNumberParts="1" catenateWords="0" catenateNumbers="0" catenateAll="0" splitOnCaseChange="1"/>\r
-        <filter class="solr.LowerCaseFilterFactory"/>\r
-        <filter class="solr.EnglishPorterFilterFactory" protected="protwords.txt"/>\r
-        <filter class="solr.RemoveDuplicatesTokenFilterFactory"/>\r
-      </analyzer>\r
-    </fieldType>\r
-\r
-\r
-    <!-- Less flexible matching, but less false matches.  Probably not ideal for product names,\r
-         but may be good for SKUs.  Can insert dashes in the wrong place and still match. -->\r
-    <fieldType name="textTight" class="solr.TextField" positionIncrementGap="100" >\r
-      <analyzer>\r
-        <tokenizer class="solr.WhitespaceTokenizerFactory"/>\r
-        <filter class="solr.SynonymFilterFactory" synonyms="synonyms.txt" ignoreCase="true" expand="false"/>\r
-        <filter class="solr.StopFilterFactory" ignoreCase="true" words="stopwords.txt"/>\r
-        <filter class="solr.WordDelimiterFilterFactory" generateWordParts="0" generateNumberParts="0" catenateWords="1" catenateNumbers="1" catenateAll="0"/>\r
-        <filter class="solr.LowerCaseFilterFactory"/>\r
-        <filter class="solr.EnglishPorterFilterFactory" protected="protwords.txt"/>\r
-        <filter class="solr.RemoveDuplicatesTokenFilterFactory"/>\r
-      </analyzer>\r
-    </fieldType>\r
-\r
-    <!--\r
-     Setup simple analysis for spell checking\r
-     -->\r
-    <fieldType name="textSpell" class="solr.TextField" positionIncrementGap="100" >\r
-      <analyzer>\r
-        <tokenizer class="solr.StandardTokenizerFactory"/>\r
-        <filter class="solr.LowerCaseFilterFactory"/>\r
-        <filter class="solr.RemoveDuplicatesTokenFilterFactory"/>\r
-      </analyzer>\r
-    </fieldType>\r
-\r
-    <!-- This is an example of using the KeywordTokenizer along\r
-         With various TokenFilterFactories to produce a sortable field\r
-         that does not include some properties of the source text\r
-      -->\r
-    <fieldType name="alphaOnlySort" class="solr.TextField" sortMissingLast="true" omitNorms="true">\r
-      <analyzer>\r
-        <!-- KeywordTokenizer does no actual tokenizing, so the entire\r
-             input string is preserved as a single token\r
-          -->\r
-        <tokenizer class="solr.KeywordTokenizerFactory"/>\r
-        <!-- The LowerCase TokenFilter does what you expect, which can be\r
-             when you want your sorting to be case insensitive\r
-          -->\r
-        <filter class="solr.LowerCaseFilterFactory" />\r
-        <!-- The TrimFilter removes any leading or trailing whitespace -->\r
-        <filter class="solr.TrimFilterFactory" />\r
-        <!-- The PatternReplaceFilter gives you the flexibility to use\r
-             Java Regular expression to replace any sequence of characters\r
-             matching a pattern with an arbitrary replacement string, \r
-             which may include back refrences to portions of the orriginal\r
-             string matched by the pattern.\r
-             \r
-             See the Java Regular Expression documentation for more\r
-             infomation on pattern and replacement string syntax.\r
-             \r
-             http://java.sun.com/j2se/1.5.0/docs/api/java/util/regex/package-summary.html\r
-          -->\r
-        <filter class="solr.PatternReplaceFilterFactory"\r
-                pattern="([^a-z])" replacement="" replace="all"\r
-        />\r
-      </analyzer>\r
-    </fieldType>\r
-\r
-    <!-- since fields of this type are by default not stored or indexed, any data added to \r
-         them will be ignored outright \r
-     --> \r
-    <fieldtype name="ignored" stored="false" indexed="false" class="solr.StrField" /> \r
-\r
- </types>\r
-\r
-\r
- <fields>\r
-   <!-- Valid attributes for fields:\r
-     name: mandatory - the name for the field\r
-     type: mandatory - the name of a previously defined type from the <types> section\r
-     indexed: true if this field should be indexed (searchable or sortable)\r
-     stored: true if this field should be retrievable\r
-     compressed: [false] if this field should be stored using gzip compression\r
-       (this will only apply if the field type is compressable; among\r
-       the standard field types, only TextField and StrField are)\r
-     multiValued: true if this field may contain multiple values per document\r
-     omitNorms: (expert) set to true to omit the norms associated with\r
-       this field (this disables length normalization and index-time\r
-       boosting for the field, and saves some memory).  Only full-text\r
-       fields or fields that need an index-time boost need norms.\r
-     termVectors: [false] set to true to store the term vector for a given field.\r
