From 2bd6edbcd9d3ad976cad9f59181b9ca09058d880 Mon Sep 17 00:00:00 2001 From: Tom Scavo Date: Mon, 19 Dec 2016 17:42:24 -0500 Subject: [PATCH 1/5] Update README.md --- README.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/README.md b/README.md index 3c3d325..79b9b1a 100644 --- a/README.md +++ b/README.md @@ -64,6 +64,8 @@ md_tools.sh ## Overview +### ``check_idp_error_urls.sh`` + Given a list of entityIDs and a metadata source, bash script ``check_idp_error_urls.sh`` probes each entity and determines which of the entityIDs correspond to SAML IdP deployments. For each such deployment, the script determines whether it has an ``errorURL`` in metadata and whether or not that URL is resolvable. For example: ```Shell @@ -84,6 +86,15 @@ See the inline help file for details: $ $BIN_DIR/check_idp_error_urls.sh -h ``` +### ``probe_saml_idp.sh`` + +```Shell +$ id=https://idp.incommonfederation.org/idp/shibboleth +$ $BIN_DIR/probe_saml_idp.sh $id +0 redirects:2;response:200;dns:0.000;tcp:0.031;ssl:0.077;total:1.388 https://idp.incommonfederation.org/idp/profile/SAML2/Redirect/SSO urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect https://idp.incommonfederation.org/idp/shibboleth https://incommon.org +0 redirects:2;response:200;dns:0.000;tcp:0.069;ssl:0.125;total:0.807 https://idp.incommonfederation.org/idp/profile/SAML2/POST/SSO urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST https://idp.incommonfederation.org/idp/shibboleth https://incommon.org +``` + ## Compatibility The bash scripts are compatible with both GNU/Linux and Mac OS. The XSLT scripts are written in XSLT 1.0. From 19228dc8fb46cfecb27f9751375fa37caee9b835 Mon Sep 17 00:00:00 2001 From: Tom Scavo Date: Mon, 19 Dec 2016 19:21:31 -0500 Subject: [PATCH 2/5] update example in overview section --- README.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 79b9b1a..4de6790 100644 --- a/README.md +++ b/README.md @@ -90,9 +90,10 @@ $ $BIN_DIR/check_idp_error_urls.sh -h ```Shell $ id=https://idp.incommonfederation.org/idp/shibboleth -$ $BIN_DIR/probe_saml_idp.sh $id -0 redirects:2;response:200;dns:0.000;tcp:0.031;ssl:0.077;total:1.388 https://idp.incommonfederation.org/idp/profile/SAML2/Redirect/SSO urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect https://idp.incommonfederation.org/idp/shibboleth https://incommon.org -0 redirects:2;response:200;dns:0.000;tcp:0.069;ssl:0.125;total:0.807 https://idp.incommonfederation.org/idp/profile/SAML2/POST/SSO urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST https://idp.incommonfederation.org/idp/shibboleth https://incommon.org +$ $BIN_DIR/probe_saml_idp.sh -a $id +0 redirects:2;response:200;dns:0.000;tcp:0.062;ssl:0.141;total:1.047 https://idp.incommonfederation.org/idp/profile/SAML2/Redirect/SSO urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect https://idp.incommonfederation.org/idp/shibboleth https://incommon.org +0 redirects:2;response:200;dns:0.000;tcp:0.062;ssl:0.149;total:1.140 https://idp.incommonfederation.org/idp/profile/SAML2/POST/SSO urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST https://idp.incommonfederation.org/idp/shibboleth https://incommon.org +0 redirects:2;response:200;dns:0.000;tcp:0.062;ssl:0.142;total:1.070 https://idp.incommonfederation.org/idp/profile/Shibboleth/SSO urn:mace:shibboleth:1.0:profiles:AuthnRequest https://idp.incommonfederation.org/idp/shibboleth https://incommon.org ``` ## Compatibility From c7bcf971ab51b3166a9344af8a83fbf4564750bf Mon Sep 17 00:00:00 2001 From: Tom Scavo Date: Mon, 19 Dec 2016 19:29:47 -0500 Subject: [PATCH 3/5] Update the output of the install script --- README.