<div dir="ltr"><div dir="ltr"><div>Ron,</div><div><br></div><div>Yes, definitely, if you are not running Amazon Linux(personally, I'm not quite sure why they felt like they needed their own distribution -- I guess they plan to eventually add more EC2-specific features and charge for them) and there is a repo with pre-built RPM's that you are comfortable with, it's always the easier and generally the smarter choice. Make sure that the packages are working well.<br></div><div><br></div><div>It was good to get the page updated and I needed to refresh my SRPM knowledge anyway, so your question was very helpful. :D<br></div><div><br></div><div>If you need to uninstall Shibboleth, yum remove shibboleth is all you need. It will keep backup copies of configuration files that you may want to recover someday. You would also want to uninstall any dependencies like OpenSAML. Here's what it looks like on a testing provider I setup.</div><div><br></div><div>[centos@ip-172-31-5-219 ~]$ sudo yum remove shibboleth<br>Loaded plugins: fastestmirror<br>Resolving Dependencies<br>--> Running transaction check<br>---> Package shibboleth.x86_64 0:3.0.2-1.1 will be erased<br>--> Finished Dependency Resolution<br><br>Dependencies Resolved<br><br>============================================================================================================================================================================================================<br> Package Arch Version Repository Size<br>============================================================================================================================================================================================================<br>Removing:<br> shibboleth x86_64 3.0.2-1.1 @shibboleth 5.4 M<br><br>Transaction Summary<br>============================================================================================================================================================================================================<br>Remove 1 Package<br><br>Installed size: 5.4 M<br>Is this ok [y/N]: y<br>Downloading packages:<br>Running transaction check<br>Running transaction test<br>Transaction test succeeded<br>Running transaction<br>Redirecting to /bin/systemctl status httpd.service<br> Erasing : shibboleth-3.0.2-1.1.x86_64 1/1 <br>warning: /etc/shibboleth/shibboleth2.xml saved as /etc/shibboleth/shibboleth2.xml.rpmsave<br>warning: /etc/httpd/conf.d/shib.conf saved as /etc/httpd/conf.d/shib.conf.rpmsave<br> Verifying : shibboleth-3.0.2-1.1.x86_64 1/1 <br><br>Removed:<br> shibboleth.x86_64 0:3.0.2-1.1 <br><br>Complete!<br>[centos@ip-172-31-5-219 ~]$ sudo yum remove opensaml<br>Loaded plugins: fastestmirror<br>Resolving Dependencies<br>--> Running transaction check<br>---> Package libsaml10.x86_64 0:3.0.0-1.1 will be erased<br>--> Finished Dependency Resolution<br><br>Dependencies Resolved<br><br>============================================================================================================================================================================================================<br> Package Arch Version Repository Size<br>============================================================================================================================================================================================================<br>Removing:<br> libsaml10 x86_64 3.0.0-1.1 @shibboleth 10 M<br><br>Transaction Summary<br>============================================================================================================================================================================================================<br>Remove 1 Package<br><br>Installed size: 10 M<br>Is this ok [y/N]: y<br>Downloading packages:<br>Running transaction check<br>Running transaction test<br>Transaction test succeeded<br>Running transaction<br> Erasing : libsaml10-3.0.0-1.1.x86_64 1/1 <br> Verifying : libsaml10-3.0.0-1.1.x86_64 1/1 <br><br>Removed:<br> libsaml10.x86_64 0:3.0.0-1.1 <br><br>Complete!<br></div><div><br></div><div><br></div><div><br></div><div>If we can help out with the other issues that you're facing, let us know.</div><div><br></div><div>Thrilled you're in better straits now,</div><div>Nate.<br></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Sep 9, 2018 at 3:33 AM, Ron Harris <span dir="ltr"><<a href="mailto:neo204011@gmail.com" target="_blank">neo204011@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div dir="ltr"><div dir="ltr">Hi Nate, <div><br></div><div>Thank you very much for looking into this issue and updating the page.</div><div>I will try to rerun the commands on a new EC2 Instance. It was a bit problem to tell my colleagues that I cannot install it again :).</div><div><br></div><div>After lot of looking around, I was able to find a quick solution. Installing it from repo.</div><div><div><span style="white-space:pre-wrap"> </span>sudo wget <a href="http://download.opensuse.org/repositories/security://shibboleth/RHEL_6/security:shibboleth.repo" target="_blank">http://download.opensuse.org/<wbr>repositories/security://<wbr>shibboleth/RHEL_6/security:<wbr>shibboleth.repo</a> -O /etc/yum.repos.d/shibboleth.