-       When using MoreLikeThis, fields used for similarity should be stored for \r
-       best performance.\r
-   -->\r
-\r
-   <field name="id" type="long" indexed="true" stored="true" required="true" /> \r
-   <field name="name" type="text_greek" indexed="true" stored="true" required="true"/>\r
-   <field name="tag" type="text_greek" indexed="true" stored="true" multiValued="true"/>\r
-   <field name="body" type="text_greek" indexed="true" stored="false"/>\r
- </fields>\r
-\r
- <!-- Field to use to determine and enforce document uniqueness. \r
-      Unless this field is marked with required="false", it will be a required field\r
-   -->\r
- <uniqueKey>id</uniqueKey>\r
-\r
- <!-- field for the QueryParser to use when an explicit fieldname is absent -->\r
- <defaultSearchField>body</defaultSearchField>\r
-\r
- <!-- SolrQueryParser configuration: defaultOperator="AND|OR" -->\r
- <solrQueryParser defaultOperator="OR"/>\r
-\r
-  <!-- copyField commands copy one field to another at the time a document\r
-        is added to the index.  It's used either to index the same field differently,\r
-        or to add multiple fields to the same field for easier/faster searching.  -->\r
-\r
- <!-- Similarity is the scoring routine for each document vs. a query.\r
-      A custom similarity may be specified here, but the default is fine\r
-      for most applications.  -->\r
- <!-- <similarity class="org.apache.lucene.search.DefaultSimilarity"/> -->\r
- <!-- ... OR ...\r
-      Specify a SimilarityFactory class name implementation\r
-      allowing parameters to be used.\r
- -->\r
- <!--\r
- <similarity class="com.example.solr.CustomSimilarityFactory">\r
-   <str name="paramkey">param value</str>\r
- </similarity>\r
- -->\r
-\r
-\r
-</schema>\r

diff --git a/gss/external-services/solr/conf/solrconfig.xml b/gss/external-services/solr/conf/solrconfig.xml
deleted file mode 100644 (file)
index b617dc9..0000000
--- a/gss/external-services/solr/conf/solrconfig.xml
+++ /dev/null
@@ -1,682 +0,0 @@
-<?xml version="1.0" encoding="UTF-8" ?>\r
-<!--\r
- Licensed to the Apache Software Foundation (ASF) under one or more\r
- contributor license agreements.  See the NOTICE file distributed with\r
- this work for additional information regarding copyright ownership.\r
- The ASF licenses this file to You under the Apache License, Version 2.0\r
- (the "License"); you may not use this file except in compliance with\r
- the License.  You may obtain a copy of the License at\r
-\r
-     http://www.apache.org/licenses/LICENSE-2.0\r
-\r
- Unless required by applicable law or agreed to in writing, software\r
- distributed under the License is distributed on an "AS IS" BASIS,\r
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\r
- See the License for the specific language governing permissions and\r
- limitations under the License.\r
--->\r
-\r
-<config>\r
-  <!-- Set this to 'false' if you want solr to continue working after it has \r
-       encountered an severe configuration error.  In a production environment, \r
-       you may want solr to keep working even if one handler is mis-configured.\r
-\r
-       You may also set this to false using by setting the system property:\r
-         -Dsolr.abortOnConfigurationError=false\r
-     -->\r
-  <abortOnConfigurationError>${solr.abortOnConfigurationError:true}</abortOnConfigurationError>\r
-\r
-  <!-- Used to specify an alternate directory to hold all index data\r
-       other than the default ./data under the Solr home.\r
-       If replication is in use, this should match the replication configuration. -->\r
-  <!-- dataDir>${solr.data.dir:./solr/data}</dataDir -->\r
-  <dataDir>${solr.data.dir:/data/index}</dataDir>\r
-\r
-\r
-  <indexDefaults>\r
-   <!-- Values here affect all index writers and act as a default unless overridden. -->\r
-    <useCompoundFile>false</useCompoundFile>\r
-\r
-    <mergeFactor>10</mergeFactor>\r
-    <!--\r
-     If both ramBufferSizeMB and maxBufferedDocs is set, then Lucene will flush based on whichever limit is hit first.\r
-\r
-     -->\r
-    <!--<maxBufferedDocs>1000</maxBufferedDocs>-->\r
-    <!-- Tell Lucene when to flush documents to disk.\r
-    Giving Lucene more memory for indexing means faster indexing at the cost of more RAM\r
-\r
-    If both ramBufferSizeMB and maxBufferedDocs is set, then Lucene will flush based on whichever limit is hit first.\r
-\r
-    -->\r
-    <ramBufferSizeMB>32</ramBufferSizeMB>\r
-    <maxMergeDocs>2147483647</maxMergeDocs>\r
-    <maxFieldLength>10000</maxFieldLength>\r
-    <writeLockTimeout>1000</writeLockTimeout>\r
-    <commitLockTimeout>10000</commitLockTimeout>\r
-\r
-    <!--\r
-     Expert: Turn on Lucene's auto commit capability.\r
