Commit f9434bdf authored by Lukas Haemmerle's avatar Lukas Haemmerle
Browse files

Renamed files

parent fbcb746f
Copyright (c) 2017, SWITCH
See LICENSE file for details.
-------------------------------------------------------------------------------
SWITCHwayf Changes
==================
Find below the changes for past releases of the SWITCHwayf and in the credits
sections the people who contributed to the SWITCHwayf.
-------------------------------------------------------------------------------
**This document is written in the markdown syntax**
-------------------------------------------------------------------------------
Version Number Policy
---------------------
Releases with a version number 'X.Y.Z' are bug fix releases correcting
small bugs, typos and graphical issues.
Releases with a version number 'X.Y' are minor releases that introduce
new functionality of fix non-trivial bugs. Few adaptions in the configuration
might be necessary to upgrade to minor releases.
Releases with a version number X are major releases that will require major
changes in the configuration files. Therefore, a clean instalation might be
necessary for such releases.
-------------------------------------------------------------------------------
SWITCHwayf Version History
--------------------------
* Version 1.20.3 - Release date: x. y 2017
- Updated JQuery to v3.2.1
- Made Javascript less prone to conflicts thanks to
contributed code from Christian Glahn
- User HTTP post has preference over session cookies
set by 'remember' checkbox
- Fixed a few minor issues
* Version 1.20.2 - Release date: 22. 12 2015
- Upgraded JQuery library to 3.1
- Fixed bug #3736 that causes SProvider.metadata.php not to
be written/updated if metadata file only contains IdPs.
- Updated in copyright information
* Version 1.20.1 - Release date: 22. 12 2015
- Added code to prevent WAYF loading invalid metadata files
Reported with a patch by Olivier Salaün
- Fixed an HTML issue that caused the interface elements
in Chrome to be displayed in the wrong order
- Fixed a few typos in the configuration help texts
* Version 1.20 - Release date: 30. April 2015
- Added support for Hide-From-Discovery
- Ensured that metadata is not processed multiple times
when it changed
- Fixed a bug that affected Discovery URLs in metadata
containing GET arguments
- Added an option to central and embedded WAYF to disable
loading logo images from third party hosts.
- Improved logging to system log
- Updated Japanese language pack.
Contributed by Takeshi Nishimura
- Updated JQuery library to v1.11.2
* Version 1.19.4 - Release date: 10. October 2014
- Fixed/improved some CSS and HTML code for better rendering
of the stand-alone WAYF on mobile devices.
Reported with a patch by Olivier Salaün
* Version 1.19.3 - Release date: 27. August 2014
- Fixed a bug that would cause readMetadata.php not read the correct
SAML1 SSO endpoint which could result in users being redirected
to a wrong URL when the Shibboleth protocol is used for SAML1.
Bug reported with a patch by Olivier Salaün
- Sorting of Identity Providers is now case-insensitive
- Improved the code to handle large metadata files to prevent memory
limit issues
- Improved drop-down list now does not reload JQuery 1.x unless JQuery
version is older than 1.5
- Updated JQuery library to latest version, which is 1.11.1
* Version 1.19.2 - Release date: 7. March 2014
- Fixed a bug that caused JavaScript errors because of new lines in
certain metadata elements.
- Fixed a bug where text for the Embedded WAYF would not be properly
substituted
- Fixed a bug where the height of the Embedded WAYF improved drop down
list would be too small to read/select an entry.
- Fixed a bug which caused that the wayf_default_idp setting was
ignored
* Version 1.19.1 - Release date: 10. January 2014
- Fixed a bug that listed the last used IdPs in wrong order
- Fixed a bug where Identity Providers would not be shown in the drop-down
list unless there was at least one entry in IDProviders.conf.php
- The default category 'unknown' is now also shown in case the last used
category is displayed.
- Saved one click to permanently save a default organisation.
- Changed some language strings
* Version 1.19 - Release date: 29. October 2013
- Added search-as-you-type support to Embedded WAYF. This feature is off by
default as it is currently experimental. Can be activated with:
var wayf_use_improved_drop_down_list = true
- Added MDUI logo support. Only favicon logos (16x16 px) will be used.
The logos will be dynamically loaded and only if they are visible
- Added new setting $showNumOfPreviouslyUsedIdPs to standalone and embedded
WAYF to show last n used IdPs at top of drop down list. Default is 3.
- Added Embedded WAYF option wayf_overwrite_from_other_federations_text
to overwrite the category name of IdPs from other federations
- Added Embedded WAYF option wayf_auto_redirect_if_logged_in that
automatically sends a user to the wayf_return_url if he already is
authenticated.
