Skip to content
GitLab
Projects
Groups
Snippets
Help
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
S
SWITCHwayf
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Issues
0
Issues
0
List
Boards
Labels
Service Desk
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Operations
Operations
Incidents
Environments
Packages & Registries
Packages & Registries
Container Registry
Analytics
Analytics
CI / CD
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
Guillaume Rousse
SWITCHwayf
Commits
0e3639a3
Commit
0e3639a3
authored
Feb 28, 2013
by
haemmer
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Fixed shall and should
parent
ddf0df74
Changes
6
Hide whitespace changes
Inline
Side-by-side
Showing
6 changed files
with
21 additions
and
21 deletions
+21
-21
DOC
DOC
+5
-5
config.dist.php
config.dist.php
+6
-6
default-body.php
default-body.php
+1
-1
default-embedded-wayf.php
default-embedded-wayf.php
+6
-6
default-settings.php
default-settings.php
+1
-1
templates.php
templates.php
+2
-2
No files found.
DOC
View file @
0e3639a3
...
@@ -120,11 +120,11 @@ XCache is less than 1% because the TLS hand-shake is what consumes most CPU time
...
@@ -120,11 +120,11 @@ XCache is less than 1% because the TLS hand-shake is what consumes most CPU time
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
SAML2 Metadata support:
SAML2 Metadata support:
In case the WAYF/DS sh
all
display the list of IdPs by parsing them from a
In case the WAYF/DS sh
ould
display the list of IdPs by parsing them from a
SAML2 Medatadata file that is used by Shibboleth:
SAML2 Medatadata file that is used by Shibboleth:
- Set $useSAML2Metadata in config.php to true
- Set $useSAML2Metadata in config.php to true
- Specify the path to the metadata file that sh
all
be read in $metadataFile
- Specify the path to the metadata file that sh
ould
be read in $metadataFile
and make sure this file is updated regularely by Shibboleth or a cron job
and make sure this file is updated regularely by Shibboleth or a cron job
- Make sure the files specified in $metadataIDPFile and $metadataSPFile can be
- Make sure the files specified in $metadataIDPFile and $metadataSPFile can be
written by the userthat executes the PHP script (the web server user,
written by the userthat executes the PHP script (the web server user,
...
@@ -137,7 +137,7 @@ general. However, for large numbers of entities an opcode cacher might speed up
...
@@ -137,7 +137,7 @@ general. However, for large numbers of entities an opcode cacher might speed up
execution time considerably (see chapter "Optimization" above) thanks to
execution time considerably (see chapter "Optimization" above) thanks to
this format.
this format.
If an entry sh
all be
changed, removed or extended in this automatically
If an entry sh
ould
changed, removed or extended in this automatically
generated file, one can extend the IDP definitions by modifying them in
generated file, one can extend the IDP definitions by modifying them in
the $IDPConfigFile. To overwrite IDP values with entries in the $IDPConfigFile,
the $IDPConfigFile. To overwrite IDP values with entries in the $IDPConfigFile,
make sure the entry $SAML2MetaOverLocalConf is set to 'false';
make sure the entry $SAML2MetaOverLocalConf is set to 'false';
...
@@ -205,7 +205,7 @@ wayf_use_disco_feed might not be used.
...
@@ -205,7 +205,7 @@ wayf_use_disco_feed might not be used.
-------------------------------------------------------------------------------
-------------------------------------------------------------------------------
Kerberos support:
Kerberos support:
If this features
shall be used
the web server needs to support Negotiate/SPNEGO
If this features
is used,
the web server needs to support Negotiate/SPNEGO
Kerberos protocol. For example by using mod_auth_kerb.
Kerberos protocol. For example by using mod_auth_kerb.
- Make a symlink of the file 'WAYF' and name it like configured in the variable
- Make a symlink of the file 'WAYF' and name it like configured in the variable
$kerberosRedirectURL
$kerberosRedirectURL
...
@@ -255,7 +255,7 @@ the entry stands for an Identity Provider. For entries of Type category, the
...
@@ -255,7 +255,7 @@ the entry stands for an Identity Provider. For entries of Type category, the
['Type']: Optional Type that is used for the embedded wayf to hide
['Type']: Optional Type that is used for the embedded wayf to hide
or show certain categories. Default type will
or show certain categories. Default type will
be 'unknown' if not specified.
be 'unknown' if not specified.