-     This causes intermediate segment flushes to write a new lucene\r
-     index descriptor, enabling it to be opened by an external\r
-     IndexReader.\r
-     NOTE: Despite the name, this value does not have any relation to Solr's autoCommit functionality\r
-     -->\r
-    <!--<luceneAutoCommit>false</luceneAutoCommit>-->\r
-    <!--\r
-     Expert:\r
-     The Merge Policy in Lucene controls how merging is handled by Lucene.  The default in 2.3 is the LogByteSizeMergePolicy, previous\r
-     versions used LogDocMergePolicy.\r
-\r
-     LogByteSizeMergePolicy chooses segments to merge based on their size.  The Lucene 2.2 default, LogDocMergePolicy chose when\r
-     to merge based on number of documents\r
-\r
-     Other implementations of MergePolicy must have a no-argument constructor\r
-     -->\r
-    <!--<mergePolicy>org.apache.lucene.index.LogByteSizeMergePolicy</mergePolicy>-->\r
-\r
-    <!--\r
-     Expert:\r
-     The Merge Scheduler in Lucene controls how merges are performed.  The ConcurrentMergeScheduler (Lucene 2.3 default)\r
-      can perform merges in the background using separate threads.  The SerialMergeScheduler (Lucene 2.2 default) does not.\r
-     -->\r
-    <!--<mergeScheduler>org.apache.lucene.index.ConcurrentMergeScheduler</mergeScheduler>-->\r
-\r
-    <!--\r
-      This option specifies which Lucene LockFactory implementation to use.\r
-      \r
-      single = SingleInstanceLockFactory - suggested for a read-only index\r
-               or when there is no possibility of another process trying\r
-               to modify the index.\r
-      native = NativeFSLockFactory\r
-      simple = SimpleFSLockFactory\r
-\r
-      (For backwards compatibility with Solr 1.2, 'simple' is the default\r
-       if not specified.)\r
-    -->\r
-    <lockType>single</lockType>\r
-  </indexDefaults>\r
-\r
-  <mainIndex>\r
-    <!-- options specific to the main on-disk lucene index -->\r
-    <useCompoundFile>false</useCompoundFile>\r
-    <ramBufferSizeMB>32</ramBufferSizeMB>\r
-    <mergeFactor>10</mergeFactor>\r
-    <!-- Deprecated -->\r
-    <!--<maxBufferedDocs>1000</maxBufferedDocs>-->\r
-    <maxMergeDocs>2147483647</maxMergeDocs>\r
-    <maxFieldLength>10000</maxFieldLength>\r
-\r
-    <!-- If true, unlock any held write or commit locks on startup. \r
-         This defeats the locking mechanism that allows multiple\r
-         processes to safely access a lucene index, and should be\r
-         used with care.\r
-         This is not needed if lock type is 'none' or 'single'\r
-     -->\r
-    <unlockOnStartup>false</unlockOnStartup>\r
-  </mainIndex>\r
-  \r
-  <!-- Enables JMX if and only if an existing MBeanServer is found, use \r
-               this if you want to configure JMX through JVM parameters. Remove\r
-               this to disable exposing Solr configuration and statistics to JMX.\r
-               \r
-               If you want to connect to a particular server, specify the agentId\r
-               e.g. <jmx agentId="myAgent" />\r
-               \r
-               If you want to start a new MBeanServer, specify the serviceUrl\r
-               e.g <jmx serviceurl="service:jmx:rmi:///jndi/rmi://localhost:9999/solr" />\r
-               \r
-               For more details see http://wiki.apache.org/solr/SolrJmx\r
-  -->\r
-  <jmx />\r
-\r
-  <!-- the default high-performance update handler -->\r
-  <updateHandler class="solr.DirectUpdateHandler2">\r
-\r
-    <!-- A prefix of "solr." for class names is an alias that\r
-         causes solr to search appropriate packages, including\r
-         org.apache.solr.(search|update|request|core|analysis)\r
-     -->\r
-\r
-    <!-- Perform a <commit/> automatically under certain conditions:\r
-         maxDocs - number of updates since last commit is greater than this\r
-         maxTime - oldest uncommited update (in ms) is this long ago\r
-    <autoCommit> \r
-      <maxDocs>10000</maxDocs>\r
-      <maxTime>1000</maxTime> \r
-    </autoCommit>\r
-    -->\r
-\r
-    <!-- The RunExecutableListener executes an external command.\r
-         exe - the name of the executable to run\r
-         dir - dir to use as the current working directory. default="."\r
-         wait - the calling thread waits until the executable returns. default="true"\r
-         args - the arguments to pass to the program.  default=nothing\r
-         env - environment variables to set.  default=nothing\r
-      -->\r
-    <!-- A postCommit event is fired after every commit or optimize command\r
-    <listener event="postCommit" class="solr.RunExecutableListener">\r
-      <str name="exe">solr/bin/snapshooter</str>\r
-      <str name="dir">.</str>\r
-      <bool name="wait">true</bool>\r
