centos8 安装 docker

狼爱上狸 — Wed, 06 May 2020 04:57:00 GMT

https://www.cnblogs.com/zbseoag/p/11736006.html

狼爱上狸 2020-05-06 12:57 发表评论

firefox ��译插�g

狼爱上狸 — Sat, 18 Apr 2020 01:45:00 GMT

作者：(x��)AsReader

链接�Q�https://www.zhihu.com/question/64845885/answer/1122345134

来源�Q�知�?/span>

狼爱上狸 2020-04-18 09:45 发表评论

鼠标在Solaris 11虚拟��Z��不�v作用

狼爱上狸 — Sun, 22 Mar 2020 00:22:00 GMT

https://kb.vmware.com/s/article/2040498

狼爱上狸 2020-03-22 08:22 发表评论

solaris11.3下蝲

狼爱上狸 — Fri, 20 Mar 2020 13:52:00 GMT

http://download.oracle.com/otn/solaris/11_3/sol-11_3-vbox.ova

狼爱上狸 2020-03-20 21:52 发表评论

linux�Q�centos7�Q�安装jdk8--附带oracle账号

狼爱上狸 — Fri, 20 Mar 2020 10:53:00 GMT

https://www.cnblogs.com/chaos-li/p/11970713.html

狼爱上狸 2020-03-20 18:53 发表评论

Flutter 常用框架

狼爱上狸 — Thu, 19 Mar 2020 09:10:00 GMT

https://www.jianshu.com/p/7403371162c1

狼爱上狸 2020-03-19 17:10 发表评论

安装配置Shibboleth

狼爱上狸 — Mon, 09 Mar 2020 10:20:00 GMT

0.前言

本文介绍�?ji��n)如何搭建Shibboleth�Q�实现Shibboleth+Ldap的SSO解决�Ҏ(gu��)��

1.什么是Shibboleth

Shibboleth是一个基于标准的�Q�实现组�l�内部或跨组�l�的�|�页单点��d��的开源��Y件包。它允许站点为处于私有保护方式下的受保护的在�U�资源做�?gu��)��通知的认证决定�?/p>

Shibboleth软�g工具�q�泛使用联合的��n份标准，主要是OASIS安全声称标记语言�Q�SAML�Q�，来提供一个联合单点登录和属性交换框架。一个用��L(f��ng)��他的�l�织的证书认证，�l�织�Q�或IdP�Q�传送最��的必要的��n份信息给SP实现认证军_��。Shibboleth也提供扩展的隐私功能�Q�允�怸�个用户和他们的主站点来控刉��攄��每一个应用的属性�?/p>

Shibboleth��目作�ؓ(f��)一个Internet2中间件活动启动于2000�q�_(d��)��q�年晚些时候该��目和OASIS SAML工作�l�的工作相联�p�R��Shibboleth1.0 �?003�q�发布，�q�快速被全世界的研究和教育机构��用。随着2005�q�SAML2.0的发布，2006�q�Shibboleth2.0也发布，SAML标准升��到包含所有的多边�Q�由Shibboleth首创的元数据驱动�Ҏ(gu��)��?/p>

Shibboleth作�ؓ(f��)开源��Y件开发，在Apache 软�g许可证下发布。关于个别部件的更多信息可以在��品页面看到�?/p>

2.安装Shibboleth Identity Provider v3.2.1

切换成root

sudo su

2.下蝲Shibboleth Identity Provider v3.2.1

wget http://shibboleth.net/downloads/identity-provider/latest/shibboleth-identity-provider-3.2.1.tar.gz tar -xzvf shibboleth-identity-provider-3.2.1.tar.gz cd shibboleth-identity-provider-3.2.1