An entry for another WAYF/DS that the user sh
all
be
An entry for another WAYF/DS that the user sh
ould
be
redirected to should have ['Type'] ='wayf
redirected to should have ['Type'] ='wayf
The Type values 'category' and 'wayf' are reserved
The Type values 'category' and 'wayf' are reserved
words that are not allowed to be assigned to
words that are not allowed to be assigned to
...
...
config.dist.php
View file @
0e3639a3
...
@@ -12,7 +12,7 @@ $defaultLanguage = 'en';
...
@@ -12,7 +12,7 @@ $defaultLanguage = 'en';
// 2. Cookie settings
// 2. Cookie settings
//*******************
//*******************
// Domain within the WAYF cook
ei shall
be readable. Must start with a .
// Domain within the WAYF cook
ie should
be readable. Must start with a .
$commonDomain
=
'.switch.ch'
;
$commonDomain
=
'.switch.ch'
;
// Optionnal cookie name prefix in case you run several
// Optionnal cookie name prefix in case you run several
...
@@ -43,7 +43,7 @@ $SPCookieName = $cookieNamePrefix.'_saml_sp';
...
@@ -43,7 +43,7 @@ $SPCookieName = $cookieNamePrefix.'_saml_sp';
// cookies
// cookies
$cookieSecurity
=
false
;
$cookieSecurity
=
false
;
// Number of days longterm cookies sh
all
be valid
// Number of days longterm cookies sh
ould
be valid
$cookieValidity
=
100
;
$cookieValidity
=
100
;
// 3. Features and extensions
// 3. Features and extensions
...
@@ -59,7 +59,7 @@ $useImprovedDropDownList = true;
...
@@ -59,7 +59,7 @@ $useImprovedDropDownList = true;
// metadata file defined below in $metadataFile
// metadata file defined below in $metadataFile
$useSAML2Metadata
=
false
;
$useSAML2Metadata
=
false
;
// If true parsed metadata sh
all
have precedence if there are entries defined
// If true parsed metadata sh
ould
have precedence if there are entries defined
// in metadata as well as the local IDProviders configuration file.
// in metadata as well as the local IDProviders configuration file.
// Requires $useSAML2Metadata to be true
// Requires $useSAML2Metadata to be true
$SAML2MetaOverLocalConf
=
false
;
$SAML2MetaOverLocalConf
=
false
;
...
@@ -98,7 +98,7 @@ $useKerberos = false;
...
@@ -98,7 +98,7 @@ $useKerberos = false;
$useReverseDNSLookup
=
false
;
$useReverseDNSLookup
=
false
;
// Whether the JavaScript required for embedding the WAYF
// Whether the JavaScript required for embedding the WAYF
// on a remote site sh
all
be generated or not
// on a remote site sh
ould
be generated or not
// Lowers security against phising!
// Lowers security against phising!
// If this value is set to true, any web page in the world can
// If this value is set to true, any web page in the world can
// (with some efforts) find out with a high probability from which
// (with some efforts) find out with a high probability from which
...
@@ -155,10 +155,10 @@ $cssURL = 'https://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']).'/
...
@@ -155,10 +155,10 @@ $cssURL = 'https://'.$_SERVER['SERVER_NAME'].dirname($_SERVER['SCRIPT_NAME']).'/
// Absolute URL to point to javascript directory
// Absolute URL to point to javascript directory
$javascriptURL
=
'https://'
.
$_SERVER
[
'SERVER_NAME'
]
.
dirname
(
$_SERVER
[
'SCRIPT_NAME'
])
.
'/js'
;
$javascriptURL
=
'https://'
.
$_SERVER
[
'SERVER_NAME'
]
.
dirname
(
$_SERVER
[
'SCRIPT_NAME'
])
.
'/js'
;
// Absolute URL to the logo that sh
all
be displayed in the Embedded WAYF
// Absolute URL to the logo that sh
ould
be displayed in the Embedded WAYF
$logoURL
=
$imageURL
.
'/switch-aai-transparent.png'
;
$logoURL
=
$imageURL
.
'/switch-aai-transparent.png'
;
// Absolute URL to the small logo that sh
all
be displayed in the
// Absolute URL to the small logo that sh
ould
be displayed in the
// embedded WAYF if dimensions must be small
// embedded WAYF if dimensions must be small
$smallLogoURL
=
$imageURL
.
'/switch-aai-transparent-small.png'
;
$smallLogoURL
=
$imageURL
.
'/switch-aai-transparent-small.png'
;
...
...
default-body.php
View file @
0e3639a3
...
@@ -17,7 +17,7 @@
...