- Various Javascript improvements to offload computation from WAYF to client
and to improve the code quality.
- Replaced the term 'Home Organisation' in the language strings to more
generic terms that probably are better understood by users.
- SP names from MDUI metadata elements are now used if available
- Added new version of JQuery library
- Some small styling changes/CSS improvements
Issues: <https://forge.switch.ch/redmine/projects/wayf/versions/56>
Please read the specific update instructions in the README file.
* Version 1.18 - Release date: 5. August 2013
- Changed default SessionInitiator of the Embedded WAYF to
/Login because this has been the default SessionInitiator in
Shibboleth for quite some time now.
- Corrected viewport meta tag separator of default header as suggested
by Andrew Sokolov from Saint Petersburg State University
- Fixed a bug in the IdP preselection of the embedded wayf when
additional IdPs where added
- Removed as many SWITCH-specific graphics and texts as possible.
- Introduced configuration options to allow easier customization.
- Fixed a few small bugs
- Added some optimizations to the drop-down list search-as-you type
feature
- The log file now logs - if possible - also the SP entityID/providerId
- Some small styling changes/CSS improvements
- Added Japanese locales from the GakuNin version of the WAYF
Issues: <https://forge.switch.ch/redmine/projects/wayf/versions/62>
Please read the specific update instructions in the README file, as some
new configuration options were introduced that should be revised.
* Version 1.17.1 - Release date: 14. June 2012
- Fixed a bug occuring when wayf_sp_samlDSURL contains GET arguments
Bug reported with a patch by Takeshi Nishimura
- Fixed typo in configuration otpion useImprovedDropDownList
- Added Javascripts required for improved drop down list
Issues: <https://forge.switch.ch/redmine/projects/wayf/versions/55>
* Version 1.17 Release date: 18. May 2012
- Added CSS styles for mobile view
- Embedded WAYF now reads 'entityID' and 'return' GET arguments.
They get precedence over the values configured for the Embedded WAYF.
- Embedded WAYF logged in message now contains a link to target URL
Issues: <https://forge.switch.ch/redmine/projects/wayf/versions/45>
* Version 1.16 - Release date: 19. January 2012
- Added an improved version of the drop down list to the WAYF
Inspired by code from Takeshi Nishimura from NII (Japan)
Uses modified ImprovedDropdown JQuery library by John Fuex
See LICENSE file for further information
- Added cookieSecurity option to set and transmit cookies securely
Code contributed by Takeshi Nishimura from NII (Japan)
- Added additional data protection feature that uses the referer to
decide whether or not to preselect an Identity Provider in the
Embedded WAYF.
Code contributed by Takeshi Nishimura from NII (Japan)
- If the Discovery Feed feature is activated only those IdPs are shown
that are contained in the feed. Others will be hidden automatically.
- Added Keywords property to format of IDP entries to allow users to
search Identity Providers using a keyword.
Issues: <https://forge.switch.ch/redmine/projects/wayf/versions/40>
* Version 1.15 - Release date: 21. October 2011
- A default and custom CSS file can now be used
- Graphical design now is based new SWITCH harmos elements
- Adapted JSON output to use format used by Shibboleth SP
- Renamed some string keys to make them independent from SWITCH
**Please review the 'Specific Update Instructions' in the README file**
- Added support for the Shibboleth SP 2.4 Discovery Feed JSON output
in Embedded WAYF
- Focus on submit button works better with different browsers
- Invalid values for width and height are now defaulted to auto for
Embedded WAYF
- Fixed a URL composing bug that resulted in a wrong return URL to
the Service Provider if the return parameter did not contain any GET
arguments. Reported by Tom Scavo
- Made implementation behave according to the Discovery Service protocol
specification when it comes to the return parameter. This parameter
is optional in case the DS knows the SP Discovery URL.
Reported by Tom Scavo.
Issues: <https://forge.switch.ch/redmine/projects/wayf/versions/26>
* Version 1.14.3 - Release date: 4. March 2011
- Fixed a race condition.
Thanks go to Robert Basch for reporting the issue and providing a patch.
Issues: <https://forge.switch.ch/redmine/projects/wayf/versions/32>
* Version 1.14.2 - Release date: 15. December 2010
- IDProvider.conf.php and config.php are not overwritten anymore by upgrades
- Logging to syslog now works properly and is more consistent
- Access log now properly locks file
- Unknown category is not shown anymore when there is no other category
- Namespaces are now taken properly into account when parsing SAML2
metadata. Thanks go to Olivier Salaün for reporting this issue and
submitting a patch.