<wbr>repo</div><div><span style="white-space:pre-wrap"> </span>sudo yum -y install shibboleth.x86_64</div></div><div><br></div><div>In my AWS release it was written like "Rhel_Fedora", so I tried with the above repo. </div><div>Shibboleth was installed with these two steps only. But right now facing couple of other issues.</div><div><br></div><div>Last query, If I have to uninstall Shibboleth, then below command should be enough.</div><div>sudo yum remove shibboleth.x86_64<br></div><div><br></div><div>Thanks</div><div><br></div><div><br></div><div><br></div></div></div></div><div class="HOEnZb"><div class="h5"><br><div class="gmail_quote"><div dir="ltr">On Sun, Sep 9, 2018 at 5:48 AM Nate Klingenstein <<a href="mailto:ndk@sudonym.me" target="_blank">ndk@sudonym.me</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr">I think I have a successful build on Amazon Linux 2018-03 too(it was indeed just too small a VM). I had to explicitly point out the newly built libcurl:</div><div dir="ltr"><br></div><div dir="ltr"><div class="m_-1868473066012797832m_848519521689337360gmail-line m_-1868473066012797832m_848519521689337360gmail-number36 m_-1868473066012797832m_848519521689337360gmail-index35 m_-1868473066012797832m_848519521689337360gmail-alt1"><code class="m_-1868473066012797832m_848519521689337360gmail-bash m_-1868473066012797832m_848519521689337360gmail-functions">export</code> <code class="m_-1868473066012797832m_848519521689337360gmail-bash m_-1868473066012797832m_848519521689337360gmail-plain">PKG_CONFIG_PATH=</code><code class="m_-1868473066012797832m_848519521689337360gmail-bash m_-1868473066012797832m_848519521689337360gmail-plain">/opt/<wbr>shibboleth/lib64/pkgconfig/</code></div><br></div><div dir="ltr"> which was bizarre and I'm not confident it was necessary although retesting the edited Wiki on a clean machine demonstrated it seemed to be, and the /etc/httpd configuration style is novel, so to actually load the newly built module, you'll need to copy or symlink the apache24.conf file that comes with Shibboleth:</div><div dir="ltr"><br></div><div dir="ltr">ln -s /etc/shibboleth/apache24.<wbr>config /etc/httpd/conf.modules.d/<wbr>shib.conf<br></div><div dir="ltr"><br></div><div>Amazon Linux 2 doesn't have as many irregularities. Either way, the SRPM page of the Wiki has been heavily updated, and if you rerun the commands, noting the comments, it should overwrite the older versions it was pulling and include the additional things necessary for Shibboleth SP 3 to work on Amazon Linux 2018-03.</div><div><br></div><div><a href="https://wiki.shibboleth.net/confluence/display/SP3/SRPMBuild" target="_blank">https://wiki.shibboleth.net/<wbr>confluence/display/SP3/<wbr>SRPMBuild</a></div><div><br></div><div>Hope this is helpful,<br></div><div>Nate.<br></div></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sat, Sep 8, 2018 at 9:34 PM, Nate Klingenstein <span dir="ltr"><<a href="mailto:ndk@sudonym.me" target="_blank">ndk@sudonym.me</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Ron,</div><div><br></div><div>Okay, I got it to build and load the module fine on Amazon Linux 2 and you don't need any special apxs directives. I've verified that shibd runs, /Shibboleth.sso/Status reports OK, and I can auto-generate metadata. You will need to install libmemcached-devel too. It's otherwise like a standard SRPM build.</div><div><br></div><div>I'll try on 2018-03 again now. I suspect I just had too small a VM and it was running out of memory during the build process. I couldn't even run top in parallel. If it works, I'll update the Wiki page.</div><div><br></div><div>Thanks,</div><div>Nate.<br></div><div><br></div></div><div class="m_-1868473066012797832m_848519521689337360HOEnZb"><div class="m_-1868473066012797832m_848519521689337360h5"><div class="gmail_extra"><br><div class="gmail_quote">On Sat, Sep 8, 2018 at 7:35 PM, Nate Klingenstein <span dir="ltr"><<a href="mailto:ndk@sudonym.me" target="_blank">ndk@sudonym.me</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div>Ron,</div><div><br></div><div>tl;dr: packaging is purgatory<br></div><div><br></div><div>First, I'm not sure which Amazon Linux you're using. With 2018-3, using the new releases, I was able to get to the point of building OpenSAML, but it failed to compile the SubjectConfirmation part of the SAML 2 assertion implementation. With Amazon Linux 2, I'm getting rpmbuild using a different path(home directory instead of /usr/src/rpm) among other things.<br></div><div><br></div><div>The example on the webpage is not actively maintained and it's pretty outdated, so you can't use it with a literal copy/paste. It's also trying to pull older releases of many of the dependencies, including xmltooling and opensaml. The spec file for the Shibboleth package is just the point where you are discovering that you built and installed versions that are too old.<br></div></div><div dir="ltr"><br></div><div dir="ltr"><div>%if 0%{?rhel} >= 6 || 0%{?centos_version} >= 600 || 0%{?amzn} >= 1<br>PreReq: xmltooling-schemas%{?