Core 2.x IdP run book

This page is under construction

Software

• Apache httpd 2.2 (from stock RHEL httpd RPM)
• mod_ssl (from stock RHEL mod_ssl RPM)
• mod_auth_kerb (from stock RHEL mod_auth_kerb RPM)
• Tomcat 6.0
• JDK 6.0
• Shibboleth IdP 2.1
• terracotta 3.1

Install and configure Apache httpd

Install needed RPMs

• Use stock httpd RPM install (standard NIST install)
• Install mod_ssl and mod_auth_kerb RPMs:

  # yum install mod_ssl
  # yum install mod_auth_kerb
  

Configure

• In /etc/httpd/conf/httpd.conf, set ServerName:

  ServerName idp.mit.edu:80
  

  and set the UseCanonicalName option to On:

  UseCanonicalName On
  

Install Tomcat

• Download current Tomcat 6.0 binary distribution (tested with 6.0.20, available in /mit/touchstone/downloads/apache-tomcat-6.0.20.tar.gz.
• cd /usr/local
• tar xzf /path/to/apache-tomcat-6.0.20.tar.gz
• rm -f tomcat
• ln -s apache-tomcat-6.0.20.tar.gz tomcat
• Create the tomcat user, and change the ownership of the tomcat tree:

  # groupadd -g 52 tomcat
  # useradd -u 52 -g tomcat -c "Tomcat User" -d /usr/local/tomcat tomcat
  # chown -R tomcat:tomcat /usr/local/apache-tomcat-6.0.20