Shibboleth SPs on OpenShift

[Cantor, Scott]

On 3/16/16, 6:50 AM, "users on behalf of Scott Wilson" <users-bounces at shibboleth.net on behalf of scott.bradley.wilson at gmail.com> wrote:



>The application-level cartridges (e.g. Tomcat, Postgres) don’t expose the httpd configuration directly so its not really possible to shibbolize at that level.

That's the only level the SP operates at, quite by design. It is not an application-level solution, it's an Apache module.

>It is possible to create a minimal “DIY” cartridge with your own Httpd setup, the only restriction being that it runs for a user rather than as root in a RHEL system - that may be a bit of an issue as I think the Shib SP assumes you’re running httpd as root.

The SP RPM *packages* assume you're using the RH-supplied Apache, and that runs as root. The SP doesn't really care, but it installs itself into that httpd environment, and is built specifically against it.

The SP built from source can be built against any Apache version.

>Out of interest, are there any other PaaS implementations of Shib around?

Shibboleth is an implementation, not someone else implements. I think you're asking if there are PaaS implementations of SAML, which I wouldn't know.

-- Scott