Shibboleth 2.5.4-3.1 and Apache 2.4 on Amazon Linux AMI

[Cantor, Scott]

On 3/25/15, 6:35 PM, "Paul Nickerson" <pgn674 at gmail.com> wrote:



>I'm not sure I follow you, but I gave something a try. I got the 
>Shibboleth 2.5.4-3.1 SRPMs from the Shibboleth-managed CentOS 6 and 7, 
>RHEL 5 and 6, and openSUSE 13.1 and 13.2 repos. Trying to rpmbuild from 
>any of them resulted in the same build dependency error.

That honestly is what I would expect.

I just looked at the specfiles and the reason is that I was asked to 
explicitly add Amazon content into the files, and so I added the 
BuildRequires line to the Amazon vendor tag.

The old specfile was 100% incompatible with Amazon. It only worked for you 
by accident, and it wouldn't have had appropriate dependencies encoded in 
all cases.

You aren't running the rpmbuild command correctly, essentially, to bypass 
the dependency. It's there unless you specify the --without option to 
bypass it. And that is very tricky to get right, and it does *not* involve 
the shib_options thing. That's not the same thing.

>Neither CentOS nor RHEL have httpd24-devel packages. That is unique to 
>Amazon Linux AMI, as well as to openSUSE 12 I noticed. However, there is 
>no SRPM for Shibboleth 2.5.4-3.1 in the Shibboleth-managed openSUSE 12.3 
>repository.

12.3 is a dead OS, I didn't build any packages for it.

>So I think I'm stuck building Shibboleth 2.5.3-1.1.

That would be an absolutely terrible choice. As soon as a security issue 
that isn't relatively obscure comes up, you're dead.

-- Scott