Install Fest Workshops Resources

Note:

For the latest version of our Shibboleth SP training material check out the Shibboleth Service Provider Training page.

Training VM image is no longer available

The VM image is no longer available, it was outdated.
The LDAP server required by the IdP pre-configured in the image is no longer accessible.

VM Images

You will need VMware player (Windows, Linux), VMware Server (Windows, or Linux) or VMware Fusion (Mac) in order to run the following image. Note that in case of VMware Player you need two physical hosts to run both, Test IdP and Hands-on image because VMware Player only can run one virtual machine at a time.

Shibboleth Install Fest Hands-on VM image (no longer available)
980MB, Login name/password: root/password. Show changes
- 17. November 2008: Added Scott Cantor's catchup files (no longer availabe) containing working configration files according to hands-on guide. The scripts to install these files can be found in /opt/installfest/catchup/
- 28. January 2009: Added missing /var/run/apacheds/default directory, alias for vi pointing to vim (for syntax highlighting), an ntpdate command in root's .bashrc to sync time with testidp.example.org if this host is available, error tolerant apacheds init.d script, removed AuthnRequestsSigned="1" in all SP's metadata and automatic startup of apacheds during boot time.
- 16. March 2009: Decreased CPU interrupt frequency which should make image run slightly faster and reduce clock sync problems. Added three terminal resolutions (800x600, 1024x768 and 1280x1024). Replaced default terminal font for better readability.
- February 22. 2010: Updated CENT OS, Java 1.6.0_18 Tomcat 6.0.24, Shibboleth Service Provider 2.3.1 and Identity Provider 2.1.5. Added symlinks for java and tomcat in opt directory.
- March 5. 2010: Fixed hostname typo in .bashrc, ran /usr/bin/vmware-tools-config.pl
- March 18. 2010: Fixed idpbasic.sh catchup script to copy idp.xml to the right place, extended SP catchup script to create .htaccess files in cgi-bin and other places, installed a cron job to sync time with testidp
- October 26. 2010: Changed attribute viewer script to show all available attributes
- July 25. 2012: Updated SP and IdP version to 2.4.3 and 2.3.8
- August 6. 2012: Various small improvements and adaptations for upcoming workshop
- August 24. 2012: Added GNOME user interface
Test Identity Provider/Discovery Service VM image (no longer available)
651MB, Login name/password: root/installfestadmin. Show changes
- August 21. 2008: Relaxed clock skew settings
- January 29. 2010: Resigned IdP metadata (expired on 2001-01-01) and added minor improvements. If you still are using an older image, remove the validUntil="..." in the root element of /opt/tomcat/webapps/ROOT/testidp-metadata_unsigned.xml and then run ~/signMetdata.sh (yes, including that typo :-) ). This should then sign the metadata file again and thus fix the problem.
- October 26. 2010: Changed attribute viewer script to show all available attributes
- August 6. 2012: Updated CentOS, Service Provider and applied various small improvements

Install Fest at home

For repeating the instructions on the Hands-on slides, first download the two images above and uncompress them. If you are running them on a single physical host, start them both up and proceed first with the Service Provider hands-on part and then proceed with the Identity Provider hands-on parts. It may be that VMware Player/Fusion complains that the network interfaces are not available. If this is the case, make sure that there is an ethernet cable connected to your laptop (connecting it to a hub should be sufficient).

In case you have to use two different physical hosts for the images, make sure they are connected via Ethernet and both have an IP/subnet mask 10.0.3.N/255.0.0.0 where N is a number between 1 and 254.

Before starting with the hands-on session, pick a participation number between 10 and 255. Use this number wherever you see a bold red # in the slides and documents.

Slides

All these slides were used during the Install Fests. The typos discovered during the InstsallFests are all fixed. In case you need the original PowerPoint presentations, please send an email to aai@switch.ch.

Documents

Some of the following documents were created using Microsoft Office 2004. Feel free to adapt or change any document that contains the Creative Commons icon on their first page/slide (see License section below).

Shibboleth Install Fest August 2012 complete hand-outs	Complete version distributed during workshop. (PDF, 38MB)
VM image information and LDAP accounts	Word, PDF
Separate hand-out with hints for debugging, testing and file editing	PowerPoint, PDF
Federated Identity Management	PowerPoint, PDF
Introduction to Shibboleth	PowerPoint, PDF
Shibboleth Service Provider Hands-On	PowerPoint, PDF
AAI Attributes	PDF
Resource Registry	PDF
Embedded WAYF/Embedded Discovery Service	PDF
Solutions for Access Control: Group Management Tool and SWITCHtoolbox	PDF
Virtual Home Organization and Guest Login: Creating AAI accounts for users not affiliated with a university	PDF
Service Provider Virtualization: Running multiple SPs on the same host	PDF
Shibboleth Identity Provider Hands-On: Basics & Installation	PowerPoint, PDF
Shibboleth Identity Provider Hands-On: Authentication	PowerPoint, PDF
Shibboleth Identity Provider Hands-On: Attribute Resolution	PowerPoint, PDF
Shibboleth Identity Provider Hands-On: Attribute Filtering	PowerPoint, PDF
uApprove - User attribute release consent	PDF
Identity Provider Best Current Practices	PDF

License

All linked VMware images on this page as well as all slides and documents that contain the following icon are licensed under the Creative Commons Attribution-Share Alike 3.0 Unported License.