From bcfb9818102f7f8556a5aea2a80cd27167d90fab Mon Sep 17 00:00:00 2001
From: fpeters <>
Date: Wed, 11 Aug 2004 17:31:41 +0000
Subject: [PATCH] moved part of the documentation from INSTALL to
doc/manual.txt.
---
INSTALL | 45 -----------------------------
doc/default.css | 12 +++++++-
doc/manual.txt | 55 +++++++++++++++++++++++++++++++++---
src/federation_termination.c | 9 ++++++
src/single_sign_on.c | 1 +
5 files changed, 72 insertions(+), 50 deletions(-)
diff --git a/INSTALL b/INSTALL
index 59c350a..d8dbd5f 100644
--- a/INSTALL
+++ b/INSTALL
@@ -52,51 +52,6 @@ places for CGI. You can copy them (they are the executables in src/) in your
favourite place. Note that if you want to use HTTP authentication;
``singleSignOn`` should be installed in a different directory.
-Apache Configuration
-====================
-
-Imagine ``soapEndPoint`` has been installed in ``/usr/lib/cgi-bin/idpc/`` and
-``singleSignOn`` in ``/usr/lib/cgi-bin/idpc/auth/``. Apache configuration will
-look as follow::
-
- ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
-
-
- AllowOverride None
- Options ExecCGI -MultiViews +SymLinksIfOwnerMatch
- Order allow,deny
- Allow from all
-
-
-
- AuthType Basic
- AuthName "IdPc"
- AuthUserFile /etc/apache/passwd
- Require valid-user
-
-
-
-Database configuration
-======================
-
-PostgreSQL
-----------
-
-.. include:: create-db.sql
-
-Be sure it is possible to connect using TCP/IP to the database; somethink like
-the next line will do (you may have to disable ``ident`` authentication first)::
-
- # TYPE DATABASE USER IP-ADDRESS IP-MASK METHOD
- host idpc idpc 127.0.0.1 255.255.255.255 password
-
-
-MySQL
------
-
-.. note:: Support not yet implemented.
-
-
.. _libxml2: http://www.xmlsoft.org/
.. _neon: http://www.webdav.org/neon/
diff --git a/doc/default.css b/doc/default.css
index 7ce1b96..30cb5c3 100644
--- a/doc/default.css
+++ b/doc/default.css
@@ -57,9 +57,18 @@ dd {
}
table.table {
- margin-top: 1em;
+ margin: 1ex 0;
+ border-spacing: 0px;
}
+
+table.table th {
+ padding: 0px 1ex;
+ background: #eef;
+ font-weight: normal;
+}
+
+
table.table td {
padding: 0 0.5ex;
}
@@ -68,6 +77,7 @@ div.note, div.warning {
padding: 0.3ex;
padding-left: 60px;
min-height: 50px;
+ margin: 1ex 1em;
}
div.note {
diff --git a/doc/manual.txt b/doc/manual.txt
index 1bcfba7..4efa649 100644
--- a/doc/manual.txt
+++ b/doc/manual.txt
@@ -19,12 +19,13 @@ of several CGI C programs.
It supports the following IDFF-1.2 profiles:
-- Single Sign-On and Federation
+- Single Sign-On and Federation (Liberty Artifact and Liberty-Enabled Client
+ and Proxy)
- Single Logout (SOAP, initiated by SP)
-- Federation Termination
-- Liberty-Enabled Client and Proxy
+- Federation Termination (SOAP, initiated by SP)
-It will implement other core profiles in the future.
+It will complete existing profiles and implement other core profiles in the
+future.
IdPC can authenticate users through several means including HTTP authentication
and client certificates.
@@ -141,6 +142,52 @@ Additionally if you have set OCSP options in the configuration file, a OCSP
connection will be made to check certificate validity.
+Apache Configuration
+====================
+
+Imagine ``soapEndPoint`` has been installed in ``/usr/lib/cgi-bin/idpc/`` and
+``singleSignOn`` in ``/usr/lib/cgi-bin/idpc/auth/``. Apache configuration will
+look as follow::
+
+ ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
+
+
+ AllowOverride None
+ Options ExecCGI -MultiViews +SymLinksIfOwnerMatch
+ Order allow,deny
+ Allow from all
+
+
+
+ AuthType Basic
+ AuthName "IdPc"
+ AuthUserFile /etc/apache/passwd
+ Require valid-user
+
+
+
+Database configuration
+======================
+
+PostgreSQL
+----------
+
+.. include:: ../create-db.sql
+
+Be sure it is possible to connect using TCP/IP to the database; somethink like
+the next line will do (you may have to disable ``ident`` authentication first)::
+
+ # TYPE DATABASE USER IP-ADDRESS IP-MASK METHOD
+ host idpc idpc 127.0.0.1 255.255.255.255 password
+
+
+MySQL
+-----
+
+.. note:: Support not yet implemented.
+
+
+
Copyright and License
=====================
diff --git a/src/federation_termination.c b/src/federation_termination.c
index dc16277..4709e00 100644
--- a/src/federation_termination.c
+++ b/src/federation_termination.c
@@ -63,6 +63,15 @@ int federation_termination_http(LassoFederationTermination *termination)
return error_page("save_profile_dumps failed");
}
+ rc = lasso_federation_termination_build_notification_msg(termination);
+ if (rc) {
+ return error_page("build notification msg");
+ }
+
+ /* XXX: redirect to SP return URL */
+ /* missing lasso support; impossible to get return URL */
+ printf("Location: %s\n\nRedirected", "XXX");
+
return 0;
}
diff --git a/src/single_sign_on.c b/src/single_sign_on.c
index 2e5326f..bbd50e1 100644
--- a/src/single_sign_on.c
+++ b/src/single_sign_on.c
@@ -293,6 +293,7 @@ int single_sign_on()
} else {
/* POST profile (lassoLoginProtocolProfileBrwsPost) */
/* XXX not supported by Lasso yet */
+ rc = 1;
}
lasso_login_destroy(login);