_isa} >= 3.0.0, opensaml-schemas%{?_isa} >= 3.0.0<br>%else<br></div><br></div><div>I'll spend some time playing around on Amazon Linux 2 today to see if I can get it to build, but it's going to take me awhile. I'll respond again to this message later. I may not be able to resolve it myself, but we'll see.</div><div><br></div><div>Thanks,</div><div>Nate.<br></div><div dir="ltr"><div><br></div></div></div></div></div><div class="m_-1868473066012797832m_848519521689337360m_6832235210390325331HOEnZb"><div class="m_-1868473066012797832m_848519521689337360m_6832235210390325331h5"><div class="gmail_extra"><br><div class="gmail_quote">On Sat, Sep 8, 2018 at 6:46 AM, Ron Harris <span dir="ltr"><<a href="mailto:neo204011@gmail.com" target="_blank">neo204011@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr">Thanks Nate for reply.<div><br></div><div>I somewhat understood what was incorrect.</div><div>I followed the sets mentioned in example "Amazon Linux with Apache 2.4"</div><div><br></div><div>when I run this command</div><div>"sudo rpmbuild --rebuild --without builtinapache -D 'shib_options -with-apxs24=/usr/bin/apxs -with-apr1=/usr/bin/apr-1-<wbr>config -enable-apache-24' shibboleth*"</div><div><br></div><div>I am getting below error:</div><div><div>RPM build errors:</div><div> line 14: prereq is deprecated: PreReq: xmltooling-schemas(x86-64) >= 3.0.0, opensaml-schemas(x86-64) >= 3.0.0</div><div> Bad exit status from /var/tmp/rpm-tmp.IRbIyP (%build)</div></div><div><br></div><div>Thanks</div><div><br></div></div></div></div></div><div class="m_-1868473066012797832m_848519521689337360m_6832235210390325331m_-4116819266531474243HOEnZb"><div class="m_-1868473066012797832m_848519521689337360m_6832235210390325331m_-4116819266531474243h5"><br><div class="gmail_quote"><div dir="ltr">On Sat, Sep 8, 2018 at 12:28 AM Nate Klingenstein <<a href="mailto:ndk@sudonym.me" target="_blank">ndk@sudonym.me</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div>Ron,</div><div><br></div><div>Your install command is trying to pull from the default pre-configured yum repos rather than installing the locally rebuilt RPM's. Try localinstall with your RPM's instead as in the example shown on the page or using a Linux distribution that already has prebuilt RPM's in a repository you can add to /etc/yum.repos.d/.<br></div><div><br></div><div><a href="https://wiki.shibboleth.net/confluence/display/SP3/SRPMBuild" target="_blank">https://wiki.shibboleth.net/<wbr>confluence/display/SP3/<wbr>SRPMBuild</a><br></div></div><div><br></div><div>Take care,</div><div>Nate.<br></div><div dir="ltr"><br></div></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Sep 7, 2018 at 6:33 PM, Ron Harris <span dir="ltr"><<a href="mailto:neo204011@gmail.com" target="_blank">neo204011@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr">Hi,<div><br></div><div>I have previously configured Shibboleth on EC2 instance, but today trying to install on new server, I am facing some issue.</div><div><br></div><div>I am referring to the following link:</div><div><a href="https://wiki.shibboleth.net/confluence/display/SP3/SRPMBuild" target="_blank">https://wiki.shibboleth.net/<wbr>confluence/display/SP3/<wbr>SRPMBuild</a><br></div><div><br></div><div>When I run the command: </div><div>sudo yum install log4shib xerces-c xml-security-c curl-openssl xmltooling opensaml shibboleth<br></div><div><br></div><div>I am getting below message:</div><div><div><br></div><div>Loaded plugins: priorities, update-motd, upgrade-helper</div><div>amzn-main amzn-updates No package log4shib available.</div><div>No package xerces-c available.</div><div>No package xml-security-c available.</div><div>No package xmltooling available.</div><div>No package opensaml available.</div><div>No package shibboleth available.</div><div>Nothing to do</div></div><div><br></div><div>Can you please help me understand what I maybe missing.</div><div><br></div><div>Thanks</div><div><br></div><div><br></div></div></div></div></div>
<br>-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/<wbr>confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.<wbr>net</a><br></blockquote></div><br></div>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/<wbr>confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.<wbr>net</a></blockquote></div>
</div></div><br>-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/<wbr>confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.<wbr>net</a><br></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
</div></div></blockquote></div><br></div>
-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/<wbr>confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.<wbr>net</a></blockquote></div>
</div></div><br>-- <br>
For Consortium Member technical support, see <a href="https://wiki.shibboleth.net/confluence/x/coFAAg" rel="noreferrer" target="_blank">https://wiki.shibboleth.net/<wbr>confluence/x/coFAAg</a><br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.<wbr>net</a><br></blockquote></div><br></div>