<head>
<meta http-equiv="Content-Language" content="en-us">
-<meta name="generator" content="Microsoft FrontPage 5.0">
-<meta name="ProgId" content="FrontPage.Editor.Document">
<title>Shibboleth Origin Deployment Guide</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css">
</center>
<p>Shibboleth Origin Deployment Guide<br>
Shibboleth Version 1.1<br>
-July 28, 2003<br>
+December 3, 2003<br>
</p>
<h3>This version of the deploy guide is for Shibboleth v1.1. For documentation
related to prior versions of Shibboleth, please consult the appropriate branch
the containing element. Otherwise evaluates to
<span class="fixedwidth">FALSE</span>. Regular expressions are
evaluated in accordance with the the
- <a href="http://java.sun.com/j2se/1.4/docs/api/java/util/%20%20%20%20%20%20%20%20%20%20%20%20%20%20regex/Pattern.html#sum">
+ <a href="http://java.sun.com/j2se/1.4.2/docs/api/java/util/regex/package-summary.html">
Java 1.4 Pattern API</a>.</p>
</blockquote>
</li>
connector includes a pre-existing scope (<span class="fixedwidth">bob@foo.edu</span>),
that scope is used instead. Contained within the
<span class="fixedwidth">SimpleAttributeDefinition</span> element.</dd>
+ <dd class="attributeopt"><span class="fixedwidth"><lifeTime
+ "<seconds>"/></span> </dd>
+ <dd class="valueopt">Specifies in the attribute assertion
+ how long the attribute should be cached and retained by the target upon
+ receipt. Federations and trust agreements may have some bearing on the
+ population and use of this field. Contained within the
+ <span class="fixedwidth">SimpleAttributeDefinition</span> element.</dd>
<dd class="attributeopt"><span class="fixedwidth">sourceName =
"<string>"</span> </dd>
<dd class="valueopt">Specifies a different source attribute name to be
SimpleAttributeDefinition</span> element.</dd>
<dd class="attributeopt"><span class="fixedwidth"><cacheTime
"<seconds>"/></span> </dd>
- <dd class="valueopt">An element of the element <span class="fixedwidth">
- SimpleAttributeDefinition</span>. Specifies an optional duration in
+ <dd class="valueopt">Specifies an optional duration in
<span class="fixedwidth">seconds</span> for which the attribute resolver
- may cache this attribute for use in additional assertions.</dd>
- <dd class="attributeopt"><span class="fixedwidth"><lifeTime
- "<seconds>"/></span> </dd>
- <dd class="valueopt">An element of the element <span class="fixedwidth">
- SimpleAttributeDefinition</span>. Specifies in the attribute assertion
- how long the attribute should be cached and retained by the target upon
- receipt. Federations and trust agreements may have some bearing on the
- population and use of this field.</dd>
+ may cache this attribute for use in additional assertions. Contained within
+ the <span class="fixedwidth">SimpleAttributeDefinition</span> element.</dd>
</dl>
<p>A representation of a properly constructed <span class="fixedwidth">
SimpleAttributeDefinition</span> element would look like:</p>
<blockquote>
- <p><span class="fixedwidth"><SimpleAttributeDefinition id="urn:mace:dir:attribute-def:eduPersonPrincipalName"
- smartScope="shibdev.edu" sourceName="universityPerson"><br>
+ <p><span class="fixedwidth"><SimpleAttributeDefinition id="urn:mace:dir:attribute-def:eduPersonPrincipalName"<br>
+ smartScope="shibdev.edu" cacheTime="600" lifeTime="3600" sourceName="universityPerson"><br>
<DataConnectorDependency requires="dataConnector"/><br>
<AttributeDependency requires="urn:mace:dir:attribute-def:eduPersonScopedAffiliation"/><br>
- <cacheTime="600"/><br><br>
- <lifeTime="3600"/><br><br>
</SimpleAttributeDefinition> </span></p>
</blockquote>
<p>A properly formed <span class="fixedwidth">resolver.xml</span> file to
</center>
<p>Shibboleth Target Deployment Guide<br>
Shibboleth Version 1.1<br />
-July 25, 2003<br />
+December 3, 2003<br />
</p>
<h3>This version of the deploy guide is for Shibboleth v1.1. For documentation
related to prior versions of Shibboleth, please consult the appropriate branch
web site. Right click on the machine icon on the left, and edit the
WWW Service master properties. On the "Home Directory" tab, add a
script mapping using the "Configuration" button. The "Executable"
- box should point to the filter/extension library, and the
- "Extension" can be set to anything unlike to conflict, but
+ box should point to <span class="fixed">isapi_shib.dll</span>, and the
+ "Extension" can be set to anything unlikely to conflict, but
<span class="fixed">.shire</span> is assumed (and the dot must be
included). You should select the option to limit verbs to POST, and
you must uncheck the "Check that file exists" box.</li>
+ <li type="a"><font color=#444499>(IIS 6 Only)</font> A new Web
+ Service Extension must be defined for Shibboleth; without this, the
+ mapping from <span class="fixed">*.shire</span> to <span
+ class="fixed">isapi_shib.dll</span> won't occur and a file error
+ will show. Add this extension with an arbitrary name and associate
+ it with <span class="fixed">isapi_shib.dll</span>.</li>
</ol>
</li>
<li>All other aspects of configuration are handled via the