Shibboleth Identity Provider Tomcat Configuration

Tomcat Configuration

The following Configuration needs to be done to deploy the IDP War File.

• Enable The SSL

      Go to the /etc/tomcat6 directory and edit the server.xml file and add the following content after <Connector port="8443"/>

       <Connector port="8443"

           protocol="org.apache.coyote.http11.Http11Protocol"

SSLImplementation="edu.internet2.middleware.security.tomcat6.DelegateToApplicationJSSEImplementation"
           scheme="https"
           SSLEnabled="true"
           clientAuth="false"
           keystoreFile="/opt/shibboleth-idp/credentials/idp.jks"
           keystorePass="keystorepassword" />

 

•  Deploy the IDP War File

    Go to the /etc/tomcat6/Catalina/localhost directory and create the idp.xml file and add the following content in the idp.xml file.

   <Context docBase="/opt/shibboleth-idp/war/idp.war"
    privileged="true"
    antiResourceLocking="false"
    antiJARLocking="false"
    unpackWAR="false"
    swallowOutput="true" />

• Copy idp endorsed directory to tomcat6 directory

      Go to /var/lib/tomcat6/ directory create the common/endorsed directory as follows.

      mkdir common

      mkdir common/endorsed.

 copy the /opt/shibboleth-identityprovider-2.4.0/endorsed library files to /var/lib/tomcat6/common/endorsed

cp  /opt/shibboleth-identityprovider-2.4.0/endorsed/* /var/lib/tomcat6/common/endorsed

• Change the OwnerShip to tomcat

     

      chown -R tomcat:tomcat /var/lib/tomcat6/common

• Copy tomcat6-dta-ssl-1.0.0.jar to /usr/share/java/tomcat6 directory

    >>Follow the Apache Web Server Configuration