<?php
/**
 * Configuration file for the OpenID provider.
 */

$config = array(

	/* The authentication source that should be used. */
	'auth' => 'default-sp',

	/* The name of the attribute which contains the username of the user. */
	'username_attribute' => 'uid',

	/* The directory where OpenID data is stored. */
	'filestore' => '/tmp/ssp-openid-provider',

);

<?php
/**
 * Configuration file for the OpenID provider.
 */

$config = array(

	/* The authentication source that should be used. */
	'auth' => 'default-sp',

	/* The name of the attribute which contains the username of the user. */
	'username_attribute' => 'uid',

	/* The directory where OpenID data is stored. */
	'filestore' => '/var/lib/simplesamlphp-openid-provider',

);

Change the default directory for the data store.
openidProvider: Change the default directory for the data store.

The default configuration uses a directory in /tmp, which may allow
an user to create this directory before simpleSAMLphp attempts to
create it. This can allow the user to overwrite files the webserver has
access to.

This patch changes the default directory.