Shibboleth SPs on OpenShift

Peter Schober peter.schober at univie.ac.at
Wed Mar 16 06:06:13 EDT 2016


* Scott Wilson <scott.bradley.wilson at gmail.com> [2016-03-16 10:05]:
> Has anyone deployed an SP on the OpenShift PaaS? Or, even better, is
> there a Cartridge available?
> 
> I imagine its fairly straightforward to add the SP filter to a Httpd
> server in a DIY Gear, but I’d like to avoid that if at all
> possible.

The aim being the Shib SP protecting Applications running inside
OpenShift-managed containers?
I hadn't even heard any of those terms before but a quick search
returned this. e.g.:
https://docs.openshift.org/origin-m4/oo_cartridge_developers_guide.html
  "Cartridge configuration and setup is convention based, with
   emphasis on minimizing external dependencies in your cartridge
   code."
Not sure the Shib SP and all its dependencies (incl httpd, usually)
qualifies for the latter (the "emphasis")?
Anyway, I'd say however you get Apache httpd and the other modules on
such a system, that's how you'd also get the Shib SP installed?
Is Atomic mandated for OpenShift? Then probably using rpm-ostree?

Not sure how well httpd and Shib fit into that "application-centric IT
architecture" (from the Project Atomic description), if that in fact
were to stick around.
-peter


More information about the users mailing list