+++ /dev/null
-<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
-
-<html>
- <head>
-
- <title>Shibboleth Upgrade Guide</title>
- <meta http-equiv="Content-Type" content=
- "text/html; charset=utf-8">
- <style type="text/css">
-
-html
-{
-background-color: #FFFFFF;
-color: #000000;
-margin: .5em;
-}
-a:visited
-{
-color: #999999;
-}
-a:link
-{
-color: #990000;
-}
-a:active
-{
-color: #440000;
-}
-dl
-{
-background-color: #DDDDDD;
-background-image: none;
-margin: 5px;
-padding: 0px;
-border-style: solid;
-border-bottom-width: 2px;
-border-top-width: 2px;
-border-left-width: 2px;
-border-right-width: 2px;
-}
-dt
-{
-background-color: #DDDDDD;
-background-image: none;
-margin: 1px;
-padding: 1px;
-}
-dd
-{
-background-color: #DDDDDD;
-background-image: none;
-margin: 0px;
-padding: 1px;
-}
-.attribute
-{
-font-size: 115%;
-font-color: #000000;
-text-align: left;
-background-color: #DDDDDD;
-border: 1px black inset;
-background-image: none;
-margin: 0px;
-padding: 2px;
-}
-.value
-{
-font-color: #000000;
-text-align: left;
-background-color: #EEEEEE;
-background-image: none;
-padding-top: 0em;
-padding-bottom: 0.5em;
-padding-right: 1em;
-padding-left: 5em;
-border-style: solid;
-border-bottom-width: none;
-border-top-width: none;
-border-left-width: 1px;
-border-right-width: 1px;
-}
-.attributeopt
-{
-font-size: 115%;
-font-color: #000000;
-text-align: left;
-background-color: #BCBCEE;
-border: 1px black inset;
-background-image: none;
-margin: 0px;
-padding: 2px;
-}
-.valueopt
-{
-font-color: #000000;
-text-align: left;
-background-color: #DDDDFF;
-background-image: none;
-padding-top: 0em;
-padding-bottom: 0.5em;
-padding-right: 1em;
-padding-left: 5em;
-border-style: solid;
-border-bottom-width: none;
-border-top-width: none;
-border-left-width: 1px;
-border-right-width: 1px;
-}
-.attributelong
-{
-font-size: 85%;
-font-color: #000000;
-text-align: left;
-background-color: #DDDDDD;
-border: 1px black inset;
-background-image: none;
-margin: 0px;
-padding: 2px;
-}
-.attributeoptlong
-{
-font-size: 85%;
-font-color: #000000;
-text-align: left;
-background-color: #BCBCEE;
-border: 1px black inset;
-background-image: none;
-margin: 0px;
-padding: 2px;
-}
-.demo
-{
-background-color: #EEEEEE;
-padding: 3px;
-}
-.fixedwidth
-{
-font-family: monospace;
-font-size: 90%;
-font-color: #121212;
-}
-
- </style>
- </head>
-
- <body link="red" vlink="red" alink="black" bgcolor="white">
- <center>
- <h2>Shibboleth Upgrade Guide</h2>
- </center>
- Shibboleth Upgrade Guide<br>
-Shibboleth Version 1.1<br>
-July 29, 2003<br>
-
-<br>
-<hr>
-<br>
-
-<center><table width="500" border="0"><tr><td align="center" width="250">
-<a href="#origin">Latest Origin Upgrade</a>
-</td><td align="center" width="250">
-<a href="#target">Latest Target Upgrade</a>
-</td></tr></table></center>
-
-<p>This guide contains suggested steps to upgrade from a Shibboleth 1.0 installation to a Shibboleth 1.1 installation. There are many ways to do this and some steps may need to be modified to reflect differences in the local installation.</p>
-
-<p>Shibboleth 1.1 is fully backward compatible with Shibboleth 1.0; however, some features have been deprecated, so all deployments are highly encouraged to move to current configurations. For a full list of new and changed functionality, consult the header of the <a href="http://shibboleth.internet2.edu/">Shibboleth Deployment Guides</a>.</p>
-
-<a name="origin"></a><h3>Origin</h3>
-
-<a name="origin1.0to1.1"></a><h4>v1.0 to v1.1</h4>
-
-<p>All Shibboleth 1.0 configuration specifications are still current as of Shibboleth 1.1.</p>
-
-<ol type="1">
- <li>Shutdown Tomcat.