-      <arr name="args"> <str>arg1</str> <str>arg2</str> </arr>\r
-      <arr name="env"> <str>MYVAR=val1</str> </arr>\r
-    </listener>\r
-    -->\r
-    <!-- A postOptimize event is fired only after every optimize command, useful\r
-         in conjunction with index distribution to only distribute optimized indicies \r
-    <listener event="postOptimize" class="solr.RunExecutableListener">\r
-      <str name="exe">snapshooter</str>\r
-      <str name="dir">solr/bin</str>\r
-      <bool name="wait">true</bool>\r
-    </listener>\r
-    -->\r
-\r
-  </updateHandler>\r
-\r
-\r
-  <query>\r
-    <!-- Maximum number of clauses in a boolean query... can affect\r
-        range or prefix queries that expand to big boolean\r
-        queries.  An exception is thrown if exceeded.  -->\r
-    <maxBooleanClauses>1024</maxBooleanClauses>\r
-\r
-    \r
-    <!-- Cache used by SolrIndexSearcher for filters (DocSets),\r
-         unordered sets of *all* documents that match a query.\r
-         When a new searcher is opened, its caches may be prepopulated\r
-         or "autowarmed" using data from caches in the old searcher.\r
-         autowarmCount is the number of items to prepopulate.  For LRUCache,\r
-         the autowarmed items will be the most recently accessed items.\r
-       Parameters:\r
-         class - the SolrCache implementation (currently only LRUCache)\r
-         size - the maximum number of entries in the cache\r
-         initialSize - the initial capacity (number of entries) of\r
-           the cache.  (seel java.util.HashMap)\r
-         autowarmCount - the number of entries to prepopulate from\r
-           and old cache.\r
-         -->\r
-    <filterCache\r
-      class="solr.LRUCache"\r
-      size="512"\r
-      initialSize="512"\r
-      autowarmCount="128"/>\r
-\r
-   <!-- queryResultCache caches results of searches - ordered lists of\r
-         document ids (DocList) based on a query, a sort, and the range\r
-         of documents requested.  -->\r
-    <queryResultCache\r
-      class="solr.LRUCache"\r
-      size="512"\r
-      initialSize="512"\r
-      autowarmCount="32"/>\r
-\r
-  <!-- documentCache caches Lucene Document objects (the stored fields for each document).\r
-       Since Lucene internal document ids are transient, this cache will not be autowarmed.  -->\r
-    <documentCache\r
-      class="solr.LRUCache"\r
-      size="512"\r
-      initialSize="512"\r
-      autowarmCount="0"/>\r
-\r
-    <!-- If true, stored fields that are not requested will be loaded lazily.\r
-\r
-    This can result in a significant speed improvement if the usual case is to\r
-    not load all stored fields, especially if the skipped fields are large compressed\r
-    text fields.\r
-    -->\r
-    <enableLazyFieldLoading>true</enableLazyFieldLoading>\r
-\r
-    <!-- Example of a generic cache.  These caches may be accessed by name\r
-         through SolrIndexSearcher.getCache(),cacheLookup(), and cacheInsert().\r
-         The purpose is to enable easy caching of user/application level data.\r
-         The regenerator argument should be specified as an implementation\r
-         of solr.search.CacheRegenerator if autowarming is desired.  -->\r
-    <!--\r
-    <cache name="myUserCache"\r
-      class="solr.LRUCache"\r
-      size="4096"\r
-      initialSize="1024"\r
-      autowarmCount="1024"\r
-      regenerator="org.mycompany.mypackage.MyRegenerator"\r
-      />\r
-    -->\r
-\r
-   <!-- An optimization that attempts to use a filter to satisfy a search.\r
-         If the requested sort does not include score, then the filterCache\r
-         will be checked for a filter matching the query. If found, the filter\r
-         will be used as the source of document ids, and then the sort will be\r
-         applied to that.\r
-    <useFilterForSortedQuery>true</useFilterForSortedQuery>\r
-   -->\r
-\r
-   <!-- An optimization for use with the queryResultCache.  When a search\r
-         is requested, a superset of the requested number of document ids\r
-         are collected.  For example, if a search for a particular query\r
-         requests matching documents 10 through 19, and queryWindowSize is 50,\r
-         then documents 0 through 49 will be collected and cached.  Any further\r
-         requests in that range can be satisfied via the cache.  -->\r
-    <queryResultWindowSize>50</queryResultWindowSize>\r
-    \r
-    <!-- Maximum number of documents to cache for any entry in the\r
-         queryResultCache. -->\r
-    <queryResultMaxDocsCached>200</queryResultMaxDocsCached>\r
-\r
-    <!-- This entry enables an int hash representation for filters (DocSets)\r
-         when the number of items in the set is less than maxSize.  For smaller\r