@@ -17,7 +17,7 @@
<input
type=
"checkbox"
<?php
echo
$rememberSelectionChecked
?>
name=
"session"
id=
"rememberForSession"
value=
"true"
>
<input
type=
"checkbox"
<?php
echo
$rememberSelectionChecked
?>
name=
"session"
id=
"rememberForSession"
value=
"true"
>
<label
for=
"rememberForSession"
>
<?php
echo
getLocalString
(
'remember_selection'
)
?>
</label><br>
<label
for=
"rememberForSession"
>
<?php
echo
getLocalString
(
'remember_selection'
)
?>
</label><br>
<?php
if
(
$showPermanentSetting
)
:
?>
<?php
if
(
$showPermanentSetting
)
:
?>
<!-- Value permanent must be a number which is equivalent to the days the cookie sh
all
be valid -->
<!-- Value permanent must be a number which is equivalent to the days the cookie sh
ould
be valid -->
<input
type=
"checkbox"
name=
"permanent"
id=
"rememberPermanent"
value=
"100"
>
<input
type=
"checkbox"
name=
"permanent"
id=
"rememberPermanent"
value=
"100"
>
<label
for=
"rememberPermanent"
/>
<?php
echo
getLocalString
(
'permanently_remember_selection'
)
?>
</label>
<label
for=
"rememberPermanent"
/>
<?php
echo
getLocalString
(
'permanently_remember_selection'
)
?>
</label>
<?php
endif
?>
<?php
endif
?>
...
...
default-embedded-wayf.php
View file @
0e3639a3
...
@@ -27,7 +27,7 @@ var wayf_sp_entityID = "https://my-app.switch.ch/shibboleth";
...
@@ -27,7 +27,7 @@ var wayf_sp_entityID = "https://my-app.switch.ch/shibboleth";
// [Mandatory, if wayf_use_discovery_service = false]
// [Mandatory, if wayf_use_discovery_service = false]
var
wayf_sp_handlerURL
=
"https://my-app.switch.ch/Shibboleth.sso"
;
var
wayf_sp_handlerURL
=
"https://my-app.switch.ch/Shibboleth.sso"
;
// URL on this resource that the user sh
all
be returned to after authentication
// URL on this resource that the user sh
ould
be returned to after authentication
// Examples: "https://econf.switch.ch/aai/home", "https://olat.uzh.ch/my/courses"
// Examples: "https://econf.switch.ch/aai/home", "https://olat.uzh.ch/my/courses"
// [Mandatory]
// [Mandatory]
var
wayf_return_url
=
"https://my-app.switch.ch/aai/index.php?page=show_welcome"
;
var
wayf_return_url
=
"https://my-app.switch.ch/aai/index.php?page=show_welcome"
;
...
@@ -67,7 +67,7 @@ var wayf_show_remember_checkbox = true;
...
@@ -67,7 +67,7 @@ var wayf_show_remember_checkbox = true;
var
wayf_force_remember_for_session
=
false
;
var
wayf_force_remember_for_session
=
false
;
// Logo size
// Logo size
// Choose whether the small or large logo sh
all
be used
// Choose whether the small or large logo sh
ould
be used
// [Optional, default: true]
// [Optional, default: true]
var
wayf_use_small_logo
=
true
;
var
wayf_use_small_logo
=
true
;
...
@@ -110,14 +110,14 @@ var wayf_show_categories = true;
...
@@ -110,14 +110,14 @@ var wayf_show_categories = true;
// [Optional, commented out by default]
// [Optional, commented out by default]
// var wayf_most_used_idps = new Array("https://aai-logon.unibas.ch/idp/shibboleth", "https://aai.unil.ch/idp/shibboleth");
// var wayf_most_used_idps = new Array("https://aai-logon.unibas.ch/idp/shibboleth", "https://aai.unil.ch/idp/shibboleth");
// Categories of Identity Provider that sh
all
not be shown
// Categories of Identity Provider that sh
ould
not be shown
// Possible values are: <?php echo $types ?>, "all"
// Possible values are: <?php echo $types ?>, "all"
// Example of how to hide categories
// Example of how to hide categories
// var wayf_hide_categories = new Array("other", "library");
// var wayf_hide_categories = new Array("other", "library");
// [Optional, commented out by default]
// [Optional, commented out by default]
// var wayf_hide_categories = new Array();
// var wayf_hide_categories = new Array();
// EntityIDs of Identity Provider whose category is hidden but that sh
all
be shown anyway
// EntityIDs of Identity Provider whose category is hidden but that sh
ould
be shown anyway
// If this array is not empty, wayf_show_categories will be disabled because
// If this array is not empty, wayf_show_categories will be disabled because
// otherwise, unhidden IdPs may be displayed in the wrong category
// otherwise, unhidden IdPs may be displayed in the wrong category
// Example of how to unhide certain Identity Providers
// Example of how to unhide certain Identity Providers
...
