)]}'
{"security-guide-rst/source/identity/authorization.rst":[{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"182f268374162b9ee84ce3d0d1b97e0055333d16","unresolved":false,"context_lines":[{"line_number":51,"context_line":"is additional administrative overhead and cost to issue certificates to"},{"line_number":52,"context_line":"users that may not be feasible in every deployment."},{"line_number":53,"context_line":""},{"line_number":54,"context_line":".. Note::"},{"line_number":55,"context_line":""},{"line_number":56,"context_line":"    We recommend that you use client authentication with TLS for the"},{"line_number":57,"context_line":"    authentication of services to the Identity service."}],"source_content_type":"text/x-rst","patch_set":4,"id":"3a50d1a3_06ac458a","line":54,"updated":"2015-07-23 19:22:51.000000000","message":"lowrecase note","commit_id":"54274fa3e967aa8f1fb95432c5900cbc99a0c2a4"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"f2f13736cea976ab91cc39d6aa85240fff3c1dd6","unresolved":false,"context_lines":[{"line_number":51,"context_line":"is additional administrative overhead and cost to issue certificates to"},{"line_number":52,"context_line":"users that may not be feasible in every deployment."},{"line_number":53,"context_line":""},{"line_number":54,"context_line":".. Note::"},{"line_number":55,"context_line":""},{"line_number":56,"context_line":"    We recommend that you use client authentication with TLS for the"},{"line_number":57,"context_line":"    authentication of services to the Identity service."}],"source_content_type":"text/x-rst","patch_set":4,"id":"3a50d1a3_11a556b4","line":54,"in_reply_to":"3a50d1a3_06ac458a","updated":"2015-07-23 23:17:45.000000000","message":"Done","commit_id":"54274fa3e967aa8f1fb95432c5900cbc99a0c2a4"}],"security-guide-rst/source/identity/checklist.rst":[{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"97855400e5e5cece6c0e3c2335e19f0eab9368cf","unresolved":false,"context_lines":[{"line_number":88,"context_line":"**Fail:** If value of parameter ``hash_algorithm`` under"},{"line_number":89,"context_line":"``[token]``\\ section is set to MD5."},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"Recommended in: :doc:`tokens` "},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Check-Identity-05: Is value of parameter ``max_request_body_size`` set to default (114688)?"},{"line_number":94,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3a50d1a3_80b2884a","line":91,"updated":"2015-07-23 15:57:36.000000000","message":"whitespace","commit_id":"45f5c99d5130dc3f03c76f390ad75d9eb8df431e"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"01e1d85110248a2a833fed3e1a0a9351e41102ee","unresolved":false,"context_lines":[{"line_number":88,"context_line":"**Fail:** If value of parameter ``hash_algorithm`` under"},{"line_number":89,"context_line":"``[token]``\\ section is set to MD5."},{"line_number":90,"context_line":""},{"line_number":91,"context_line":"Recommended in: :doc:`tokens` "},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Check-Identity-05: Is value of parameter ``max_request_body_size`` set to default (114688)?"},{"line_number":94,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3a50d1a3_34a97224","line":91,"in_reply_to":"3a50d1a3_80b2884a","updated":"2015-07-23 16:29:51.000000000","message":"Done","commit_id":"45f5c99d5130dc3f03c76f390ad75d9eb8df431e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"2c52d905d767865034430003bc8eda143f44be9a","unresolved":false,"context_lines":[{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"Check-Identity-01: Is user and group ownership of Identity configuration files set to keystone?"},{"line_number":6,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":7,"context_line":""},{"line_number":8,"context_line":"Configuration files contain critical parameters and information required"},{"line_number":9,"context_line":"for smooth functioning of the component. If an unprivileged user, either"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3a50d1a3_6b1e340d","line":6,"updated":"2015-07-23 19:02:52.000000000","message":"It looks like this is triggering the checks as being too long\n\nCheck-Identity-01: Is user/group ownership of Identity set to keystone?","commit_id":"4b0969aec25255d23b25585181e581b7a139dedf"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"396f77344808d140c9d8efe53269131a470280dc","unresolved":false,"context_lines":[{"line_number":3,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":4,"context_line":""},{"line_number":5,"context_line":"Check-Identity-01: Is user and group ownership of Identity configuration files set to keystone?"