-         sets, this representation is more memory efficient, more efficient to\r
-         iterate over, and faster to take intersections.  -->\r
-    <HashDocSet maxSize="3000" loadFactor="0.75"/>\r
-\r
-    <!-- a newSearcher event is fired whenever a new searcher is being prepared\r
-         and there is a current searcher handling requests (aka registered). -->\r
-    <!-- QuerySenderListener takes an array of NamedList and executes a\r
-         local query request for each NamedList in sequence. -->\r
-    <listener event="newSearcher" class="solr.QuerySenderListener">\r
-      <arr name="queries">\r
-        <lst> <str name="q">solr</str> <str name="start">0</str> <str name="rows">10</str> </lst>\r
-        <lst> <str name="q">rocks</str> <str name="start">0</str> <str name="rows">10</str> </lst>\r
-        <lst><str name="q">static newSearcher warming query from solrconfig.xml</str></lst>\r
-      </arr>\r
-    </listener>\r
-\r
-    <!-- a firstSearcher event is fired whenever a new searcher is being\r
-         prepared but there is no current registered searcher to handle\r
-         requests or to gain autowarming data from. -->\r
-    <listener event="firstSearcher" class="solr.QuerySenderListener">\r
-      <arr name="queries">\r
-        <lst> <str name="q">fast_warm</str> <str name="start">0</str> <str name="rows">10</str> </lst>\r
-        <lst><str name="q">static firstSearcher warming query from solrconfig.xml</str></lst>\r
-      </arr>\r
-    </listener>\r
-\r
-    <!-- If a search request comes in and there is no current registered searcher,\r
-         then immediately register the still warming searcher and use it.  If\r
-         "false" then all requests will block until the first searcher is done\r
-         warming. -->\r
-    <useColdSearcher>false</useColdSearcher>\r
-\r
-    <!-- Maximum number of searchers that may be warming in the background\r
-      concurrently.  An error is returned if this limit is exceeded. Recommend\r
-      1-2 for read-only slaves, higher for masters w/o cache warming. -->\r
-    <maxWarmingSearchers>2</maxWarmingSearchers>\r
-\r
-  </query>\r
-\r
-  <!-- \r
-    Let the dispatch filter handler /select?qt=XXX\r
-    handleSelect=true will use consistent error handling for /select and /update\r
-    handleSelect=false will use solr1.1 style error formatting\r
-    -->\r
-  <requestDispatcher handleSelect="true" >\r
-    <!--Make sure your system has some authentication before enabling remote streaming!  -->\r
-    <requestParsers enableRemoteStreaming="true" multipartUploadLimitInKB="30720" />\r
-        \r
-    <!-- Set HTTP caching related parameters (for proxy caches and clients).\r
-          \r
-         To get the behaviour of Solr 1.2 (ie: no caching related headers)\r
-         use the never304="true" option and do not specify a value for\r
-         <cacheControl>\r
-    -->\r
-    <!-- <httpCaching never304="true"> -->\r
-    <httpCaching lastModifiedFrom="openTime"\r
-                 etagSeed="Solr">\r
-       <!-- lastModFrom="openTime" is the default, the Last-Modified value\r
-            (and validation against If-Modified-Since requests) will all be\r
-            relative to when the current Searcher was opened.\r
-            You can change it to lastModFrom="dirLastMod" if you want the\r
-            value to exactly corrispond to when the physical index was last\r
-            modified.\r
-               \r
-            etagSeed="..." is an option you can change to force the ETag\r
-            header (and validation against If-None-Match requests) to be\r
-            differnet even if the index has not changed (ie: when making\r
-            significant changes to your config file)\r
-\r
-            lastModifiedFrom and etagSeed are both ignored if you use the\r
-            never304="true" option.\r
-       -->\r
-       <!-- If you include a <cacheControl> directive, it will be used to\r
-            generate a Cache-Control header, as well as an Expires header\r
-            if the value contains "max-age="\r
-               \r
-            By default, no Cache-Control header is generated.\r
-\r
-            You can use the <cacheControl> option even if you have set\r
-            never304="true"\r
-       -->\r
-       <!-- <cacheControl>max-age=30, public</cacheControl> -->\r
-    </httpCaching>\r
-  </requestDispatcher>\r
-  \r
-      \r
-  <!-- requestHandler plugins... incoming queries will be dispatched to the\r
-     correct handler based on the path or the qt (query type) param.\r
-     Names starting with a '/' are accessed with the a path equal to the \r
-     registered name.  Names without a leading '/' are accessed with:\r