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/README.md b/README.md index 4de6790..05c969c 100644 --- a/README.md +++ b/README.md @@ -25,14 +25,22 @@ A target directory will be created if one doesn't already exist. The following f ```Shell $ ls -1 $BIN_DIR cget.sh +check_idp_error_urls.sh +list_local_idp_error_urls.sh +probe_saml_idp.sh $ ls -1 $LIB_DIR command_paths.sh compatible_date.sh compatible_mktemp.sh +config_tools.sh +extract_IdP_entityIDs.xsl +extract_IdP_names.xsl +extract_InCommon_IdP_entityIDs.xsl extract_entity.xsl http_tools.sh md_tools.sh +saml_tools.sh ``` Next download the SAML IdP Probe project source, change directory to the source directory, and install the source on top of the previous installation: From 2450273069c97fd1dc0c8e67fb8b91f0465e5ebe Mon Sep 17 00:00:00 2001 From: Tom Scavo Date: Mon, 19 Dec 2016 19:41:43 -0500 Subject: [PATCH 4/5] Update the output of the install script --- README.md | 12 ++++-------- 1 file changed, 4 insertions(+), 8 deletions(-) diff --git a/README.md b/README.md index 05c969c..88bee2b 100644 --- a/README.md +++ b/README.md @@ -25,18 +25,12 @@ A target directory will be created if one doesn't already exist. The following f ```Shell $ ls -1 $BIN_DIR cget.sh -check_idp_error_urls.sh -list_local_idp_error_urls.sh -probe_saml_idp.sh $ ls -1 $LIB_DIR command_paths.sh compatible_date.sh compatible_mktemp.sh config_tools.sh -extract_IdP_entityIDs.xsl -extract_IdP_names.xsl -extract_InCommon_IdP_entityIDs.xsl extract_entity.xsl http_tools.sh md_tools.sh @@ -49,25 +43,27 @@ Next download the SAML IdP Probe project source, change directory to the source $ ./install.sh $BIN_DIR $LIB_DIR ``` -The following files will be installed: +Altogether the following files will be installed: ```Shell $ ls -1 $BIN_DIR cget.sh check_idp_error_urls.sh list_local_idp_error_urls.sh - +probe_saml_idp.sh $ ls -1 $LIB_DIR command_paths.sh compatible_date.sh compatible_mktemp.sh +config_tools.sh extract_IdP_entityIDs.xsl extract_IdP_names.xsl extract_InCommon_IdP_entityIDs.xsl extract_entity.xsl http_tools.sh md_tools.sh +saml_tools.sh ``` ## Overview From 85cfb390a7de312b4642702c54b7fd59a5ad5c51 Mon Sep 17 00:00:00 2001 From: Tom Scavo Date: Mon, 19 Dec 2016 19:50:10 -0500 Subject: [PATCH 5/5] Document probe_saml_idp.sh --- README.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/README.md b/README.md index 88bee2b..3d80e0d 100644 --- a/README.md +++ b/README.md @@ -92,6 +92,8 @@ $ $BIN_DIR/check_idp_error_urls.sh -h ### ``probe_saml_idp.sh`` +Given a single IdP entityID, the ``probe_saml_idp.sh`` script probes all browser-facing SSO endpoints in IdP metadata. + ```Shell $ id=https://idp.incommonfederation.org/idp/shibboleth $ $BIN_DIR/probe_saml_idp.sh -a $id @@ -100,6 +102,14 @@ $ $BIN_DIR/probe_saml_idp.sh -a $id 0 redirects:2;response:200;dns:0.000;tcp:0.062;ssl:0.142;total:1.070 https://idp.incommonfederation.org/idp/profile/Shibboleth/SSO urn:mace:shibboleth:1.0:profiles:AuthnRequest https://idp.incommonfederation.org/idp/shibboleth https://incommon.org ``` +The ``-a`` option probes **all** browser-facing endpoints, including SAML1 endpoints. + +See the inline help file for details: + +```Shell +$ $BIN_DIR/probe_saml_idp.sh -h +``` + ## Compatibility The bash scripts are compatible with both GNU/Linux and Mac OS. The XSLT scripts are written in XSLT 1.0.