3.安装Shibboleth Idenentity Provider:

sh-3.2# ./install.sh  Source (Distribution) Directory (press  to accept default): [/Users/zhaoyu.zhaoyu/Applications/shibboleth-identity-provider-3.3.2]  Installation Directory: [/opt/shibboleth-idp]  Hostname: [localhost.localdomain] testdomain.com SAML EntityID: [https://testdomain.com/idp/shibboleth]  Attribute Scope: [localdomain]  Backchannel PKCS12 Password:  Re-enter password:  Cookie Encryption Key Password:  Re-enter password:  Warning: /opt/shibboleth-idp/bin does not exist. Warning: /opt/shibboleth-idp/dist does not exist. Warning: /opt/shibboleth-idp/doc does not exist. Warning: /opt/shibboleth-idp/system does not exist. Warning: /opt/shibboleth-idp/webapp does not exist. Generating Signing Key, CN = testdomain.com URI = https://testdomain.com/idp/shibboleth ... ...done Creating Encryption Key, CN = testdomain.com URI = https://testdomain.com/idp/shibboleth ... ...done Creating Backchannel keystore, CN = testdomain.com URI = https://testdomain.com/idp/shibboleth ... ...done Creating cookie encryption key files... ...done Rebuilding /opt/shibboleth-idp/war/idp.war ... ...done  BUILD SUCCESSFUL Total time: 1 minute 14 seconds

(from now "{idp.home}" == /opt/shibboleth-idp/)
4.导入 JST library (status界面�?x��)用�?:

cd /opt/shibboleth-idp/edit-webapp/WEB-INF/lib wget https://build.shibboleth.net/nexus/service/local/repositories/thirdparty/content/javax/servlet/jstl/1.2/jstl-1.2.jar cd /opt/shibboleth-idp/bin ./build.sh -Didp.target.dir=/opt/shibboleth-idp

3.安装指引

3.1 安装apache tomcat 8

1.切换成root

sudo su -

2.修改tomcat�?{CATALINA_HOME}/conf/server.xml
��?080端口�?443端口的地方分别改�?0�?43

 <Connector port="80" protocol="HTTP/1.1"                                                                                                    connectionTimeout="20000"                redirectPort="443" />

3.生成证书文�g

[chengxu@local]keytool -genkeypair -alias "tomcat" -keyalg "RSA" -keystore "./tomcat.keystore" 输入密钥库口�?   再次输入新口�?  �(zh��n)�的名字与姓氏是什�? [Unknown]:  cheng �(zh��n)�的�l�织单位名称是什�? [Unknown]:  testdomain.com �(zh��n)�的�l�织名称是什�? [Unknown]:  testdomain.com �(zh��n)�所在的城市(j��ng)或区域名�U�是什�? [Unknown]:   �(zh��n)�所在的�?�?自治区名�U�是什�? [Unknown]:   该单位的双字母国�?地区代码是什�? [Unknown]:   CN=cheng, OU=testdomain.com, O=testdomain.com, L=Unknown, ST=Unknown, C=Unknown是否正确? [�?/span>]:  �?  输入 <tomcat> 的密钥口�?  (如果和密钥库口��o(h��)相同, 按回�?:   再次输入新口�?  [chengxu@local]

4.修改tomcat�?{CATALINA_HOME}/conf/server.xml�Q��支持https协议

<Connector port="443" protocol="org.apache.coyote.http11.Http11Protocol"                 maxThreads="150" SSLEnabled="true" scheme="https" secure="true"                 clientAuth="false" sslProtocol="TLS"                  keystoreFile="/Users/chengxu/Shibboleth/tomcat/tomcat.keystore"                    keystorePass="xxx"/>

5.发布Idp Web Application到Tomcat 8 container

vim %{CATALINA_HOME}/conf/Catalina/localhost/idp.xml

<Context docBase="/opt/shibboleth-idp/war/idp.war"          privileged="true"          antiResourceLocking="false"          swallowOutput="true"/>

