...
/O=Grid/OU=GlobusTest/OU=simpleCA-gatekeeper.rcac.purdue.edu/OU=rcac.purdue.edu/CN=VMware
iii) Start container
4. ### LOG statement settings ###
...
5) A validates G via trusting G' (G' - CA cert - is in IdP's meta file, IQ-meta.xml in case of me)
7. Before running ShibEchoService, Configure in the shibboleth-id side (shadow120.punch.purdue.edu)
...
==> shibecho -s https://gatekeeper.rcac.purdue.edu:8443/wsrf/services/ShibEchoService
##################################################
# SAML-TOOLS #
##################################################
1. Install gridshib-saml-tools-0_1_3.tar.gz at the client host
==> download at the http://gridshib.globus.org/download.html
2. export GRIDSHIB_HOME=/opt/gridshib-saml-tools-0_1_3
...
keyLocation=file:///home/wlee/.globus/userkey.pem
4. Change mode to 744 for gridshib-saml-issuer, java (/opt/gridshib-saml-tools-0_1_3/)
...
$ gridshib-saml-issuer --user user1 --outfile /tmp/x509up_u1000 --authn --authnMethod urn:oasis:names:tc:SAML:1.0:am:password --address 128.210.189.246
6. Checking proxy
$openssl x509 -text -noout -in /tmp/x509up_u1000
...
<saml:AttributeValue>US</saml:AttributeValue>
4. Run SecureCounterService
...