diff options
| author | Christophe Nowicki <cnowicki@easter-eggs.com> | 2004-09-15 15:59:59 +0000 |
|---|---|---|
| committer | Christophe Nowicki <cnowicki@easter-eggs.com> | 2004-09-15 15:59:59 +0000 |
| commit | 2f0a452be39b1ec48a2ce40c3d5d857f31d71a90 (patch) | |
| tree | befa46703e480695e550b6ffb43b3c9639cb8832 /php/Attic/examples/README | |
| parent | 881bb4d750dbb07cae3d4f8836a6c06ba465272e (diff) | |
| download | lasso-2f0a452be39b1ec48a2ce40c3d5d857f31d71a90.tar.gz lasso-2f0a452be39b1ec48a2ce40c3d5d857f31d71a90.tar.xz lasso-2f0a452be39b1ec48a2ce40c3d5d857f31d71a90.zip | |
Added sample xml metadata in the distribution
Added a README file, this file explain howto setup a PHP IdP/SP, it's
not fully documented yet. Work in progress.
Diffstat (limited to 'php/Attic/examples/README')
| -rw-r--r-- | php/Attic/examples/README | 137 |
1 files changed, 137 insertions, 0 deletions
diff --git a/php/Attic/examples/README b/php/Attic/examples/README new file mode 100644 index 00000000..e53bdb92 --- /dev/null +++ b/php/Attic/examples/README @@ -0,0 +1,137 @@ +Lasso Exemples +---------------------------------- + +SOFTWARE + This directory include a Liberty Alliance Service Provider (sample-sp) + and a Liverty Alliance Identity Provider (sample-idp) written in PHP + with the Lasso extension. + +INSTALLATION + You need the fallowing components : + - The Apache Web Server (with SSL support) + - OpenSSL + - PHP4 version 4.3 with OpenSSL support enabled + - The Lasso Extension for PHP + - A PostgreSQL database server + - PHP Pear modules : DB, HTML_QuickForm, Log + + Debian packages for the Lasso extension are available, they are included + in the current development version (sid) and packages for the current stable + version (sarge) are available in the entr'ouvert's apt repository: + + deb http://www.entrouvert.org ./debian/lasso/ + + Add this line in your /etc/apt/sources.list and install the fallow packages : + + apt-get install apache-ssl php4 php4-lasso php4-pgsql php4-pear postgresql + + Pear packages can be installed with the pear command : + + # pear install DB HTML_Common HTML_Form HTML_QuickForm Log + +CONFIGURATION + + PostgreSQL + + Change user "postgres" password to access the database. + You can do this by executing in a shell : + + # su - postgres + $ psql template1 + template1=# ALTER USER postgres password 'new_pass'; + ALTER USER + template1=# \q + + Change your PostgreSQL server configuration to use passwords to + authenticate users writing in your /etc/postgresql/pg_hba.conf file: + + local all all password + host all all 127.0.0.1 255.255.255.255 password + + Then, restart the postmaster with /etc/init.d/postgresql restart. + + # /etc/init.d/postgresql restart + + Now you can create users idp and sp in postgres. Thoses users can create + database. + + $ createuser -A -d -P idp + Enter password for new user: + Enter it again: + Password: <-- postgres's password used to access the database + CREATE USER + + $ createuser -A -d -P sp + [ ... ] + + Create databases for idp and sp. + + $ createdb -U idp idp + Password: <-- idp's password + CREATE DATABASE + + $ createdb -U sp sp + [ ... ] + + Database setup is finished. + + + + Enable PHP in Apache + + Change you Apache's configuration file to load PHP as module in your + /etc/apache-ssl/modules.conf file : + + LoadModule php4_module /usr/lib/apache/1.3/libphp4.so + + Add Type Mime for PHP + + In /etc/apache-ssl/httpd.conf write : + + # + # And for PHP 4.x, use: + # + AddType application/x-httpd-php .php + + PHP 4 + + Edit PHP 4 configuration file to enable the Lasso and Postgres extension + at the end of /etc/php4/apache/php.ini file : + + extension=pgsql.so + extension=lasso.so + + Copy example source code in /var/lib/www : + + # cp -r sample-idp /var/www/idp + # cp -r sample-sp /var/www/sp + # chown -R www-data: /var/www/idp /var/www/sp + + OpenSSL + + To generate SSL certificat for the Identity Provider and the Service + Provider you need the openssl command line utility. + + # cd /var/www/sp + # openssl req -out certificate_sp1.pem -keyout private-key-raw_sp1.pem -x509 -nodes -newkey rsa:2048 + [ ... ] + # openssl x509 -in certificate_sp1.pem -noout -pubkey > private-key-raw_sp1.pem + # chown www-data *.pem + + # cd /var/www/idp + # openssl req -out certificate_idp1.pem -keyout private-key-raw_idp1.pem -x509 -nodes -newkey rsa:2048 + [ ... ] + # openssl x509 -in certificate_idp1.pem -noout -pubkey > private-key-raw_idp1.pem + # chown www-data *.pem + + +SETUP + + Now launch your favorite web browser and go to : + + https://localhost/sp/setup.php + + or + + https://localhost/idp/setup.php + |
