admin-ui-part1-02x

Download Report

Transcript admin-ui-part1-02x

Grouper UI Part 1
Shilen Patel
Duke University
This work licensed under a Creative Commons Attribution-NonCommercial 3.0 Unported License.
Contents
•
•
•
•
•
Download
App Servers
Apache
Authentication
Logging
2
Download
• Grouper packages of all official versions
are hosted on the Grouper web server
linked from here:
http://www.internet2.edu/grouper/softwa
re.html
• Grouper installer will download most
Grouper packages for you.
3
App Servers
• Grouper UI is deployed on an
application server
• Most testing on Tomcat 6
• Deploy WAR file or modify server.xml file to
deploy as an exploded WAR.
• Load balancer persistence.
4
Apache
• Use a web sever like Apache to front
end your Tomcat instance.
• Useful if you have multiple Tomcats
• Can help with authentication
5
Authentication
• Authentication handled by the filter
edu.internet2.middleware.grouper.ui.LoginCheckFilter
• Authentication succeeds if
request.getRemoteUser() is set.
• Default works easily with tomcat-users.xml
file.
• But also easy to integrate with Basic
Authentication and Shibboleth.
6
Authentication using Shibboleth
• Set tomcatAuthentication to false in the
server.xml file.
•
<Connector port="8009" protocol="AJP/1.3" redirectPort="8443"
request.tomcatAuthentication="false" address="127.0.0.1"/>
• Remove the security-role, securityconstraint and login-config sections from
the web.xml file.
• Configure the Shibboleth SP.
7
Logging
• Uses log4j for logging
• By default, uses the Grouper API
logging configuration.
• build.properties allows you to use a
separate log4j file.
8
Thanks!
Further information:
•
Infosheets, mailing lists, wiki, downloads, etc.:
www.internet2.edu/grouper
•
Grouper demo server:
grouperdemo.internet2.edu/
•
Grouper Online Training Home:
spaces.internet2.edu/x/IIGfAQ
This work licensed under a Creative Commons Attribution-NonCommercial 3.0 Unported License.
9
Next Video in Grouper Online Training is:
Grouper UI Part 2
This work licensed under a Creative Commons Attribution-NonCommercial 3.0 Unported License.