When you have successfully built and installed the Shibboleth SP, you
will need to configure things to work against our test environment.
We have some template files and a script in AFS to generate the needed
config files from the templates: cd to shibboleth's etc directory
($prefix/etc/shibboleth), and copy in the following files from
/mit/webauth/shibboleth/config/shibboleth-sp/ (or just copy all
files from the directory):

  AAP.xml.in
  shibboleth.xml.in
  MIT-test-metadata.xml
  protectnetwork-metadata.xml
  gen-shib.sh

On Solaris, also copy:

  shibd.in
  shibd-wrapper.in

Then run the gen-shib.sh script:

  sh ./gen-shib.sh

and answer its prompts, which I hope will be clear.  Remember that
the certificate it wants should be enabled for client as well as
server use.

The $prefix/etc/shibboleth directory will contain apache.config,
apache2.config, and apache22.config, which contain needed and example
directives for Apache 1.3, Apache 2.0, and Apache 2.2, respectively;
copy and/or include the appropriate file in your Apache config, and
customize as needed.  The directory also contains a shibd init script;
shibd is a daemon that must be running, so should be started at boot
time.

You will probably also want to customize the error pages and support
contact information listed in the Errors eleement in
$prefix/etc/shibboleth/shibboleth.xml (search for "You should customize
these pages!"), e.g.:

  <Errors session="/usr/local/shibboleth/etc/shibboleth/sessionError.html"
    metadata="/usr/local/shibboleth/etc/shibboleth/metadataError.html"
    rm="/usr/local/shibboleth/etc/shibboleth/rmError.html"
    access="/usr/local/shibboleth/etc/shibboleth/accessError.html"
    ssl="/usr/local/shibboleth/etc/shibboleth/sslError.html"
    supportContact="root@localhost"
    logoLocation="/shibboleth-sp/logo.jpg"
    styleSheet="/shibboleth-sp/main.css"/>