Changes between Version 2 and Version 3 of GrouperUIInstall

Timestamp:

06/15/13 09:21:24 (13 years ago)

Author:

uaguest_SPatel1@…

Comment:

--

GrouperUIInstall

@@ -101 +101 @@
 2.  In the /etc/shibboleth/shibboleth2.xml file:
 
-a) Set the entityID of the SP.  And add "bannerid" to the front of the REMOTE_USER values.  This is done so that REMOTE_USER gets set as the authenticated users' BannerID, which then gets passed to Tomcat and available for the Grouper UI.  Authentication in the Grouper UI will work if REMOTE_USER is either the subject id (which is the case here) or a subject identifier.
+a. Set the entityID of the SP.  And add "bannerid" to the front of the REMOTE_USER values.  This is done so that REMOTE_USER gets set as the authenticated users' BannerID, which then gets passed to Tomcat and available for the Grouper UI.  Authentication in the Grouper UI will work if REMOTE_USER is either the subject id (which is the case here) or a subject identifier.
 
 {{{
@@ -110 +110 @@
 
 
-b) Add the reference to the metadata file.  Replace the following:
+b. Add the reference to the metadata file.  Replace the following:
 
 {{{
@@ -126 +126 @@
 
 
-c) Add the entityID of the IdP.  Replace the following:
+c. Add the entityID of the IdP.  Replace the following:
 
 {{{
@@ -160 +160 @@
                                                            [  OK  ]
 }}}
+
+
+
+== Configure Apache ==
+
+1.  Configure mod_proxy_ajp. Add the file /etc/httpd/conf.d/proxy_ajp.conf with the contents:
+
+{{{
+LoadModule proxy_module modules/mod_proxy.so
+LoadModule proxy_ajp_module modules/mod_proxy_ajp.so
+
+ProxyPass /grouper/ ajp://localhost:8009/grouper/
+}}}
+
+2.  Add the following to the end of /etc/httpd/conf.d/shib.conf to require Shibboleth
+
+{{{
+<Location />
+  AuthType shibboleth
+  ShibRequestSetting requireSession 1
+  require valid-user
+</Location>
+}}}
+
+3.  Restart Apache
+
+{{{
+[root@grinnell conf.d]# /etc/init.d/httpd restart
+Stopping httpd:                                            [  OK  ]
+Starting httpd:                                            [  OK  ]
+[root@grinnell conf.d]#
+}}}
+
+
+
+== Configure Tomcat ==
+
+1.  In the file /etc/tomcat6/server.xml, make sure the AJP connector listening on port 8009 is not commented out and make sure request.tomcatAuthentication is set to false.
+
+{{{
+    <!-- Define an AJP 1.3 Connector on port 8009 -->
+    <Connector port="8009" protocol="AJP/1.3" redirectPort="8443" request.tomcatAuthentication="false" />
+}}}
+
+2.  Restart Tomcat
+
+{{{
+[root@grinnell tomcat6]# /etc/init.d/tomcat6 stop
+Stopping tomcat6:                                          [  OK  ]
+[root@grinnell tomcat6]# ps -ef | grep -i tomcat
+root     18377  7627  0 09:21 pts/3    00:00:00 grep -i tomcat
+[root@grinnell tomcat6]# /etc/init.d/tomcat6 start
+Starting tomcat6:                                          [  OK  ]
+}}}