Skip to content

Commit b56288a

Browse files
TomiBelanTomiBelan
committed
Add config files and IdP version switch
1 parent b2ccc3a commit b56288a

File tree

29 files changed

+900
-335
lines changed

29 files changed

+900
-335
lines changed

‎README.md‎

Lines changed: 663 additions & 335 deletions
Large diffs are not rendered by default.

‎etc/apache2/sites-available/idp.conf‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
<VirtualHost *:443>
2+
ServerName idp.unibatest.internal
3+
SSLEngine on
4+
SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem
5+
SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
6+
DocumentRoot /nonexistent
7+
ErrorLog ${APACHE_LOG_DIR}/idp-error.log
8+
CustomLog ${APACHE_LOG_DIR}/idp-access.log combined
9+
ProxyPreserveHost On
10+
ProxyAddHeaders On
11+
ProxyPass / http://localhost:8080/
12+
ProxyPassReverse / http://localhost:8080/
13+
RequestHeader set X-Forwarded-Proto "https"
14+
</VirtualHost>

‎etc/apache2/sites-available/spmellon.conf‎

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
<VirtualHost *:443>
2+
ServerName spmellon.unibatest.internal
3+
SSLEngine on
4+
SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem
5+
SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
6+
DocumentRoot /var/www/spmellon
7+
ErrorLog ${APACHE_LOG_DIR}/spmellon-error.log
8+
CustomLog ${APACHE_LOG_DIR}/spmellon-access.log combined
9+
WSGIScriptAlias /pyinfo /var/www/pyinfo.py process-group=spmellonpy
10+
WSGIScriptAlias /secret/pyinfo /var/www/pyinfo.py process-group=spmellonpy
11+
WSGIDaemonProcess spmellonpy processes=1 threads=1
12+
WSGIApplicationGroup %{GLOBAL}
13+
<Location />
14+
MellonEnable "info"
15+
MellonSPMetadataFile /etc/apache2/spmellon/https_spmellon.unibatest.internal_mellon_metadata.xml
16+
MellonSPPrivateKeyFile /etc/apache2/spmellon/https_spmellon.unibatest.internal_mellon_metadata.key
17+
MellonSPCertFile /etc/apache2/spmellon/https_spmellon.unibatest.internal_mellon_metadata.cert
18+
MellonIdPMetadataFile /opt/idpswitch/active/idp-metadata.xml
19+
MellonSecureCookie On
20+
# optional, for testing /mellon/invalidate:
21+
MellonEnabledInvalidateSessionEndpoint On
22+
</Location>
23+
<Location /secret>
24+
Require valid-user
25+
AuthType "Mellon"
26+
MellonEnable "auth"
27+
</Location>
28+
</VirtualHost>

‎etc/apache2/sites-available/spmellon2.conf‎

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
<VirtualHost *:443>
2+
ServerName spmellon2.unibatest.internal
3+
SSLEngine on
4+
SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem
5+
SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
6+
DocumentRoot /var/www/spmellon2
7+
ErrorLog ${APACHE_LOG_DIR}/spmellon2-error.log
8+
CustomLog ${APACHE_LOG_DIR}/spmellon2-access.log combined
9+
WSGIScriptAlias /pyinfo /var/www/pyinfo.py process-group=spmellon2py
10+
WSGIScriptAlias /secret/pyinfo /var/www/pyinfo.py process-group=spmellon2py
11+
WSGIDaemonProcess spmellon2py processes=1 threads=1
12+
WSGIApplicationGroup %{GLOBAL}
13+
<Location />
14+
MellonEnable "info"
15+
MellonSPMetadataFile /etc/apache2/spmellon2/https_spmellon2.unibatest.internal_mellon_metadata.xml
16+
MellonSPPrivateKeyFile /etc/apache2/spmellon2/https_spmellon2.unibatest.internal_mellon_metadata.key
17+
MellonSPCertFile /etc/apache2/spmellon2/https_spmellon2.unibatest.internal_mellon_metadata.cert
18+
MellonIdPMetadataFile /opt/idpswitch/active/idp-metadata.xml
19+
MellonSecureCookie On
20+
# optional, for testing /mellon/invalidate:
21+
MellonEnabledInvalidateSessionEndpoint On
22+
</Location>
23+
<Location /secret>
24+
Require valid-user
25+
AuthType "Mellon"
26+
MellonEnable "auth"
27+
</Location>
28+
</VirtualHost>

‎etc/apache2/sites-available/spshib.conf‎

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
<VirtualHost *:443>
2+
ServerName spshib.unibatest.internal
3+
SSLEngine on
4+
SSLCertificateFile /etc/ssl/certs/ssl-cert-snakeoil.pem
5+
SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
6+
DocumentRoot /var/www/spshib
7+
ErrorLog ${APACHE_LOG_DIR}/spshib-error.log
8+
CustomLog ${APACHE_LOG_DIR}/spshib-access.log combined
9+
WSGIScriptAlias /pyinfo /var/www/pyinfo.py process-group=spshibpy
10+
WSGIScriptAlias /secret/pyinfo /var/www/pyinfo.py process-group=spshibpy
11+
WSGIDaemonProcess spshibpy processes=1 threads=1
12+
WSGIApplicationGroup %{GLOBAL}
13+
<Location />
14+
AuthType Shibboleth
15+
Require shibboleth
16+
ShibRequestSetting requireSession false
17+
</Location>
18+
<Location /secret>
19+
AuthType Shibboleth
20+
Require shib-session
21+
ShibRequestSetting requireSession 1
22+
</Location>
23+
</VirtualHost>

‎etc/systemd/system/idp.service‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
[Unit]
2+
After=network.target remote-fs.target nss-lookup.target
3+
4+
[Service]
5+
ExecStart=/bin/bash /opt/idpswitch/active/run
6+
User=idp
7+
Group=idp
8+
9+
[Install]
10+
WantedBy=multi-user.target

‎opt/idpswitch/idp4-jetty10/idp-metadata.xml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
/opt/idp4/metadata/idp-metadata.xml

‎opt/idpswitch/idp4-jetty10/run‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
exec env -C /opt/idp4-jetty10-base/src/main/resources/jetty-base /usr/lib/jvm/java-11-amazon-corretto/bin/java -Didp.home=/opt/idp4 -jar /opt/jetty-home-10.*/start.jar

‎opt/idpswitch/idp4-jetty12/idp-metadata.xml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
/opt/idp4/metadata/idp-metadata.xml

‎opt/idpswitch/idp4-jetty12/run‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
exec env -C /opt/idp4-jetty12-base/jetty-impl/src/main/resources/net/shibboleth/idp/module/jetty/jetty-base java -Didp.home=/opt/idp4 -jar /opt/jetty-home-12.*/start.jar

0 commit comments

Comments
 (0)