},{"line_number":6,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":7,"context_line":""},{"line_number":8,"context_line":"Configuration files contain critical parameters and information required"},{"line_number":9,"context_line":"for smooth functioning of the component. If an unprivileged user, either"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3a50d1a3_a6cb11a3","line":6,"in_reply_to":"3a50d1a3_6b1e340d","updated":"2015-07-23 19:16:25.000000000","message":"Changed it to:\n\nIs user/group ownership of config files set to keystone?","commit_id":"4b0969aec25255d23b25585181e581b7a139dedf"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"2c52d905d767865034430003bc8eda143f44be9a","unresolved":false,"context_lines":[{"line_number":91,"context_line":"Recommended in: :doc:`tokens`"},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Check-Identity-05: Is value of parameter ``max_request_body_size`` set to default (114688)?"},{"line_number":94,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"The parameter ``max_request_body_size`` defines the maximum body size"},{"line_number":97,"context_line":"per request in bytes. If the maximum size is not defined, the attacker"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3a50d1a3_2b14ace6","line":94,"updated":"2015-07-23 19:02:52.000000000","message":"This is too long as well, maybe:\n\nCheck-Identity-05: Is ``max_request_body_size`` value set to default?","commit_id":"4b0969aec25255d23b25585181e581b7a139dedf"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"396f77344808d140c9d8efe53269131a470280dc","unresolved":false,"context_lines":[{"line_number":91,"context_line":"Recommended in: :doc:`tokens`"},{"line_number":92,"context_line":""},{"line_number":93,"context_line":"Check-Identity-05: Is value of parameter ``max_request_body_size`` set to default (114688)?"},{"line_number":94,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"The parameter ``max_request_body_size`` defines the maximum body size"},{"line_number":97,"context_line":"per request in bytes. If the maximum size is not defined, the attacker"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3a50d1a3_e66359af","line":94,"in_reply_to":"3a50d1a3_2b14ace6","updated":"2015-07-23 19:16:25.000000000","message":"Changed it to:\n\nIs ``max_request_body_size`` set to default (114688)?","commit_id":"4b0969aec25255d23b25585181e581b7a139dedf"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"2c52d905d767865034430003bc8eda143f44be9a","unresolved":false,"context_lines":[{"line_number":107,"context_line":"**Fail:** If value of parameter ``max_request_body_size`` is not set."},{"line_number":108,"context_line":""},{"line_number":109,"context_line":"Check-Identity-06: is admin token disabled in :file:`/etc/keystone/keystone.conf`?"},{"line_number":110,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":111,"context_line":""},{"line_number":112,"context_line":"Admin token is generally used to bootstrap Identity. This token is the"},{"line_number":113,"context_line":"most valuable Identity asset, which could be used to gain cloud admin"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3a50d1a3_6be5d406","line":110,"updated":"2015-07-23 19:02:52.000000000","message":"And this one too:\n\nCheck-Identity-06: Disable admin token in :file:`/etc/keystone/keystone.conf`","commit_id":"4b0969aec25255d23b25585181e581b7a139dedf"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"396f77344808d140c9d8efe53269131a470280dc","unresolved":false,"context_lines":[{"line_number":107,"context_line":"**Fail:** If value of parameter ``max_request_body_size`` is not set."},{"line_number":108,"context_line":""},{"line_number":109,"context_line":"Check-Identity-06: is admin token disabled in :file:`/etc/keystone/keystone.conf`?"},{"line_number":110,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":111,"context_line":""},{"line_number":112,"context_line":"Admin token is generally used to bootstrap Identity. This token is the"},{"line_number":113,"context_line":"most valuable Identity asset, which could be used to gain cloud admin"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3a50d1a3_6670a972","line":110,"in_reply_to":"3a50d1a3_6be5d406","updated":"2015-07-23 19:16:25.000000000","message":"Change it to:\n\nDisable admin token in :file:`/etc/keystone/keystone.conf`","commit_id":"4b0969aec25255d23b25585181e581b7a139dedf"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"182f268374162b9ee84ce3d0d1b97e0055333d16","unresolved":false,"context_lines":[{"line_number":15,"context_line":""},{"line_number":16,"context_line":"Run the following commands:"},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"::"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/keystone.conf | egrep \"keystone keystone\""},{"line_number":21,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/keystone-paste.ini | egrep \"keystone keystone\""}],"source_content_type":"text/x-rst","patch_set":4,"id":"3a50d1a3_26a701a8","line":18,"updated":"2015-07-23 19:22:51.000000000","message":"..code-block: console","commit_id":"54274fa3e967aa8f1fb95432c5900cbc99a0c2a4"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"f2f13736cea976ab91cc39d6aa85240fff3c1dd6","unresolved":false,"context_lines":[{"line_number":15,"context_line":""},{"line_number":16,"context_line":"Run the following commands:"},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"::"},{"line_number":19,"context_line":""},{"line_number":20,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/keystone.conf | egrep \"keystone keystone\""},{"line_number":21,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/keystone-paste.ini | egrep \"keystone keystone\""}],"source_content_type":"text/x-rst","patch_set":4,"id":"3a50d1a3_d1b36ee8","line":18,"in_reply_to":"3a50d1a3_26a701a8","updated":"2015-07-23 23:17:45.000000000","message":"Done","commit_id":"54274fa3e967aa8f1fb95432c5900cbc99a0c2a4"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"182f268374162b9ee84ce3d0d1b97e0055333d16","unresolved":false,"context_lines":[{"line_number":31,"context_line":"**Fail:** If the above commands does not return any output as the user"},{"line_number":32,"context_line":"or group ownership might have set to any user other than keystone."},{"line_number":33,"context_line":""},{"line_number":34,"context_line":"Recommended in: :ref:`internally-implemented-authentication-methods`"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"Check-Identity-02: Are strict permissions set for Identity configuration files?"},{"line_number":37,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":4,"id":"3a50d1a3_06c3e538","line":34,"updated":"2015-07-23 19:22:51.000000000","message":"\".\" at end of line","commit_id":"54274fa3e967aa8f1fb95432c5900cbc99a0c2a4"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"f2f13736cea976ab91cc39d6aa85240fff3c1dd6","unresolved":false,"context_lines":[{"line_number":31,"context_line":"**Fail:** If the above commands does not return any output as the user"},{"line_number":32,"context_line":"or group ownership might have set to any user other than keystone."},{"line_number":33,"context_line":""},{"line_number":34,"context_line":"Recommended in: :ref:`internally-implemented-authentication-methods`"},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"Check-Identity-02: Are strict permissions set for Identity configuration files?"},{"line_number":37,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"}],"source_content_type":"text/x-rst","patch_set":4,"id":"3a50d1a3_31c3b23a","line":34,"in_reply_to":"3a50d1a3_06c3e538","updated":"2015-07-23 23:17:45.000000000","message":"Done","commit_id":"54274fa3e967aa8f1fb95432c5900cbc99a0c2a4"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"182f268374162b9ee84ce3d0d1b97e0055333d16","unresolved":false,"context_lines":[{"line_number":41,"context_line":""},{"line_number":42,"context_line":"Run the following commands:"},{"line_number":43,"context_line":""},{"line_number":44,"context_line":"::"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"    $ stat -L -c \"%a\" /etc/keystone/keystone.conf"},{"line_number":47,"context_line":"    $ stat -L -c \"%a\" /etc/keystone/keystone-paste.ini"}],"source_content_type":"text/x-rst","patch_set":4,"id":"3a50d1a3_a6b1d1e1","line":44,"updated":"2015-07-23 19:22:51.000000000","message":"Lieke above","commit_id":"54274fa3e967aa8f1fb95432c5900cbc99a0c2a4"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"f2f13736cea976ab91cc39d6aa85240fff3c1dd6","unresolved":false,"context_lines":[{"line_number":41,"context_line":""},{"line_number":42,"context_line":"Run the following commands:"},{"line_number":43,"context_line":""},{"line_number":44,"context_line":"::"},{"line_number":45,"context_line":""},{"line_number":46,"context_line":"    $ stat -L -c \"%a\" /etc/keystone/keystone.conf"},{"line_number":47,"context_line":"    $ stat -L -c \"%a\" /etc/keystone/keystone-paste.ini"}],"source_content_type":"text/x-rst","patch_set":4,"id":"3a50d1a3_51c0be2a","line":44,"in_reply_to":"3a50d1a3_a6b1d1e1","updated":"2015-07-23 23:17:45.000000000","message":"Done","commit_id":"54274fa3e967aa8f1fb95432c5900cbc99a0c2a4"}],"security-guide-rst/source/identity/federated-keystone.rst":[{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"97855400e5e5cece6c0e3c2335e19f0eab9368cf","unresolved":false,"context_lines":[{"line_number":151,"context_line":"    -A INPUT -j REJECT --reject-with icmp-host-prohibited"},{"line_number":152,"context_line":""},{"line_number":153,"context_line":"Copy the :file:`httpd/wsgi-keystone.conf` file to the appropriate location"},{"line_number":154,"context_line":"for your Apache server, for example, "},{"line_number":155,"context_line":":file:`/etc/httpd/conf.d/wsgi-keystone.conf` file."},{"line_number":156,"context_line":""},{"line_number":157,"context_line":"Create the directory ``/var/www/cgi-bin/keystone/``. Then link the files"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3a50d1a3_c0f17002","line":154,"updated":"2015-07-23 15:57:36.000000000","message":"whitespace","commit_id":"45f5c99d5130dc3f03c76f390ad75d9eb8df431e"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"01e1d85110248a2a833fed3e1a0a9351e41102ee","unresolved":false,"context_lines":[{"line_number":151,"context_line":"    -A INPUT -j REJECT --reject-with icmp-host-prohibited"},{"line_number":152,"context_line":""},{"line_number":153,"context_line":"Copy the :file:`httpd/wsgi-keystone.conf` file to the appropriate location"},{"line_number":154,"context_line":"for your Apache server, for example, "},{"line_number":155,"context_line":":file:`/etc/httpd/conf.d/wsgi-keystone.conf` file."},{"line_number":156,"context_line":""},{"line_number":157,"context_line":"Create the directory ``/var/www/cgi-bin/keystone/``. Then link the files"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3a50d1a3_d4b7ee82","line":154,"in_reply_to":"3a50d1a3_c0f17002","updated":"2015-07-23 16:29:51.000000000","message":"Done","commit_id":"45f5c99d5130dc3f03c76f390ad75d9eb8df431e"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"182f268374162b9ee84ce3d0d1b97e0055333d16","unresolved":false,"context_lines":[{"line_number":160,"context_line":"For a distribution appropriate place, it should probably be copied to"},{"line_number":161,"context_line":":file:`/usr/share/openstack/keystone/httpd/keystone.py`."},{"line_number":162,"context_line":""},{"line_number":163,"context_line":".. Note::"},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"    This path is Ubuntu-specific. For other distributions, replace with"},{"line_number":166,"context_line":"    appropriate path."}],"source_content_type":"text/x-rst","patch_set":4,"id":"3a50d1a3_a6e8f1b3","line":163,"updated":"2015-07-23 19:22:51.000000000","message":"lowercase note","commit_id":"54274fa3e967aa8f1fb95432c5900cbc99a0c2a4"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"f2f13736cea976ab91cc39d6aa85240fff3c1dd6","unresolved":false,"context_lines":[{"line_number":160,"context_line":"For a distribution appropriate place, it should probably be copied to"},{"line_number":161,"context_line":":file:`/usr/share/openstack/keystone/httpd/keystone.py`."},{"line_number":162,"context_line":""},{"line_number":163,"context_line":".. Note::"},{"line_number":164,"context_line":""},{"line_number":165,"context_line":"    This path is Ubuntu-specific. For other distributions, replace with"},{"line_number":166,"context_line":"    appropriate path."