Project

General

Profile

Current Configs

SO Users (user: pass: isSudoer)

  • root: with public key: yes
  • ubuntu: public key: yes
  • user: user: yes
  • jboss: jboss: no

MySQL

  • root: root

Jboss

  • jboss: admin

Installation Requirements

  • apache
  • php5
  • php5-mcrypt
  • java7
  • mysql
  • Jboss AS

Installation and deployment

Jboss AS 7.1.1 Final

Follow this tutorial: http://www.opensourcearchitect.com/tutorials/installing-jboss-7-ubuntu-1204-lts

At bin directory, you must add a management user by typing the following:

$ ./add-user.sh
What type of user do you wish to add?
a) Management User (mgmt-users.properties)
b) Application User (application-users.properties)
(a): a

We select “a”, next you should see the following message:

Enter the details of the new user to add.
Realm (ManagementRealm) :
Username : jboss
Password :
Re-enter Password :

* hit enter for Realm to use default, then provide a username and password

then you must enable UTF-8 encoding. Edit the file $jboss$/bin/standalone.conf, and add the following to JAVA_OPTS variable

-Dfile.encoding=UTF-8

Start Jboss AS:

Must do this as jboss user

./standalone.sh -Djboss.bind.address=0.0.0.0 -Djboss.bind.address.management=0.0.0.0 -Dfile.encoding=UTF-8 &

End Jboss AS:

./jboss-cli.sh --connect command=:shutdown

NOTE: You MUST downgrade the library xmlsec to v1.4.6 inside Jboss AS located at jboss_folder/modules/org/apache/santuario/xmlsec/main. You can find the library inside a zip file at the bottom of this page.

Management URL: http://machine_url:9990

Apache2

You must enable the following modules: proxy proxy_connect proxy_http

sudo e2nmod
sudo service apache2 restart

also you must add the following to the file /etc/apache2/sites-avaliable/default

#SimpleSamlPHP
Alias /simplesaml /var/www/simplesaml/www

<proxy>
    Order deny,allow
    Allow from all
</proxy>

ProxyPass                   /v1/        http://localhost:8080/saal/v1/
ProxyPassReverse            /v1/        http://localhost:8080/saal/v1/
ProxyPassReverseCookiePath  /saal       /

MySQL

Increase the number of max_connections to 1000 on file /etc/mysql/my.cnf

Then you must create a new user and the database

console_user_name# mysql -u admin_user_name -p
mysql> CREATE USER 'user_name'@'localhost' IDENTIFIED BY 'user_pass';
mysql> GRANT ALL PRIVILEGES ON *.* TO 'user_name'@'localhost' WITH GRANT OPTION;
mysql> GRANT ALL PRIVILEGES ON *.* TO 'user_name'@'%' WITH GRANT OPTION;
mysql> CREATE SCHEMA SAAL;

NOTE: The username and the password to the new user must be defined on SAAL project in file persistence.xml

Testing Identity Provider

You can download the configured and working SimplesamlPHP in the appendix.

Add/remove/change users

simplesamlphp_folder/config/authsources.php

Change consumer / logout service URL

very likely you have to change the URL

simplesamlphp_folder/metadata/saml20-sp-remote.php

Folders configuration

Inside SAAL project there is one file called $deployed_folder$/saal/WEB-INF/classes/app.properties where you must configure the folder path to save files, the folders hierarchy must be:

path_to_folder
  • commits
  • exercises
  • tests

don't forget, all folders must have read and write permissions

Services

Permissions details

xmlsec146.tar.gz (384 KB) Pedro Miguel de Oliveira Estima, 02/27/2013 04:01 PM

simplesaml.tar.gz (1.59 MB) Pedro Miguel de Oliveira Estima, 02/27/2013 06:57 PM