- Improved installation instructions
Issues: <https://forge.switch.ch/redmine/projects/wayf/versions/25>
* Version 1.14.1 - Release date: 12. November 2010
- Fixed an encoding bug that affected non-ASCII characters in JavaScripts.
Thanks to Prof. Kazutsuna Yamaji for reporting this issue.
- Corrected behaviour of $enableDSReturnParamCheck and
$useACURLsForReturnParamCheck. There won't be an error anymore if an SP
has no <idpdisc:DiscoveryResponse> extension defined. In such a case
there will only be a check if $useACURLsForReturnParamCheck is enabled.
- Fixed a bug in readMetadata.php that prevented CLI execution
- Changed the default configuration option to generate the Embedded WAYF
to false due to some concerns regarding phishing attacks
- Added proper copyright statements to all source code files
Issues: <https://forge.switch.ch/redmine/projects/wayf/versions/21>
The revision history of older versions, can be found on the SWITCHwayf web page:
<https://forge.switch.ch/redmine/projects/wayf/wiki/Changes>
-------------------------------------------------------------------------------
Credits
-------
Main developer of the SWITCHwayf: Lukas Hämmerle
The SWITCHwayf uses code from the following libraries:
* jQuery by the jQuery Foundation and other contributors,
http://jquery.com/
* Improved Dropdown by John Fuex
https://bitbucket.org/Johnfx/improveddropdown-jquery-plugin/src
* jQuery Plug-in "Basic Visibility Detection" by Digital Fusion
http://teamdf.com/
Please consult the LICENSE file for the individual licenses of these components.
Find below a list of people who have contributed to the code, either because they
found bugs, suggested improvements or contributed code. Have a look at the
version history in order to see the individual contributions. The list is sorted
alphabetically.
- Robert Basch from MIT (US)
- Pavlos Drandakis from University of Athens (GR)
- Nicolas Dunand from Université Lausanne (CH)
- Michael R. Gettes from Internet2 (US)
- Christian Glahn, HTW Chur (CH)
- Nuno Gonçalves from FCCN (PT)
- Florent Guilleux from CRU (FR)
- Josh Howlett from University of Bristol (UK)
- Franz Kuster from ETH Zurich (CH)
- Wolgang Lierz from ETH Zurich (CH)
- Takeshi Nishimura NII National Institute of Informatics (JP)
- Lourival Pereira Vieira Neto from RNP (BR)
- Martins Purins from Latvijas Universitates (LV)
- Olivier Salaün from RENATER (FR)
- Tom Scavo from Internet2 (US)
- Andrew Sokolov, Saint Petersburg State University (RU)
- Mika Suvanto from CSC (FI)
- Huân Thebault from Centre de Calcul de l'IN2P3 (FR)
- Prof. Kazutsuna Yamaji from NII National Institute of Informatics (JP)
- And of course all SWITCH staff members who have contributed suggestions,
bug fixes and translation to this code.
Special also go to RENATER, the French Research & Education Network. The main
developer (Lukas Hämmerle) has been a guest at REANTER for 6 months in 2013,
during which he worked - among other things - also on the versions 1.18 and 1.19
of the SWITCHwayf.
This diff is collapsed.
License note for the SWITCHwayf code
-----------------------------------
Copyright 2017, SWITCH
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are
met:
* Redistributions of source code must retain the above copyright
notice, this list of conditions and the following disclaimer.
* Redistributions in binary form must reproduce the above copyright
notice, this list of conditions and the following disclaimer in the
documentation and/or other materials provided with the distribution.
* Neither the name of SWITCH nor the names of its contributors may
be used to endorse or promote products derived from this software
without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER
OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
License note for the Improved Dropdown
--------------------------------------
Copyright 2011 - John Fuex
Licensed under the Apache License, Version 2.0 (the "License"); you
may not use this file except in compliance with the License. You may
obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
implied. See the License for the specific language governing
permissions and limitations under the License.