- <li>Copy the following files to a scratch directory:
- <ol type="a">
- <li><span class="fixedwidth">origin.properties</span> (defaults to <span class="fixedwidth">$CATALINA_HOME/webapps/shibboleth/WEB-INF/classes/conf/origin.properties</span>)</li>
- <li><span class="fixedwidth">resolver.xml</span> (defaults to <span class="fixedwidth">$CATALINA_HOME/webapps/shibboleth/WEB-INF/classes/conf/resolver.xml</span>)</li>
- <li>The logging configuration file (defaults to <span class="fixedwidth">$CATALINA_HOME/webapps/shibboleth/WEB-INF/classes/conf/log4j.properties</span>)</li>
- <li>The HS' Keystore (defaults to <span class="fixedwidth">$CATALINA_HOME/webapps/shibboleth/WEB-INF/classes/conf/keystore.jks</span>)</li>
- <li>The web application deployment descriptor (defaults to <span class="fixedwidth">$CATALINA_HOME/webapps/shibboleth/WEB-INF/web.xml</span>)</li>
- <li>Any created ARP's (defaults to <span class="fixedwidth">$CATALINA_HOME/webapps/shibboleth/WEB-INF/classes/conf/arps/*)</span></li>
- <li>The crypto handle repository keystore <font color="#5555EE">(if used)</font> (defaults to <span class="fixedwidth">$CATALINA_HOME/webapps/shibboleth/WEB-INF/classes/conf/handle.jks</span>)</li>
- <li>The targetedId attribute keystore <font color="#5555EE">(if used)</font> (defaults to <span class="fixedwidth">$CATALINA_HOME/webapps/shibboleth/WEB-INF/classes/conf/persistent.jks</span>)</li>
- </ol>
- </li>
- <li>Delete the old origin.</li>
- <li>Deploy the new origin.</li>
- <li>Copy over the files from the scratch directory.</li>
- <li>Start up Tomcat.</li>
-</ol>
-
-<a name="target"></a><h3>Target</h3>
-
-<a name="target1.0to1.1"></a><h4>v1.0 to v1.1</h4>
-
-<p>Shibboleth 1.1 handles attributes differently than 1.0. Attributes are now added to the target in one place rather than three. The <span class="fixedwidth">[attributes]</span> section may be deleted
-from <span class="fixedwidth">shibboleth.ini</span>, and all <span class="fixedwidth">ShibMapAttribute</span> commands maybe be removed from the Apache configuration.
-Any customization of the <span class="fixedwidth">ShibMapAttribute</span> parameters needs to be reflected in <span class="fixedwidth">AAP.xml</span>, as documented in the <a href="http://marsalis.internet2.edu/cgi-bin/viewcvs.cgi/*checkout*/shibboleth/c/doc/DEPLOY-GUIDE-TARGET.html?rev=HEAD&only_with_tag=HEAD&content-type=text/html#4.e.">Shibboleth Target Deploy Guide</a>.</p>
-
-<ol>
- <li>Stop the SHAR and Apache.</li>
- <li>Move the old Shibboleth to a new folder:
- <blockquote><span class="fixedwidth">
- $ mv /opt/shibboleth /opt/shibboleth-old
- </span></blockquote>
- </li>
- <li>Unpack/install the new .tarball into <span class="fixedwidth">/opt/shibboleth</span>.</li>
- <li>Copy the old configuration files back into the new Shibboleth's folder:
- <blockquote><span class="fixedwidth">
- $ cp /opt/shibboleth-old/etc/shibboleth/shibboleth.ini \<br>
- /opt/shibboleth-old/etc/shibboleth/*.xml \<br>
- /opt/shibboleth-old/etc/shibboleth/*.log* \<br>
- /opt/shibboleth-old/etc/shibboleth/*.html \<br>
- /opt/shibboleth/etc/shibboleth
- </span></blockquote>
- </li>
- <li>If changes have been made to <span class="fixedwidth">apache.config</span> and
-it is being used to configure Apache, it should be copied over as well in a similar fashion.</li>
- <li>Copy over the SHAR's key and certificate if they are stored in the old <span class="fixedwidth">/opt</span> tree.
- <li>Restart the target.</li>
-</ol>
-
-</body>
-</html>
-
projects / shibboleth / sp.git / commitdiff