Shib Build Problems

classic Classic list List threaded Threaded
10 messages Options
Reply | Threaded
Open this post in threaded view
|

Shib Build Problems

Mike Carter-2
Hello All;

I'm relatively new to Shib and I'm attempting a build on Solaris 10 x86 and
am having some compile issues with the SP.  Nate suggested I pose my question
to this list.

Here are the specifics:

  Solaris 10 x86 Update 6, aka 10/2008
  Sun cc/c++ version 5.9
  Gnu make version 3.80

I successfully (I believe) built all of the packages required for SP including
a local rebuild of Apache 2 using the build notes on the I2 pages.  I'm
configuring shibboleth-2.1 as follows:

  ./configure \
  --enable-apache-20 \
  --with-openssl=/opt/shibboleth-sp \
  --with-log4shib=/opt/shibboleth-sp \
  --with-xerces=/opt/shibboleth-sp \
  --with-xmlsec=/opt/shibboleth-sp \
  --with-xmltooling=/opt/shibboleth-sp \
  --with-saml=/opt/shibboleth-sp \
  --with-apxs2=/usr/local/apache/bin/apxs \
  --prefix=/opt/shibboleth-sp \
  -C

with these environment variables:

  LD_LIBRARY_PATH=/opt/shibboleth-sp/lib
  CC=cc
  CXX=CC
  CFLAGS=-xO2
  CXXFLAGS=-xO2 -library=Cstd,Crun
  LDFLAGS=-lz

The make chugs along fine until XMLAttributeFilter.cpp has some issues which
appear related to a Sun c++ issue.  I did see that this source was pretty
recently modified (August 2008.)  The config.log and results of the make
can be found here: http://spot.colorado.edu/~carter/shib/ as I was not able
to send them to the list due to size restrictions.

Thanks in advance for any help you can provide!

--
Mike Carter
Information Technology Services
University of Colorado at Boulder

Reply | Threaded
Open this post in threaded view
|

SP, IDP (V 1.3) and CAS (3.1.1) how to know information about service SP from CAS ?

davidfdm2002
Hi,
I'd like to know if an IDP server can send informations about SP service to a CAS server
At the moment Cas server knows only IDP server, but  doesn't know  the SP service  witch is asking  for authentification.
 
Look forward.
 
David

 

Reply | Threaded
Open this post in threaded view
|

Re: SP, IDP (V 1.3) and CAS (3.1.1) how to know information about service SP from CAS ?

Chad La Joie
http://willnorris.com/2008/12/email-etiquette-replying-to-mailing-lists

david t wrote:

> Hi,
> I'd like to know if an IDP server can send informations about SP service to a CAS server
> At the moment Cas server knows only IDP server, but  doesn't know  the SP service  witch is asking  for authentification.
>
> Look forward.
>
> David
>
>
>      

--
SWITCH
Serving Swiss Universities
--------------------------
Chad La Joie, Software Engineer, Net Services
Werdstrasse 2, P.O. Box, 8021 Zürich, Switzerland
phone +41 44 268 15 75, fax +41 44 268 15 68
[hidden email], http://www.switch.ch

Reply | Threaded
Open this post in threaded view
|

RE: Shib Build Problems

Cantor, Scott E.
In reply to this post by Mike Carter-2
> The make chugs along fine until XMLAttributeFilter.cpp has some issues
which
> appear related to a Sun c++ issue.  I did see that this source was pretty
> recently modified (August 2008.)

That's the fix. You can wait, or apply it, there isn't really anything else
you can do, sorry. ETA on 2.2 is probably late February.

-- Scott


Reply | Threaded
Open this post in threaded view
|

RE: SP, IDP (V 1.3) and CAS (3.1.1) how to know information about service SP from CAS ?

Cantor, Scott E.
In reply to this post by davidfdm2002
> I'd like to know if an IDP server can send informations about SP service to
> a CAS server

That's protocol translation. You would need a custom login handler to translate the SAML protocol to CAS and then have it invoke the CAS server, rather than a "REMOTE_USER" approach that just blindly invokes CAS. There are many such things you could or may need to translate.

-- Scott


Reply | Threaded
Open this post in threaded view
|

Re: Shib Build Problems

Mike Carter-2
In reply to this post by Cantor, Scott E.
Scott;

Sorry to be dense but what fix?  Is it broken for all builds, just Solaris,
just Solarix x86?  I'm happy to apply the "fix" if I know what it is and
where to get it.

Thanks.

Scott Cantor writes:

>
> > The make chugs along fine until XMLAttributeFilter.cpp has some issues
> which
> > appear related to a Sun c++ issue.  I did see that this source was pretty
> > recently modified (August 2008.)
>
> That's the fix. You can wait, or apply it, there isn't really anything else
> you can do, sorry. ETA on 2.2 is probably late February.
>
> -- Scott
>
>


--

                                - Mike
Reply | Threaded
Open this post in threaded view
|

RE: Shib Build Problems

Cantor, Scott E.
> Sorry to be dense but what fix?

You said you saw that the source was modified, I assumed you had looked at
the svn log. There are two check-ins trying to fix Solaris issues. The
latest revision is likely to be compatible with a 2.1 build and includes
both fixes.

> Is it broken for all builds, just Solaris,
> just Solarix x86?

It isn't broken for non-Solaris. I don't use or test on Solaris enough to
know anything else, but it's specific to Sun compiler verions and patch
levels.

-- Scott


Reply | Threaded
Open this post in threaded view
|

Re: Shib Build Problems

Mike Carter-2
Scott;

Sorry, when I said I noticed the source was modified recently, I was talking
about the modification date in the source tarball not svn.  I'll take a look
at svn.

Scott Cantor writes:

>
> > Sorry to be dense but what fix?
>
> You said you saw that the source was modified, I assumed you had looked at
> the svn log. There are two check-ins trying to fix Solaris issues. The
> latest revision is likely to be compatible with a 2.1 build and includes
> both fixes.
>
> > Is it broken for all builds, just Solaris,
> > just Solarix x86?
>
> It isn't broken for non-Solaris. I don't use or test on Solaris enough to
> know anything else, but it's specific to Sun compiler verions and patch
> levels.
>
> -- Scott
>
>


--

                                - Mike
Reply | Threaded
Open this post in threaded view
|

Re : SP, IDP (V 1.3) and CAS (3.1.1) how to know information about service SP from CAS ?

davidfdm2002
In reply to this post by Cantor, Scott E.
I would like to know if there is any way to send the service SP name to IDP server thru the CAS server (if already develloped).
And in other case how can I get more informations to write my own mod.
 
Look forward.
 
 


De : Scott Cantor <[hidden email]>
À : [hidden email]
Envoyé le : Mardi, 13 Janvier 2009, 19h21mn 51s
Objet : RE: [Shib-Dev] SP, IDP (V 1.3) and CAS (3.1.1) how to know information about service SP from CAS ?

> I'd like to know if an IDP server can send informations about SP service to
> a CAS server

That's protocol translation. You would need a custom login handler to translate the SAML protocol to CAS and then have it invoke the CAS server, rather than a "REMOTE_USER" approach that just blindly invokes CAS. There are many such things you could or may need to translate.

-- Scott



Reply | Threaded
Open this post in threaded view
|

RE: SP, IDP (V 1.3) and CAS (3.1.1) how to know information about service SP from CAS ?

Cantor, Scott E.
david t wrote on 2009-01-14:
> I would like to know if there is any way to send the service SP name to IDP
> server thru the CAS server (if already develloped).

No, I answered that in my response.

> And in other case how can I get more informations to write my own mod.

The wiki/documentation.

-- Scott