License note for JQuery
-----------------------
Copyright 2013 - jQuery Foundation and other contributors, http://jquery.com/
Permission is hereby granted, free of charge, to any person obtaining
a copy of this software and associated documentation files (the
"Software"), to deal in the Software without restriction, including
without limitation the rights to use, copy, modify, merge, publish,
distribute, sublicense, and/or sell copies of the Software, and to
permit persons to whom the Software is furnished to do so, subject to
the following conditions:
The above copyright notice and this permission notice shall be
included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
License note JQuery Plug-in "Basic Visibility Detection"
-------------------------------------------------------
Copyright 2012 - Digital Fusion, http://teamdf.com/
Permission is hereby granted, free of charge, to any person obtaining
a copy of this software and associated documentation files (the
"Software"), to deal in the Software without restriction, including
without limitation the rights to use, copy, modify, merge, publish,
distribute, sublicense, and/or sell copies of the Software, and to
permit persons to whom the Software is furnished to do so, subject to
the following conditions:
The above copyright notice and this permission notice shall be
included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Copyright (c) 2017, SWITCH
See LICENSE file for details.
-------------------------------------------------------------------------------
SWITCHwayf
==========
This document contains important information for this release of SWITCHwayf,
including the installation and update instructions.
* Project web site: <https://forge.switch.ch/redmine/projects/wayf>
* Bug reports/feature requests: <https://forge.switch.ch/redmine/projects/wayf/issues>
* Contact: aai@switch.ch or go to <http://www.switch.ch/aai/wayf>
-------------------------------------------------------------------------------
**This document is written in the markdown syntax**
-------------------------------------------------------------------------------
Requirements
------------
- PHP 5.3 or newer
- PHP XML Parser extension is required for parsing SAML2 metadata
- The web server users must have write permissions to some files including:
* $backupIDPConfigFile (default 'IDProvider.conf.php')
* $metadataIDPFile (default 'IDProvider.metadata.conf.php')
* $metadataSPFile (default 'SProvider.metadata.conf.php')
* $metadataLockFile (default '/tmp/wayf_metadata.lock')
* $WAYFLogFile (default '/var/log/apache2/wayf.log')
-------------------------------------------------------------------------------
Download
--------
The latest release can be downloaded from:
<https://forge.switch.ch/redmine/projects/wayf/files>
-------------------------------------------------------------------------------
Installation
------------
1. Unpack the SWITCHwayf_binary ${VERSION}_${DATE}.zip ZIP archive into a
directory on a host where Apache or IIS is installed.
2. Make a copy of the *.dist.php files
- Copy the file config.dist.php and name it config.php
This is the main configuration file of the SWITCHwayf
- Copy the file IDProvider.conf.dist.php and name it IDProvider.conf.php
This file contains the list of Identity Providers that that can be
configured by hand
3. Enure that permissions for the files:
- SProvider.metadata.php
- IDProvider.metadata.php
- metadata.lock
- $WAYFLogFile (typically /var/log/apache2/wayf.log)
are set such that the web server user (e.g. www-data, www or httpd) has write
permissions for them.
4. Adapt the SWITCHwayf configuration in config.php. There are comments in that
file that should help you make suitable choices for your use case.
5. If Apache 2 is used, add the following statement to the Apache configugration:
--
Alias /SWITCHaai /#YOUR-PATH-TO#/SWITCHwayf
<Directory /#YOUR-PATH-TO#/SWITCHwayf>
Options Indexes MultiViews
AllowOverride None
Order allow,deny
Allow from all
<Files WAYF>
SetHandler php5-script
AcceptPathInfo On
</Files>
</Directory>
--
Alternatively, one also could rename the file 'WAYF' to 'WAYF.php'.
6. When using the embedded WAYF feature it might be necessary to add a line to
the Apache configuration like below in order to prevent certain web browsers
from not displaying the Embedded WAYF or parts of it:
--
Header set P3P "CP=\"NOI CUR DEVa OUR IND COM NAV PRE\""
--
For that to work, the Apache header extension must also be enabled
with a command like:
--
a2enmod headers
/etc/init.d/apache2 reload
--
See <http://www.w3.org/P3P/> for more details on P3P.
7. Test access by calling the WAYF with a URL like:
<https://your.host.com/path/to/WAYF>
Use this URL as Location for your Shibboleth configuration. The WAYF
will automatically be able to detect whether it receives a Shibboleth
authentication request or a Discovery Service request.
-------------------------------------------------------------------------------
Subversion access
-----------------
Check out the latest SWITHCHwayf code with:
`svn co https://subversion.switch.ch/svn/general/aai/SWITCHwayf/`
Although the code in the Subversion should be always executable, it should be
considered unstable and not be used for production environments without prior
testing.
-------------------------------------------------------------------------------
General Update Instructions
---------------------------
1. Make a backup of the directory where the currently active version of the
SWITCHwayf is installed, e.g. with 'cp -a SWITCHwayf SWITCHwayf.bak'
2. Get the ZIP archive of the new version and move it into the same
directory as the WAYF script of the currently deployed version.