4.配置host

vim /etc/host 127.0.0.1 testdomain.com

5.重启tomcat
%{CATALINA_HOME}/bin/catalina.sh stop
%{CATALINA_HOME}/bin/catalina.sh start
6.��(g��)��是否服务启动正�?br style="box-sizing: border-box;" />讉K��https://testdomain/idp/status
或�?opt/shibboleth-idp/bin; ./status.sh

3.2 配置shibboleth�q�接ldap

�~�辑修改ldap.properties

vim /opt/shibboleth/conf/ldap.properties  idp.authn.LDAP.authenticator = bindSearchAuthenticator idp.authn.LDAP.ldapURL = ldap://ldap.example.it:389 idp.authn.LDAP.useStartTLS = false idp.authn.LDAP.useSSL = false idp.authn.LDAP.baseDN = cn=Users,dc=example,dc=org idp.authn.LDAP.userFilter = (uid={user}) idp.authn.LDAP.bindDN = cn=admin,cn=Users,dc=example,dc=org idp.authn.LDAP.bindDNCredential = ###LDAP ADMIN PASSWORD###

6.修改shibboleth ldap配置

vim /opt/shibboleth/conf/services.xml  �?<value>%{idp.home}/conf/attribute-resolver.xmlvalue> 改�ؓ(f��) <value>%{idp.home}/conf/attribute-resolver-full.xmlvalue>

vim /opt/shibboleth-idp/conf/attribute-resolver-full.xml  注释掉下列代码，如果已经注释掉了(ji��n)��׃��动了(ji��n)�Q�有些版本已�l�注释了(ji��n)�Q?

重启tomcat

7.获取idp metadata.xml
https://testdomain.com/idp/shibboleth
注意metadata.xml文�g中的validUntil属性，如果�q�期�?ji��n)则修改为未来的某个旉��?/p>

4.��结

��x(ch��ng)��我们完成�?ji��n)Shibboleth与LDAP集成的安装过�E?/p>

下篇�Q?nbsp;实现Shibboleth+Ldap到阿里云的单点登�?br />
来自�Q?/span>https://yq.aliyun.com/articles/350531?tdsourcetag=s_pcqq_aiomsg&do=login&accounttraceid=87b0f203-5d81-4cb7-a986-49615e3962e2&do=login&do=login

狼爱上狸 2020-03-09 18:20 发表评论

狼爱上狸 — Sat, 07 Mar 2020 11:08:00 GMT

在C盘根目录下徏立以下批处理文�g�Q?br />

cd C:\Program Files\Microvirt\MEmu

adb start-server

cd C:\Android\Sdk\platform-tools

adb connect 127.0.0.1:21503

cd\

在命令提�C�符�Q�管理员�Q�下�q�行它就O(ji��n)K�?ji��n)�?/div>

狼爱上狸 2020-03-07 19:08 发表评论

在线亚洲97se亚洲综合在线,亚洲国产精品视频,天天综合亚洲色在线精品

centos8 安装 docker

firefox ��译插�g

鼠标在Solaris 11虚拟��Z��不�v作用

solaris11.4

solaris11.3下蝲

linux�Q�centos7�Q�安装jdk8--附带oracle账号

Flutter 常用框架

安装配置Shibboleth

0.前言

1.什么是Shibboleth

2.安装Shibboleth Identity Provider v3.2.1

3.安装指引

3.1 安装apache tomcat 8

3.2 配置shibboleth�q�接ldap

4.��结

在线亚洲97se亚洲综合在线,亚洲国产精品视频,天天综合亚洲色在线精品

centos8 安装 docker

firefox ���译插�g

鼠标在Solaris 11虚拟��Z��不�v作用

solaris11.4

solaris11.3下蝲

linux�Q�centos7�Q�安装jdk8--附带oracle账号

Flutter 常用框架

安装配置Shibboleth

0.前言

1.什么是Shibboleth

2.安装Shibboleth Identity Provider v3.2.1

3.安装指引

3.1 安装apache tomcat 8

3.2 配置shibboleth�q�接ldap

4.���结

firefox ��译插�g

4.��结