...
- Copy in the idp config files for the server, to the conf subdirectory; these include:
- attribute-filter.xml
- attribute-resolver.xml.in
- handler.xml
- internal.xml
- logging.xml
- relying-party.xml
- service.xml
- tc-config.xml (for terracotta clustering)
You must replace %%LDAPUID%% and %%LDAPPASSWORD%% in attribute-resolver.xml.in with the principal uid (e.g. touchstone-core-service) and passord (principalCredential attribute) for accessing our LDAP server, and save the resulting file as attribute-resolver.xml. Make sure the file is not world-readable.
Firewall
| No Format |
|---|
# iptables -I RH-Firewall-1-INPUT 36 -m state --state NEW -m tcp -p tcp --dport 8443 -j ACCEPT # iptables -I RH-Firewall-1-INPUT 37 -m state --state NEW -m tcp -p tcp --dport 8444 -j ACCEPT # iptables -I RH-Firewall-1-INPUT 3638 -m state --state NEW -m tcp -p tcp --dport 446 -j ACCEPT # iptables -I RH-Firewall-1-INPUT 39 -m state --state NEW -m tcp -p tcp --dport 8443447 -j ACCEPT # iptables -I RH-Firewall-1-INPUT 40 -m state --state NEW -m tcp -p tcp -s 18.9.23.26 --dport 9510 -j ACCEPT # iptables -I RH-Firewall-1-INPUT 3741 -m state --state NEW -m tcp -p tcp -s 18.9.23.26 --dport 84449530 -j ACCEPT # /etc/init.d/iptables save |