Download from: <https://forge.switch.ch/redmine/projects/wayf/files>
3. Unzip the archive, e.g. with the command
'unzip -d #DD# SWITCHwayf_x.y_YYYYMMDD.zip '
This step will overwrite all files except those whose names start
with 'custom-'.
Alternatively, create a new directory, move the ZIP archive in that directory,
unzip it and then copy the config.php and all custom-.* files from the
current SWITCHwayf installation over to the new directory.
4. Have a look at config.dist.php and compare this file with your current
config.php in order to identify new configuration options.
> Since version 1.18 the script 'update-config.php' can be used to
> merge an existing configuration (from config.php) with the default
> configuration (config.dist.php) into a new configuration file
> (config.new.php). This allows easily getting a clean configuration file
> while keeping the current settings.
> Run the script with: `php update-config.php`
> Ensure that the user has the necessary write privileges to create the
> file config.new.php. Also note that all comments you might have
> added in the current.php will not be copied over.
Also compare the custom-.* files to the default-.* files that might have
changed. Some features like the improved drop-down list require the WAYF
to load additional javascripts. If a custom header file is missing them,
the feature will not work.
5. Ensure that permissions for the files:
- SProvider.metadata.php
- IDProvider.metadata.php
- metadata.lock
- $WAYFLogFile (typically /var/log/apache2/wayf.log)
are set such that the web server user (e.g. www-data, www or httpd) has write
permissions for them.
6. If SAML2 metadata is used by SWITCHwayf, you might have to run the following
command to bootstrap the metadata reading process again:
`php readMetadata.php`
-------------------------------------------------------------------------------
Specific Update Instructions
----------------------------
* Updates from versions before 1.18
The following new configuration options were introduced:
- $supportContactEmail
- $organizationLogoURL
- $organizationURL
- $faqURL
- $helpURL
- $privacyURL
Have a look at config.dist.php in section "5. Appearance Settings" for a
description on these settings. Then make sure to add them to config.php
with your own values (or empty strings to ignore them). Otherwise, default
values will be set.
The default behaviour for the Embedded WAYF setting
wayf_use_small_logo was changed from false to true as most instances
of the Embedded WAYF seem to prefer the small logo. All non-mandatory
settings of the Embedded WAYF are now commented out in the default
template that is generated for the Embedded WAYF. This implies that
if there are Service Providers using your Embedded WAYF feature, they might
have to review their Embedded WAYF settings if they still want to use the
larger logo.
* Updates from versions before 1.15
The keys of the following languages strings were renamed and should be
adapted in the custom-languages.php file if it exists.
- 'about_aai' was renamed to 'about_federation'
- 'about_switch' was renamed to 'about_organisation'
- 'switch_description' was renamed to 'additional_info'
* Update from versions before 1.14.3:
The new setting '$metadataLockFile' was introduced in config.php. It allows
configuring the location of the lock file. When the SWITCHwayf is used in a
Windows environment, the path to this file probably has to be adapted.
* Update from versions before 1.8:
This version has a slightly different structure than previous versions.
Therefore, it is recommended to start with a clean installation.
However, you should be able to take over most of your old config.php
functions and use them in the new template.php file again to keep your
customized look and feel.
-------------------------------------------------------------------------------
Security Notes
--------------
The Discovery Service protocol as defined in
<http://docs.oasis-open.org/security/saml/Post2.0/sstc-saml-idp-discovery.pdf>
states that the protocol creates opportunities for phishing attacks as do all
SSO protocols that make use of redirection. The specification states that an
implementation "SHOULD" examine the 'return' parameter used in a Discovery
Service request and match it against the <idpdisc:DiscoveryResponse>
extension in SAML metadata. Since version 1.14 the SWITCHwayf supports this
feature. In order to activate it, the SWITCHwayf has to use the SAML 2 metadata
parsing features by using
* $useSAML2Metadata = true;
and set the options:
* enableDSReturnParamCheck = true;
and potentially
* $useACURLsForReturnParamCheck = true;
in case the metadata loaded by SWITCHwayf does not include DiscoveryResponse
elements for many Service Providers.
-------------------------------------------------------------------------------
Troubleshooting
---------------
Generally, if there is an error or an exception, the WAYF will log it to syslog.
In case there is a problem and only a white page without any output is displayed,
open config.php in a text editor, go to the bottom of the file and set:
$developmentMode = true;
This should output PHP warning messages which are otherwise supressed.
-------------------------------------------------------------------------------
Documentation
-------------
Consult the DOC file in the same directly as this file for further information
on configuring and customizing the SWITCHwayf.