Manutenção programada - 12:00 de 29/06/2018

Devido à necessidade de realização de uma manutenção técnica, o serviço Confluence irá estar indisponível na próxima sexta feira, dia 29 de junho de 2017, a partir das 12:00 horas.

O tempo estimado para a realização desta intervenção é de cerca de 60 minutos. Iremos procurar ser o mais breves possíveis e tentar garantir o menor impacto possível.

Árvore de páginas
Ir directamente para o fim dos matadados
Ir directamente para o início dos matadados

The federation metadata file is available in the following url:

 https://rctsaai-rr.fccn.pt/rr/signedmetadata/federation/UkNUU2FhaQ~~/metadata.xml

Metadata file digitally signed

The federation metadata file is digitally signed. To obtain the certificate metadatasigner.pem, referenced in the configurations below, you must make the request via email to RCTSaai team (rctsaai@fccn.pt).

Metadata Configuration - Shibboleth

 Identity Provider

 

Upload Certificate

The metadatasigner.pem certificate used to validate the federation metadata should be placed in the following location:
/opt/shibboleth-idp/credentials/

relying-party.xml
 
1. Add new block with the new link:


 <metadata:MetadataProvider id="URLMD" xsi:type="metadata:FileBackedHTTPMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata"
                        metadataURL="https://rctsaai-rr.fccn.pt/rr/signedmetadata/federation/UkNUU2FhaQ~~/metadata.xml"
                        backingFile="/opt/shibboleth-idp/metadata/RCTSaai_metadata.xml"
                        minRefreshDelay="PT5M"
                        maxRefreshDelay="PT1H"
                        refreshDelayFactor="0.75" >


                  <metadata:MetadataFilter xsi:type="SignatureValidation" xmlns="urn:mace:shibboleth:2.0:metadata" trustEngineRef="shibboleth.RR-RCTSaaiMetadataTrustEngine"  requireSignedMetadata="true" />

</metadata:MetadataProvider>



2. Add after block </ security: Credential> the reference to metadatasigner.pem certificate:

 <security:TrustEngine id="shibboleth.RR-RCTSaaiMetadataTrustEngine" xsi:type="security:StaticExplicitKeySignature">
         <security:Credential  id="RCTSaaiFederationCredentials" xsi:type="security:X509Filesystem">
		 	<security:Certificate>/opt/shibboleth-idp/credentials/metadatasigner.pem</security:Certificate>
		 </security:Credential>
</security:TrustEngine>
 Service Provider

 

Upload Certificate

The metadatasigner.pem certificate used to validate the federation metadata should be placed in the following location:
/etc/shibboleth/

shibboleth2.xml
<MetadataProvider type="XML" uri="https://rctsaai-rr.fccn.pt/rr/signedmetadata/federation/UkNUU2FhaQ~~/metadata.xml" backingFilePath="/etc/shibboleth/rctsaai/RCTSaai_metadata.xml"  reloadInterval="60">
	
	 <MetadataFilter type="Signature" certificate="metadatasigner.pem"/>

</MetadataProvider>

Metadata Configuration - SimpleSAMLphp

 Identity and Service Providers

 

Upload Certificate

The metadatasigner.pem certificate used to validate the federation metadata should be placed in the following location:
/var/simplesaml/cert/

config-metarefresh.php
 <?php
   $config = array(
        'sets' => array(
                'rctsaai' => array(
                        'cron' => array('hourly'),
                        'sources' => array(
                                array( 'src' => 'https://rctsaai-rr.fccn.pt/rr/signedmetadata/federation/UkNUU2FhaQ~~/metadata.xml',
                                       'certFingerprint' => '0b3b547d116b92d5f3008a3b4058e7a762f21d9d',
                                        'certificate'               => 'metadatasigner.pem', ),
                                        ),
                                        'maxCache' => 60*60*24*4, // Maximum 4 days cache time.
                                        'maxDuration' => 60*60*24*10, // Maximum 10 days duration on ValidUntil.
                                        'outputDir' => 'metadata/rctsaai/',
                                        'outputFormat' => 'flatfile',
                                ),
        )
);

 

 

  • Sem rótulos