Archive for May, 2011

Storing Shibboleth IDP Logs in a Database with IP Addresses

Tuesday, May 31st, 2011

Shibboleth’s IDP can store audit logs that indicate when people authenticate against the IDP web application. These files are written to disk by default using the settings in the logging.xml configuration file. This tutorial will show how audit logs can be placed in a MS SQL database and also include the IP addresses of the connecting clients.
(more…)

Installing subversion on SuSE Enterprise Server 10

Friday, May 13th, 2011

At home I use the latest version openSUSE with network updates and patches, but in a corporate environment a server administrator or developer often finds him or herself having to deal with older enterprise versions of products. I was surprised to discover that SUSE Enterprise Server 10 SP2 did not contain a subversion package (or anything above python 2.4.2, but that’s for another post). I found several conflicting and outdated instructions, so here is a current version of how to install subversion 1.6 on SUSE Enterprise Server 10.
(more…)

Handling Grace Logins from Novell e-Directory in Shibboleth

Thursday, May 12th, 2011

Many institutions are using Shibboleth for unified single sign-on between both internal and external web application. Shibboleth is an authentication engine and, as its backend, it can use a variety of sources for authentication including LDAP, a SQL database or other resources. It simply deals with authentication, so more advanced configurations, such as systems which allow grace logins after a password expires, may require more customization. The following tutorial shows how to use Shibboleth with a Novell e-Directory server that allows grace logins after a user’s password has expired.
(more…)