@@ -125,7 +125,7 @@ var wayf_show_categories = true;
...
@@ -125,7 +125,7 @@ var wayf_show_categories = true;
// [Optional, commented out by default]
// [Optional, commented out by default]
// var wayf_unhide_idps = new Array();
// var wayf_unhide_idps = new Array();
// EntityIDs of Identity Provider that sh
all
not be shown at all
// EntityIDs of Identity Provider that sh
ould
not be shown at all
// Example of how to hide certain Identity Provider
// Example of how to hide certain Identity Provider
// var wayf_hide_idps = new Array("https://idp.unige.ch/idp/shibboleth", "https://lewotolo.switch.ch/idp/shibboleth");
// var wayf_hide_idps = new Array("https://idp.unige.ch/idp/shibboleth", "https://lewotolo.switch.ch/idp/shibboleth");
// [Optional, commented out by default]
// [Optional, commented out by default]
...
@@ -206,7 +206,7 @@ var wayf_show_categories = true;
...
@@ -206,7 +206,7 @@ var wayf_show_categories = true;
// }
// }
// EntityIDs, Names and SSO URLs of Identity Providers from other federations
// EntityIDs, Names and SSO URLs of Identity Providers from other federations
// that sh
all
be added to the drop-down list
// that sh
ould
be added to the drop-down list
// The IdPs will be displayed in the sequence they are defined
// The IdPs will be displayed in the sequence they are defined
// [Optional, commented out by default]
// [Optional, commented out by default]
// var wayf_additional_idps = [ ];
// var wayf_additional_idps = [ ];
...
...
default-settings.php
View file @
0e3639a3
...
@@ -12,7 +12,7 @@
...
@@ -12,7 +12,7 @@
</select>
</select>
<input
type=
"submit"
name=
"Select"
accesskey=
"s"
value=
"
<?php
echo
getLocalString
(
'save_button'
)
?>
"
>
<input
type=
"submit"
name=
"Select"
accesskey=
"s"
value=
"
<?php
echo
getLocalString
(
'save_button'
)
?>
"
>
</div>
</div>
<!-- Value permanent must be a number which is equivalent to the days the cookie sh
all
be valid -->
<!-- Value permanent must be a number which is equivalent to the days the cookie sh
ould
be valid -->
<input
name=
"permanent"
type=
"hidden"
value=
"100"
>
<input
name=
"permanent"
type=
"hidden"
value=
"100"
>
</div>
</div>
</form>
</form>
...
...
templates.php
View file @
0e3639a3
...
@@ -969,13 +969,13 @@ function getGETArgumentSeparator(url){
...
@@ -969,13 +969,13 @@ function getGETArgumentSeparator(url){
writeHTML('<div id="wayf_div" style="background:' + wayf_background_color + ';border-style: solid;border-color: ' + wayf_border_color + ';border-width: 1px;padding: 10px; height: ' + wayf_height + ';width: ' + wayf_width + ';text-align: left;overflow: hidden;">');
writeHTML('<div id="wayf_div" style="background:' + wayf_background_color + ';border-style: solid;border-color: ' + wayf_border_color + ';border-width: 1px;padding: 10px; height: ' + wayf_height + ';width: ' + wayf_width + ';text-align: left;overflow: hidden;">');
}
}
// Sh
all
we display the logo
// Sh
ould
we display the logo
if (wayf_hide_logo != true){
if (wayf_hide_logo != true){
// Write header of logo div
// Write header of logo div
writeHTML('<div id="wayf_logo_div" style="float: right;"><a href="$federationURL" target="_blank" style="border:0px">');
writeHTML('<div id="wayf_logo_div" style="float: right;"><a href="$federationURL" target="_blank" style="border:0px">');
// Which size of the logo sh
all
we display
// Which size of the logo sh
ould
we display
if (wayf_use_small_logo){
if (wayf_use_small_logo){
writeHTML('<img id="wayf_logo" src="{$smallLogoURL}" alt="Federation Logo" style="border:0px">')
writeHTML('<img id="wayf_logo" src="{$smallLogoURL}" alt="Federation Logo" style="border:0px">')
} else {
} else {
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment