Putting things in consistent places is useful.
- apache config: /etc/httpd (default logs to /var/log/httpd)
- shibboleth install: via rpm (default logs to /var/log/shibboleth)
- X.509 certificates and related keys: /etc/httpd/conf/ssl.* (per request from ops)
- URL rewriting: proxy_ajp
- local config: /usr/local/etc/was ($WSDETCDIR)
- java: /usr/local/java ($JAVA_HOME)
- environment variables: set via setenv.sh in tomcat-land, also /etc/profile.d/<app>_home.sh