-      http://host/app/select?qt=name\r
-     If no qt is defined, the requestHandler that declares default="true"\r
-     will be used.\r
-  -->\r
-  <requestHandler name="standard" class="solr.SearchHandler" default="true">\r
-    <!-- default values for query parameters -->\r
-     <lst name="defaults">\r
-       <str name="echoParams">explicit</str>\r
-       <!-- \r
-       <int name="rows">100</int>\r
-       <str name="fl">*</str>\r
-       <str name="version">2.1</str>\r
-        -->\r
-     </lst>\r
-  </requestHandler>\r
-\r
-\r
-  <!-- DisMaxRequestHandler allows easy searching across multiple fields\r
-       for simple user-entered phrases.  It's implementation is now\r
-       just the standard SearchHandler with a default query type\r
-       of "dismax". \r
-       see http://wiki.apache.org/solr/DisMaxRequestHandler\r
-   -->\r
-  <requestHandler name="dismax" class="solr.SearchHandler" >\r
-    <lst name="defaults">\r
-     <str name="defType">dismax</str>\r
-     <str name="echoParams">explicit</str>\r
-     <float name="tie">0.01</float>\r
-     <str name="qf">\r
-        name^1.2 tag^0.8 body^0.6\r
-     </str>\r
-     <str name="fl">\r
-        id,score\r
-     </str>\r
-    </lst>\r
-  </requestHandler>\r
-\r
-  <!-- Note how you can register the same handler multiple times with\r
-       different names (and different init parameters)\r
-    -->\r
-  <requestHandler name="partitioned" class="solr.SearchHandler" >\r
-    <lst name="defaults">\r
-     <str name="defType">dismax</str>\r
-     <str name="echoParams">explicit</str>\r
-     <str name="qf">text^0.5 features^1.0 name^1.2 sku^1.5 id^10.0</str>\r
-     <str name="mm">2&lt;-1 5&lt;-2 6&lt;90%</str>\r
-     <!-- This is an example of using Date Math to specify a constantly\r
-          moving date range in a config...\r
-       -->\r
-     <str name="bq">incubationdate_dt:[* TO NOW/DAY-1MONTH]^2.2</str>\r
-    </lst>\r
-    <!-- In addition to defaults, "appends" params can be specified\r
-         to identify values which should be appended to the list of\r
-         multi-val params from the query (or the existing "defaults").\r
-\r
-         In this example, the param "fq=instock:true" will be appended to\r
-         any query time fq params the user may specify, as a mechanism for\r
-         partitioning the index, independent of any user selected filtering\r
-         that may also be desired (perhaps as a result of faceted searching).\r
-\r
-         NOTE: there is *absolutely* nothing a client can do to prevent these\r
-         "appends" values from being used, so don't use this mechanism\r
-         unless you are sure you always want it.\r
-      -->\r
-    <lst name="appends">\r
-      <str name="fq">inStock:true</str>\r
-    </lst>\r
-    <!-- "invariants" are a way of letting the Solr maintainer lock down\r
-         the options available to Solr clients.  Any params values\r
-         specified here are used regardless of what values may be specified\r
-         in either the query, the "defaults", or the "appends" params.\r
-\r
-         In this example, the facet.field and facet.query params are fixed,\r
-         limiting the facets clients can use.  Faceting is not turned on by\r
-         default - but if the client does specify facet=true in the request,\r
-         these are the only facets they will be able to see counts for;\r
-         regardless of what other facet.field or facet.query params they\r
-         may specify.\r
-\r
-         NOTE: there is *absolutely* nothing a client can do to prevent these\r
-         "invariants" values from being used, so don't use this mechanism\r
-         unless you are sure you always want it.\r
-      -->\r
-    <lst name="invariants">\r
-      <str name="facet.field">cat</str>\r
-      <str name="facet.field">manu_exact</str>\r
-      <str name="facet.query">price:[* TO 500]</str>\r
-      <str name="facet.query">price:[500 TO *]</str>\r
-    </lst>\r
-  </requestHandler>\r
-  \r
-\r
-  <!--\r
-   Search components are registered to SolrCore and used by Search Handlers\r
-   \r
-   By default, the following components are avaliable:\r
-    \r
-   <searchComponent name="query"     class="org.apache.solr.handler.component.QueryComponent" />\r
-   <searchComponent name="facet"     class="org.apache.solr.handler.component.FacetComponent" />\r
-   <searchComponent name="mlt"       class="org.apache.solr.handler.component.MoreLikeThisComponent" />\r
-   <searchComponent name="highlight" class="org.apache.solr.handler.component.HighlightComponent" />\r
-   <searchComponent name="debug"     class="org.apache.solr.handler.component.DebugComponent" />\r
-\r
-   Default configuration in a requestHandler would look like:\r
