shibd(8) [debian man page]

SHIBD(8)							    Shibboleth								  SHIBD(8)

NAME

       shibd - Shibboleth daemon

SYNOPSIS

       shibd [-tfFvh] [-c config] [-d prefix] [-p pidfile] [-w seconds] [-x catalog]

DESCRIPTION

       shibd is the Shibboleth daemon.	It handles attribute requests from the Apache Shibboleth module and should run in conjunction with it.

OPTIONS

       shibd takes the following command-line options.

       -c pathname
	   Specifies the pathname of shibd's configuration file. Defaults to /etc/shibboleth/shibboleth2.xml or the value of the SHIBSP_CONFIG
	   environment variable, if it is set.

       -d pathname
	   Installation prefix. Defaults to /usr.

       -F  Stay in the foreground.  Normally, shibd backgrounds itself after starting up.

       -f  Force removal of listener socket.

       -h  Prints out a brief summary of the shibboleth options.

       -p pathname
	   Specifies the pathname to use to write out the shibboleth PID file.

       -w seconds
	   Seconds to wait for the background shibd to start up before the foreground process returns.	If not set, the default value is three
	   seconds.

       -t  Validates the general correctness of the configuration. Not all problems can be detected this way, but the chance of successful startup
	   is high if the checking process does not log any errors.

       -v  Prints out the version string.

       -x pathname
	   Specifies the XML schema catalog to use. Defaults to /usr/share/xml/shibboleth/catalog.xml.

AUTHORS

       shibd is part of the Internet 2 Shibboleth project written by Scott Cantor <cantor.2@osu.edu>.

COPYRIGHT AND LICENSE

       Copyright 2005, 2006 Internet2/MACE

       This program is free software; you may redistribute it and/or modify it under the terms of the Apache 2.0 License
       <http://www.apache.org/licenses>.

2.4.3								    2012-02-16								  SHIBD(8)

SHIB-KEYGEN(8)							    Shibboleth							    SHIB-KEYGEN(8)

NAME

       shib-keygen - Generate a key pair for a Shibboleth SP

SYNOPSIS

       shib-keygen [-bf] [-e entity-id] [-g group]
	   [-h hostname] [-o output-dir] [-u user] [-y years]

DESCRIPTION

       Generate a self-signed X.509 certificate for a Shibboleth SP.  By default, the certificate will be for the local fully-qualified (as
       returned by "hostname --fqdn") hostname.  An entity ID can be specified with the -e flag.  The openssl command-line client is used to
       generate the key pair.  By default, the public certificate will be created in /etc/shibboleth/sp-cert.pem and the private key in
       /etc/shibboleth/sp-key.pem.

OPTIONS

       -b  Suppress all standard error output when creating the certificate.  This option is normally only used by the package build.

       -e entity-id
	   Add entity-id (which should be a URI) as an alternative name for the certificate.

       -f  Remove /etc/shibboleth/sp-cert.pem and /etc/shibboleth/sp-key.pem before generating a new certificate.  Without this option, if those
	   files already exist, shib-keygen prints an error and exits rather than overwriting them.

       -g group
	   After generating the key and certificate, change the group ownership of the key file to this group.	By default, the group used is
	   "_shibd".

       -h hostname
	   Specify the fully-qualified domain name for which to generate a certificate.  If this option isn't given, the hostname defaults to the
	   result of "hostname --fqdn".

       -o output-dir
	   Store sp-cert.pem and sp-key.pem in the directory output-dir rather than the default of /etc/shibboleth.

       -u user
	   After generating the key and certificate, change the ownership of the key file to this user.  This is used to allow the key to be read
	   by a non-root user so that shibd can be run as a non-root user.  By default, the key is owned by "_shibd".

       -y years
	   The number of years for which the certificate should be valid.  The default expiration time is ten years into the future.

FILES

       /etc/shibboleth/sp-cert.cnf
	   The OpenSSL configuration file used for generating the self-signed certificate.  This configuration file is generated when the script
	   is run and deleted afterwards.

       /etc/shibboelth/sp-cert.pem
	   The default location of the public certificate created by this script.

       /etc/shibboleth/sp-key.pem
	   The default location of the private key for the certificate created by this script.

       These three files are stored in the directory given with -o instead, if that option is given.

AUTHOR

       This manual page was written by Russ Allbery for Debian GNU/Linux.

COPYRIGHT

       Copyright 2008, 2011 Russ Allbery.  This manual page is hereby placed into the public domain by its author.

2.4.3								    2012-02-16							    SHIB-KEYGEN(8)