}],"source_content_type":"text/x-rst","patch_set":4,"id":"3a50d1a3_f129caf3","line":163,"in_reply_to":"3a50d1a3_a6e8f1b3","updated":"2015-07-23 23:17:45.000000000","message":"Done","commit_id":"54274fa3e967aa8f1fb95432c5900cbc99a0c2a4"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"182f268374162b9ee84ce3d0d1b97e0055333d16","unresolved":false,"context_lines":[{"line_number":236,"context_line":"    Require valid-user"},{"line_number":237,"context_line":"    \u003c/LocationMatch\u003e"},{"line_number":238,"context_line":""},{"line_number":239,"context_line":".. Note::"},{"line_number":240,"context_line":""},{"line_number":241,"context_line":"    The option ``saml2`` may be different in your deployment, but do not"},{"line_number":242,"context_line":"    use a wildcard value. Otherwise every Federated protocol will be"}],"source_content_type":"text/x-rst","patch_set":4,"id":"3a50d1a3_26d5c1e3","line":239,"updated":"2015-07-23 19:22:51.000000000","message":"lowercase","commit_id":"54274fa3e967aa8f1fb95432c5900cbc99a0c2a4"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"f2f13736cea976ab91cc39d6aa85240fff3c1dd6","unresolved":false,"context_lines":[{"line_number":236,"context_line":"    Require valid-user"},{"line_number":237,"context_line":"    \u003c/LocationMatch\u003e"},{"line_number":238,"context_line":""},{"line_number":239,"context_line":".. Note::"},{"line_number":240,"context_line":""},{"line_number":241,"context_line":"    The option ``saml2`` may be different in your deployment, but do not"},{"line_number":242,"context_line":"    use a wildcard value. Otherwise every Federated protocol will be"}],"source_content_type":"text/x-rst","patch_set":4,"id":"3a50d1a3_b1334262","line":239,"in_reply_to":"3a50d1a3_26d5c1e3","updated":"2015-07-23 23:17:45.000000000","message":"Done","commit_id":"54274fa3e967aa8f1fb95432c5900cbc99a0c2a4"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"182f268374162b9ee84ce3d0d1b97e0055333d16","unresolved":false,"context_lines":[{"line_number":264,"context_line":""},{"line_number":265,"context_line":"    # service apache2 restart"},{"line_number":266,"context_line":""},{"line_number":267,"context_line":".. Note::"},{"line_number":268,"context_line":""},{"line_number":269,"context_line":"    The ``service apache2 restart`` command is Ubuntu-specific. For"},{"line_number":270,"context_line":"    other distributions, replace with appropriate command."}],"source_content_type":"text/x-rst","patch_set":4,"id":"3a50d1a3_c6065d85","line":267,"updated":"2015-07-23 19:22:51.000000000","message":"lowercase","commit_id":"54274fa3e967aa8f1fb95432c5900cbc99a0c2a4"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"f2f13736cea976ab91cc39d6aa85240fff3c1dd6","unresolved":false,"context_lines":[{"line_number":264,"context_line":""},{"line_number":265,"context_line":"    # service apache2 restart"},{"line_number":266,"context_line":""},{"line_number":267,"context_line":".. Note::"},{"line_number":268,"context_line":""},{"line_number":269,"context_line":"    The ``service apache2 restart`` command is Ubuntu-specific. For"},{"line_number":270,"context_line":"    other distributions, replace with appropriate command."}],"source_content_type":"text/x-rst","patch_set":4,"id":"3a50d1a3_314892cc","line":267,"in_reply_to":"3a50d1a3_c6065d85","updated":"2015-07-23 23:17:45.000000000","message":"Done","commit_id":"54274fa3e967aa8f1fb95432c5900cbc99a0c2a4"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"182f268374162b9ee84ce3d0d1b97e0055333d16","unresolved":false,"context_lines":[{"line_number":305,"context_line":""},{"line_number":306,"context_line":"Restart the Shibboleth daemon:"},{"line_number":307,"context_line":""},{"line_number":308,"context_line":"::"},{"line_number":309,"context_line":""},{"line_number":310,"context_line":"    # service shibd restart"},{"line_number":311,"context_line":"    # service apache2 restart"}],"source_content_type":"text/x-rst","patch_set":4,"id":"3a50d1a3_46fb2d79","line":308,"updated":"2015-07-23 19:22:51.000000000","message":"..code-block: console, also the others in this file","commit_id":"54274fa3e967aa8f1fb95432c5900cbc99a0c2a4"},{"author":{"_account_id":10281,"name":"Priti Desai","email":"pdesai@us.ibm.com","username":"priti_desai"},"change_message_id":"f2f13736cea976ab91cc39d6aa85240fff3c1dd6","unresolved":false,"context_lines":[{"line_number":305,"context_line":""},{"line_number":306,"context_line":"Restart the Shibboleth daemon:"},{"line_number":307,"context_line":""},{"line_number":308,"context_line":"::"},{"line_number":309,"context_line":""},{"line_number":310,"context_line":"    # service shibd restart"},{"line_number":311,"context_line":"    # service apache2 restart"}],"source_content_type":"text/x-rst","patch_set":4,"id":"3a50d1a3_314df2c4","line":308,"in_reply_to":"3a50d1a3_46fb2d79","updated":"2015-07-23 23:17:45.000000000","message":"Done","commit_id":"54274fa3e967aa8f1fb95432c5900cbc99a0c2a4"}]}