-    <arr name="components">\r
-      <str>query</str>\r
-      <str>facet</str>\r
-      <str>mlt</str>\r
-      <str>highlight</str>\r
-      <str>debug</str>\r
-    </arr>\r
-\r
-    If you register a searchComponent to one of the standard names, that will be used instead.\r
-    To insert handlers before or after the 'standard' components, use:\r
-    \r
-    <arr name="first-components">\r
-      <str>myFirstComponentName</str>\r
-    </arr>\r
-    \r
-    <arr name="last-components">\r
-      <str>myLastComponentName</str>\r
-    </arr>\r
-  -->\r
-\r
-   <!-- The spell check component can return a list of alternative spelling\r
-  suggestions.  -->\r
-  <searchComponent name="spellcheck" class="solr.SpellCheckComponent">\r
-\r
-    <str name="queryAnalyzerFieldType">textSpell</str>\r
-\r
-    <lst name="spellchecker">\r
-      <str name="name">default</str>\r
-      <str name="field">spell</str>\r
-      <str name="spellcheckIndexDir">./spellchecker1</str>\r
-\r
-    </lst>\r
-    <lst name="spellchecker">\r
-      <str name="name">jarowinkler</str>\r
-      <str name="field">spell</str>\r
-      <!-- Use a different Distance Measure -->\r
-      <str name="distanceMeasure">org.apache.lucene.search.spell.JaroWinklerDistance</str>\r
-      <str name="spellcheckIndexDir">./spellchecker2</str>\r
-\r
-    </lst>\r
-\r
-    <lst name="spellchecker">\r
-      <str name="classname">solr.FileBasedSpellChecker</str>\r
-      <str name="name">file</str>\r
-      <str name="sourceLocation">spellings.txt</str>\r
-      <str name="characterEncoding">UTF-8</str>\r
-      <str name="spellcheckIndexDir">./spellcheckerFile</str>\r
-    </lst>\r
-  </searchComponent>\r
-\r
-  <!-- a request handler utilizing the spellcheck component -->\r
-  <requestHandler name="/spellCheckCompRH" class="solr.SearchHandler">\r
-    <lst name="defaults">\r
-      <!-- omp = Only More Popular -->\r
-      <str name="spellcheck.onlyMorePopular">false</str>\r
-      <!-- exr = Extended Results -->\r
-      <str name="spellcheck.extendedResults">false</str>\r
-      <!--  The number of suggestions to return -->\r
-      <str name="spellcheck.count">1</str>\r
-    </lst>\r
-    <arr name="last-components">\r
-      <str>spellcheck</str>\r
-    </arr>\r
-  </requestHandler>\r
- \r
-  <!-- a search component that enables you to configure the top results for\r
-       a given query regardless of the normal lucene scoring.-->\r
-  <searchComponent name="elevator" class="solr.QueryElevationComponent" >\r
-    <!-- pick a fieldType to analyze queries -->\r
-    <str name="queryFieldType">string</str>\r
-    <str name="config-file">elevate.xml</str>\r
-  </searchComponent>\r
- \r
-  <!-- a request handler utilizing the elevator component -->\r
-  <requestHandler name="/elevate" class="solr.SearchHandler" startup="lazy">\r
-    <lst name="defaults">\r
-      <str name="echoParams">explicit</str>\r
-    </lst>\r
-    <arr name="last-components">\r
-      <str>elevator</str>\r
-    </arr>\r
-  </requestHandler>\r
-  \r
-\r
-  <!-- Update request handler.  \r
-  \r
-       Note: Since solr1.1 requestHandlers requires a valid content type header if posted in \r
-       the body. For example, curl now requires: -H 'Content-type:text/xml; charset=utf-8'\r
-       The response format differs from solr1.1 formatting and returns a standard error code.\r
-       \r
-       To enable solr1.1 behavior, remove the /update handler or change its path\r
-    -->\r
-  <requestHandler name="/update" class="solr.XmlUpdateRequestHandler" />\r
-\r
-  <!--\r
-   Analysis request handler.  Since Solr 1.3.  Use to returnhow a document is analyzed.  Useful\r
-   for debugging and as a token server for other types of applications\r
-   -->\r
-  <requestHandler name="/analysis" class="solr.AnalysisRequestHandler" />\r
-  \r
-\r
-  <!-- CSV update handler, loaded on demand -->\r
-  <requestHandler name="/update/csv" class="solr.CSVRequestHandler" startup="lazy" />\r
-\r
-\r
-  <!-- \r
-   Admin Handlers - This will register all the standard admin RequestHandlers.  Adding \r
-   this single handler is equivolent to registering:\r
-   \r
-  <requestHandler name="/admin/luke"       class="org.apache.solr.handler.admin.LukeRequestHandler" />\r
-  <requestHandler name="/admin/system"     class="org.apache.solr.handler.admin.SystemInfoHandler" />\r
-  <requestHandler name="/admin/plugins"    class="org.apache.solr.handler.admin.PluginInfoHandler" />\r
-  <requestHandler name="/admin/threads"    class="org.apache.solr.handler.admin.ThreadDumpHandler" />\r
-  <requestHandler name="/admin/properties" class="org.apache.solr.handler.admin.PropertiesRequestHandler" />\r
-  <requestHandler name="/admin/file"       class="org.apache.solr.handler.admin.ShowFileRequestHandler" >\r
