<div dir="ltr">We are trying to install Shibboleth on Amazon's EC2 using Amazon Linux.<br><br>The Shibboleth NativeSPLinuxSRPMBuild wiki page suggests building from Source RPMs.<br><br>The script we have used so far is as follows ...<br>
<br>#!/bin/bash<br><br>/usr/bin/yum -y update<br><br>mkdir shibboleth<br>cd shibboleth<br><br>/usr/bin/yum -y install automake boost-devel chrpath doxygen gcc-c++ groff httpd-devel libidn-devel \<br> openldap-devel openssl-devel redhat-rpm-config rpm-build stunnel unixODBC-devel curl-devel mod_ssl php<br>
/sbin/chkconfig httpd on<br>/sbin/service httpd start<br>/usr/bin/wget -erobots=off --no-host-directories --cut-dirs=4 -r -l1 -A.rpm <a href="http://shibboleth.net/downloads/service-provider/latest/SRPMS/">http://shibboleth.net/downloads/service-provider/latest/SRPMS/</a><br>
for package in log4shib xerces-c xml-security curl-openssl xmltooling opensaml shibboleth<br>do<br> /usr/bin/rpmbuild --rebuild ${package}*.src.rpm<br> /usr/bin/yum -y install /usr/src/rpm/RPMS/x86_64/*<br>done<br><br>
After everything builds and installs I tried to test the shibd (using shibd -t) and I receive this error:<br><br> CRIT XMLTooling.Config : libcurl lacks OpenSSL-specific options, this will greatly limit functionality<br>
<br>I used strace to track which libcurl it is attempting to use and it says <br><br> 29928 open("/usr/lib64/tls/libcurl.so.4", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)<br> 29928 open("/usr/lib64/libcurl.so.4", O_RDONLY|O_CLOEXEC) = 3<br>
<br>I believe it *should* be using (/opt/shibboleth/lib64/libcurl.so.4) and so I set LD_LIBRARY_PATH to<br>/opt/shibboleth/lib64 and it did not seem to affect the library being loaded.<br><br>(export LD_LIBRARY_PATH=/opt/shibboleth/lib64:$LD_LIBRARY_PATH)<br>
<br>Can someone point me in a correct direction?<br><br>Thanks,<br>Paul<br><br></div>