Editing Shibboleth (section)

== Installing Shibboleth ==
* First, add the Shibboleth repository to your list of YUM repositories (if you need this for a different RHEL-based Linux distribution fill in the form at https://shibboleth.net/downloads/service-provider/latest/RPMS/):
  root> wget -O /etc/yum.repos.d/shibboleth.repo https://shibboleth.net/cgi-bin/sp_repo.cgi?platform=CentOS_7

* Now you can use Yum to install all package dependencies:
  root> yum install log4shib opensaml shibboleth unixODBC xerces-c xml-security-c xmltooling 

* You may be prompted to accept the importing of the key for the Shibboleth repository, for which you should type '''y''' and press enter.

* Once you have done that, test that '''shibd''' has no issues:
  root> LD_LIBRARY_PATH=/opt/shibboleth/lib64 shibd -t

* ''shibd -t'' should return a couple of warning, like those listed below.  These are due to it not yet being configured.
  2015-05-11 10:39:01 WARN Shibboleth.Application : insecure cookieProps setting, set to "https" for SSL/TLS-only usage
  2015-05-11 10:39:01 WARN Shibboleth.Application : handlerSSL should be enabled for SSL/TLS-enabled web sites
  2015-05-11 10:39:01 WARN Shibboleth.Application : no MetadataProvider available, configure at least one for standard SSO usage
  overall configuration is loadable, check console for non-fatal problems

* If there are no other warning or error messages from ''shibd -t'', you can start it properly and check to make sure it is running. You may also want ensure Shibboleth starts at boot using '''systemctl  enable'''
  root> systemctl start shibd.service
  root> ps aux | grep shib
  shibd    29338  0.4  0.7 419784 15024 ?        Ssl  11:16   0:00 /usr/sbin/shibd -p /var/run/shibboleth/shibd.pid -f -w 30
  root     29345  0.0  0.0 112640   940 pts/2    S+   11:17   0:00 grep --color=auto -i shib
  root> systemctl enable shibd.service