-  \r
-  If you wish to hide files under ${solr.home}/conf, explicitly register the ShowFileRequestHandler using:\r
-  <requestHandler name="/admin/file" class="org.apache.solr.handler.admin.ShowFileRequestHandler" >\r
-    <lst name="invariants">\r
-     <str name="hidden">synonyms.txt</str> \r
-     <str name="hidden">anotherfile.txt</str> \r
-    </lst>\r
-  </requestHandler>\r
-  -->\r
-  <requestHandler name="/admin/" class="org.apache.solr.handler.admin.AdminHandlers" />\r
-  \r
-  <!-- ping/healthcheck -->\r
-  <requestHandler name="/admin/ping" class="PingRequestHandler">\r
-    <lst name="defaults">\r
-      <str name="qt">standard</str>\r
-      <str name="q">solrpingquery</str>\r
-      <str name="echoParams">all</str>\r
-    </lst>\r
-  </requestHandler>\r
-\r
-  <!-- Rich document update handler, loaded on demand -->\r
-  <requestHandler name="/update/rich" class="solr.RichDocumentRequestHandler" startup="lazy">\r
-  </requestHandler>\r
-    \r
-  <!-- Echo the request contents back to the client -->\r
-  <requestHandler name="/debug/dump" class="solr.DumpRequestHandler" >\r
-    <lst name="defaults">\r
-     <str name="echoParams">explicit</str> <!-- for all params (including the default etc) use: 'all' -->\r
-     <str name="echoHandler">true</str>\r
-    </lst>\r
-  </requestHandler>\r
-  \r
-  <highlighting>\r
-   <!-- Configure the standard fragmenter -->\r
-   <!-- This could most likely be commented out in the "default" case -->\r
-   <fragmenter name="gap" class="org.apache.solr.highlight.GapFragmenter" default="true">\r
-    <lst name="defaults">\r
-     <int name="hl.fragsize">100</int>\r
-    </lst>\r
-   </fragmenter>\r
-\r
-   <!-- A regular-expression-based fragmenter (f.i., for sentence extraction) -->\r
-   <fragmenter name="regex" class="org.apache.solr.highlight.RegexFragmenter">\r
-    <lst name="defaults">\r
-      <!-- slightly smaller fragsizes work better because of slop -->\r
-      <int name="hl.fragsize">70</int>\r
-      <!-- allow 50% slop on fragment sizes -->\r
-      <float name="hl.regex.slop">0.5</float> \r
-      <!-- a basic sentence pattern -->\r
-      <str name="hl.regex.pattern">[-\w ,/\n\"']{20,200}</str>\r
-    </lst>\r
-   </fragmenter>\r
-   \r
-   <!-- Configure the standard formatter -->\r
-   <formatter name="html" class="org.apache.solr.highlight.HtmlFormatter" default="true">\r
-    <lst name="defaults">\r
-     <str name="hl.simple.pre"><![CDATA[<em>]]></str>\r
-     <str name="hl.simple.post"><![CDATA[</em>]]></str>\r
-    </lst>\r
-   </formatter>\r
-  </highlighting>\r
-  \r
-  \r
-  <!-- queryResponseWriter plugins... query responses will be written using the\r
-    writer specified by the 'wt' request parameter matching the name of a registered\r
-    writer.\r
-    The "default" writer is the default and will be used if 'wt' is not specified \r
-    in the request. XMLResponseWriter will be used if nothing is specified here.\r
-    The json, python, and ruby writers are also available by default.\r
-\r
-    <queryResponseWriter name="xml" class="org.apache.solr.request.XMLResponseWriter" default="true"/>\r
-    <queryResponseWriter name="json" class="org.apache.solr.request.JSONResponseWriter"/>\r
-    <queryResponseWriter name="python" class="org.apache.solr.request.PythonResponseWriter"/>\r
-    <queryResponseWriter name="ruby" class="org.apache.solr.request.RubyResponseWriter"/>\r
-    <queryResponseWriter name="php" class="org.apache.solr.request.PHPResponseWriter"/>\r
-    <queryResponseWriter name="phps" class="org.apache.solr.request.PHPSerializedResponseWriter"/>\r
-\r
-    <queryResponseWriter name="custom" class="com.example.MyResponseWriter"/>\r
-  -->\r
-\r
-  <!-- XSLT response writer transforms the XML output by any xslt file found\r
-       in Solr's conf/xslt directory.  Changes to xslt files are checked for\r
-       every xsltCacheLifetimeSeconds.  \r
-   -->\r
-  <queryResponseWriter name="xslt" class="org.apache.solr.request.XSLTResponseWriter">\r
-    <int name="xsltCacheLifetimeSeconds">5</int>\r
-  </queryResponseWriter> \r
-\r
-\r
-  <!-- example of registering a query parser\r
-  <queryParser name="lucene" class="org.apache.solr.search.LuceneQParserPlugin"/>\r
-  -->\r
-\r
-  <!-- example of registering a custom function parser \r
-  <valueSourceParser name="myfunc" class="com.mycompany.MyValueSourceParser" />\r
-  -->\r
-    \r
-  <!-- config for the admin interface --> \r
-  <admin>\r
-    <defaultQuery>solr</defaultQuery>\r
-    \r
-    <!-- configure a healthcheck file for servers behind a loadbalancer\r
-    <healthcheck type="file">server-enabled</healthcheck>\r
-    -->\r
-  </admin>\r
-\r
-</config>\r