summaryrefslogtreecommitdiffstats
path: root/php/Attic/examples/README
diff options
context:
space:
mode:
authorChristophe Nowicki <cnowicki@easter-eggs.com>2004-09-15 15:59:59 +0000
committerChristophe Nowicki <cnowicki@easter-eggs.com>2004-09-15 15:59:59 +0000
commit2f0a452be39b1ec48a2ce40c3d5d857f31d71a90 (patch)
treebefa46703e480695e550b6ffb43b3c9639cb8832 /php/Attic/examples/README
parent881bb4d750dbb07cae3d4f8836a6c06ba465272e (diff)
downloadlasso-2f0a452be39b1ec48a2ce40c3d5d857f31d71a90.tar.gz
lasso-2f0a452be39b1ec48a2ce40c3d5d857f31d71a90.tar.xz
lasso-2f0a452be39b1ec48a2ce40c3d5d857f31d71a90.zip
Added sample xml metadata in the distribution
Added a README file, this file explain howto setup a PHP IdP/SP, it's not fully documented yet. Work in progress.
Diffstat (limited to 'php/Attic/examples/README')
-rw-r--r--php/Attic/examples/README137
1 files changed, 137 insertions, 0 deletions
diff --git a/php/Attic/examples/README b/php/Attic/examples/README
new file mode 100644
index 00000000..e53bdb92
--- /dev/null
+++ b/php/Attic/examples/README
@@ -0,0 +1,137 @@
+Lasso Exemples
+----------------------------------
+
+SOFTWARE
+ This directory include a Liberty Alliance Service Provider (sample-sp)
+ and a Liverty Alliance Identity Provider (sample-idp) written in PHP
+ with the Lasso extension.
+
+INSTALLATION
+ You need the fallowing components :
+ - The Apache Web Server (with SSL support)
+ - OpenSSL
+ - PHP4 version 4.3 with OpenSSL support enabled
+ - The Lasso Extension for PHP
+ - A PostgreSQL database server
+ - PHP Pear modules : DB, HTML_QuickForm, Log
+
+ Debian packages for the Lasso extension are available, they are included
+ in the current development version (sid) and packages for the current stable
+ version (sarge) are available in the entr'ouvert's apt repository:
+
+ deb http://www.entrouvert.org ./debian/lasso/
+
+ Add this line in your /etc/apt/sources.list and install the fallow packages :
+
+ apt-get install apache-ssl php4 php4-lasso php4-pgsql php4-pear postgresql
+
+ Pear packages can be installed with the pear command :
+
+ # pear install DB HTML_Common HTML_Form HTML_QuickForm Log
+
+CONFIGURATION
+
+ PostgreSQL
+
+ Change user "postgres" password to access the database.
+ You can do this by executing in a shell :
+
+ # su - postgres
+ $ psql template1
+ template1=# ALTER USER postgres password 'new_pass';
+ ALTER USER
+ template1=# \q
+
+ Change your PostgreSQL server configuration to use passwords to
+ authenticate users writing in your /etc/postgresql/pg_hba.conf file:
+
+ local all all password
+ host all all 127.0.0.1 255.255.255.255 password
+
+ Then, restart the postmaster with /etc/init.d/postgresql restart.
+
+ # /etc/init.d/postgresql restart
+
+ Now you can create users idp and sp in postgres. Thoses users can create
+ database.
+
+ $ createuser -A -d -P idp
+ Enter password for new user:
+ Enter it again:
+ Password: <-- postgres's password used to access the database
+ CREATE USER
+
+ $ createuser -A -d -P sp
+ [ ... ]
+
+ Create databases for idp and sp.
+
+ $ createdb -U idp idp
+ Password: <-- idp's password
+ CREATE DATABASE
+
+ $ createdb -U sp sp
+ [ ... ]
+
+ Database setup is finished.
+
+
+
+ Enable PHP in Apache
+
+ Change you Apache's configuration file to load PHP as module in your
+ /etc/apache-ssl/modules.conf file :
+
+ LoadModule php4_module /usr/lib/apache/1.3/libphp4.so
+
+ Add Type Mime for PHP
+
+ In /etc/apache-ssl/httpd.conf write :
+
+ #
+ # And for PHP 4.x, use:
+ #
+ AddType application/x-httpd-php .php
+
+ PHP 4
+
+ Edit PHP 4 configuration file to enable the Lasso and Postgres extension
+ at the end of /etc/php4/apache/php.ini file :
+
+ extension=pgsql.so
+ extension=lasso.so
+
+ Copy example source code in /var/lib/www :
+
+ # cp -r sample-idp /var/www/idp
+ # cp -r sample-sp /var/www/sp
+ # chown -R www-data: /var/www/idp /var/www/sp
+
+ OpenSSL
+
+ To generate SSL certificat for the Identity Provider and the Service
+ Provider you need the openssl command line utility.
+
+ # cd /var/www/sp
+ # openssl req -out certificate_sp1.pem -keyout private-key-raw_sp1.pem -x509 -nodes -newkey rsa:2048
+ [ ... ]
+ # openssl x509 -in certificate_sp1.pem -noout -pubkey > private-key-raw_sp1.pem
+ # chown www-data *.pem
+
+ # cd /var/www/idp
+ # openssl req -out certificate_idp1.pem -keyout private-key-raw_idp1.pem -x509 -nodes -newkey rsa:2048
+ [ ... ]
+ # openssl x509 -in certificate_idp1.pem -noout -pubkey > private-key-raw_idp1.pem
+ # chown www-data *.pem
+
+
+SETUP
+
+ Now launch your favorite web browser and go to :
+
+ https://localhost/sp/setup.php
+
+ or
+
+ https://localhost/idp/setup.php
+