Skip to content

Commit

Permalink
Merge branch 'develop' into 8394-maven-mods
Browse files Browse the repository at this point in the history
  • Loading branch information
poikilotherm committed Feb 10, 2022
2 parents 452feea + 2d4f56b commit 0f6c8f5
Show file tree
Hide file tree
Showing 4 changed files with 14 additions and 28 deletions.
10 changes: 6 additions & 4 deletions conf/vagrant/etc/yum.repos.d/shibboleth.repo
Original file line number Diff line number Diff line change
@@ -1,7 +1,9 @@
[security_shibboleth]
name=Shibboleth (CentOS_8)
[shibboleth]
name=Shibboleth (rockylinux8)
# Please report any problems to https://shibboleth.atlassian.net/jira
type=rpm-md
baseurl=http://download.opensuse.org/repositories/security:/shibboleth/CentOS_8/
mirrorlist=https://shibboleth.net/cgi-bin/mirrorlist.cgi/rockylinux8
gpgcheck=1
gpgkey=http://download.opensuse.org/repositories/security:/shibboleth/CentOS_8/repodata/repomd.xml.key
gpgkey=https://shibboleth.net/downloads/service-provider/RPMS/repomd.xml.key
https://shibboleth.net/downloads/service-provider/RPMS/cantor.repomd.xml.key
enabled=1
28 changes: 6 additions & 22 deletions doc/sphinx-guides/source/installation/shibboleth.rst
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ System Requirements

Support for Shibboleth in the Dataverse Software is built on the popular `"mod_shib" Apache module, "shibd" daemon <https://shibboleth.net/products/service-provider.html>`_, and the `Embedded Discovery Service (EDS) <https://shibboleth.net/products/embedded-discovery-service.html>`_ Javascript library, all of which are distributed by the `Shibboleth Consortium <https://shibboleth.net>`_. EDS is bundled with the Dataverse Software, but ``mod_shib`` and ``shibd`` must be installed and configured per below.

Only Red Hat Enterprise Linux (RHEL) and derivatives have been tested (x86_64 versions) by the Dataverse Project team. See https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLinuxInstall for details and note that (according to that page) as of this writing Ubuntu and Debian are not offically supported by the Shibboleth project.
Only Red Hat Enterprise Linux (RHEL) and derivatives have been tested (x86_64 versions) by the Dataverse Project team. See https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065335547/LinuxInstall for details and note that (according to that page) as of this writing Ubuntu and Debian are not officially supported by the Shibboleth project.

Install Apache
~~~~~~~~~~~~~~
Expand All @@ -39,28 +39,12 @@ Install Shibboleth

Installing Shibboleth will give us both the ``shibd`` service and the ``mod_shib`` Apache module.

Enable Shibboleth Yum Repo
^^^^^^^^^^^^^^^^^^^^^^^^^^

This yum repo is recommended at https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLinuxRPMInstall

``cd /etc/yum.repos.d``

Install ``wget`` if you don't have it already:

``yum install wget``

If you are running el8 (RHEL/derivative 8):

``wget http://download.opensuse.org/repositories/security:/shibboleth/CentOS_8/security:shibboleth.repo``

If you are running el7 (RHEL/CentOS 7):

``wget http://download.opensuse.org/repositories/security:/shibboleth/CentOS_7/security:shibboleth.repo``
Install Shibboleth Yum Repo
^^^^^^^^^^^^^^^^^^^^^^^^^^^

If you are running el6 (RHEL/CentOS 6):
The Shibboleth project now provides `a web form <https://shibboleth.net/downloads/service-provider/RPMS/>`_ to generate an appropriate package repository for use with YUM/DNF.

``wget http://download.opensuse.org/repositories/security:/shibboleth/CentOS_CentOS-6/security:shibboleth.repo``
You'll want to copy-paste the form results into ``/etc/yum.repos.d/shibboleth.repo`` or wherever is most appropriate for your operating system.

Install Shibboleth Via Yum
^^^^^^^^^^^^^^^^^^^^^^^^^^
Expand Down Expand Up @@ -214,7 +198,7 @@ SELinux is set to "enforcing" by default on RHEL/CentOS, but unfortunately Shibb
Disable SELinux
~~~~~~~~~~~~~~~

The first and easiest option is to set ``SELINUX=permisive`` in ``/etc/selinux/config`` and run ``setenforce permissive`` or otherwise disable SELinux to get Shibboleth to work. This is apparently what the Shibboleth project expects because their `wiki page <https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSELinux>`_ says, "At the present time, we do not support the SP in conjunction with SELinux, and at minimum we know that communication between the mod_shib and shibd components will fail if it's enabled. Other problems may also occur."
The first and easiest option is to set ``SELINUX=permisive`` in ``/etc/selinux/config`` and run ``setenforce permissive`` or otherwise disable SELinux to get Shibboleth to work. This is apparently what the Shibboleth project expects because their `wiki page <https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065335559/SELinux>`_ says, "At the present time, we do not support the SP in conjunction with SELinux, and at minimum we know that communication between the mod_shib and shibd components will fail if it's enabled. Other problems may also occur."

Reconfigure SELinux to Accommodate Shibboleth
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Expand Down
2 changes: 1 addition & 1 deletion src/main/webapp/metadataFragment.xhtml
Original file line number Diff line number Diff line change
Expand Up @@ -219,7 +219,7 @@
<div class="form-group dataset-field-values">
<div class="form-col-container col-sm-9 edit-field">
<p:selectOneMenu value="#{dsf.singleControlledVocabularyValue}" converter="controlledVocabularyValueConverter" style="width: auto !important; max-width:100%; min-width:200px;" styleClass="form-control primitive"
id="unique1" required="#{dsf.required}" rendered="#{!dsf.datasetFieldType.allowMultiples}">
id="unique1" required="#{dsf.required and datasetPage}" rendered="#{!dsf.datasetFieldType.allowMultiples}">
<f:selectItem itemLabel="#{bundle.select}" itemValue="" noSelectionOption="true"/>
<f:selectItems value="#{dsf.datasetFieldType.controlledVocabularyValues}" var="cvv" itemLabel="#{cvv.getLocaleStrValue(mdLangCode)}" itemValue="#{cvv}"/>
</p:selectOneMenu>
Expand Down
2 changes: 1 addition & 1 deletion src/main/webapp/resources/js/fileupload.js
Original file line number Diff line number Diff line change
Expand Up @@ -404,7 +404,7 @@ async function uploadFileDirectly(urls, storageId, filesize) {
//As long as we have the right file size, we're OK
for (i = 0; i < fileList.length; i++) {
if (fileList[i].file.size == filesize) {
upload = fileList.splice(i,i+1)[0];
upload = fileList.splice(i,1)[0];
break;
}
}
Expand Down

0 comments on commit 0f6c8f5

Please sign in to comment.