Page History

\\
\\
# Attach the amit-dsl locker:

{code

}
attach amit-dsl

{code}
\\
# Make sure the dependencies are met:
{code}
yum install curl-devel httpd-devel openssl-devel

{code}
\\
# Install the Shibboleth Packages from the AMIT DSL AFS locker:
{code}
rpm -i /mit/amit-dsl/Public/Shibboleth/x86_64/*.rpm

{code}
\\
# Copy the Touchstone Shibboleth configuration files into place:
{code}
cp /mit/amit-dsl/Public/Touchstone/config-SP/* /etc/shibboleth

{code}
\\
# Run the gen-shib.sh script to configure Shibboleth for Touchstone:

{code

}
cd /etc/shibboleth
./gen-shib.sh
cd

{code}
\\
# Add the following lines to the /etc/httpd/conf.d/shibd.conf file:

{code

}
<Location /shibverify>
  AuthType shibboleth
  require shibboleth
  ShibRequireSessionWith MIT-WAYF-staging
  ShibRequireSession On
  require valid-user
</Location>

<Location /bamboo>
  AuthType shibboleth
  require shibboleth
  ShibRequireSessionWith MIT-WAYF-staging
  ShibRequireSession On
  require valid-user
</Location>

<Location /bamboo/mitLogin.jsp>
  AuthType shibboleth
  require shibboleth
  ShibRequireSessionWith MIT-WAYF-staging
  ShibRequireSession On
  require valid-user
</Location>

<Location /examples>
  AuthType shibboleth
  require shibboleth
  ShibRequireSessionWith MIT-WAYF-staging
  ShibRequireSession On
  require valid-user
</Location>

{code}
\\
# Create the Bamboo home directory:
{code}
mkdir /usr/local/bamboo
chown -R www:www /usr/local/bamboo

{code}
\\
# In the MySQL client, create the database and grant the proper permissions:
{code}
create database bamboo;
grant select, insert, update, delete, create, drop, index, alter, create temporary tables, lock tables on bamboo.* to 'bamboo'@'localhost' identified by '<DB Password';

{code}
\\
# Extract the Tomcat 6 tarball into the /usr/local directory, and create the symlink:

{code

}
cd /usr/local
tar xzvf /mit/amit-dsl/Public/Java/apache-tomcat-6.0.18.tar.gz
ln -s apache-tomcat-6.0.18 tomcat

{code}
\\
# Copy the Tomcat init script into the /etc/init.d directory and enable it:

{code

}
cp /mit/amit-dsl/Public/Java/tomcat /etc/init.d
chmod a+rx /etc/init.d/tomcat
chkconfig --levels 2345 tomcat on

{code}
\\
# Enable MySQL and Shibboleth at boot time:
{code}
chkconfig --levels 2345 mysqld on
chkconfig --levels 2345 shibd on

{code}
\\
# Place the war files in the webapps directory.  Please note that the bamboo war file should be renamed to "bamboo.war" prior to placement:

{code

}
mv atlassian-bamboo-2.1.4.war bamboo.war
cp /mit/amit-dsl/Public/Bamboo/bamboo.war /usr/local/tomcat/webapps
cp /mit/amit-dsl/Public/Java/monitor.war /usr/local/tomcat/webapps
cp /mit/amit-dsl/Public/Shibverify/shibverify.war /usr/local/tomcat/webapps

{code}
\\
# Create the VirtualHost block in the /etc/httpd/conf/httpd.conf file:

{code

}
<VirtualHost *:80>
	ServerAdmin amit@mit.edu
	ProxyPass /bamboo/ http://localhost:8080/bamboo/
	ProxyPassReverse /bamboo/ http://localhost:8080/bamboo/
	ProxyPass /bamboo http://localhost:8080/bamboo/
	ProxyPassReverse /bamboo http://localhost:8080/bamboo/
	ServerName build-stage.mit.edu
	RewriteEngine On
	RewriteRule ^/(.*)  https://<Server Name>.mit.edu/$1 [L,R,QSA]
</VirtualHost>
{code}

Be sure to change the host names and any other values to ones that are correct for your installation.

\\
\\
# Configure the Virtual Host settings inside the Apache SSL config by adding the following block to the /etc/httpd/conf.d/ssl.conf file:

{code

}
ServerAdmin amit@mit.edu
ServerName <Server Name>.mit.edu
{code}

Be sure to change the host names and any other values to ones that are correct for your installation.

\\
\\
# Create the bamboo.conf file in the /etc/httpd/conf.d directory, with the following contents:

{code

}
LoadModule proxy_ajp_module modules/mod_proxy_ajp.so

RewriteEngine On

RewriteCond    %{HTTPS} off [NC]
RewriteRule    ^/(.*)                https://%{HTTP_HOST}/$1/

RewriteCond    %{HTTP_HOST} !.*\.mit\.edu$ [NC]
RewriteRule    ^/(.*)                https://%{HTTP_HOST}.mit.edu/$1/   [R=301,QSA]

RewriteCond    %{REQUEST_FILENAME}  -d
RewriteRule    ^(/?.*[^/])$           https://%{HTTP_HOST}/$1/  [R=301,QSA]

RewriteCond    %{REQUEST_FILENAME}  !-d
RewriteCond    %{REQUEST_FILENAME}  !-f
RewriteRule    ^(/?.*[^/])$           https://%{HTTP_HOST}/$1/  [R=301,QSA]

ProxyRequests Off
ProxyPreserveHost Off

<Proxy *>
	Order deny,allow
	Allow from all
	RewriteCond %{LA-U:REMOTE_USER} (.+)
	RewriteRule . - [E=RU:%1]
	RequestHeader add Remote-User %{RU}e
</Proxy>

ProxyPass /bamboo/ ajp://localhost:8009/bamboo/
ProxyPassReverse /bamboo/ http://localhost:8009/bamboo/

ProxyPass /bamboo-manager/ ajp://localhost:8009/bamboo-manager/
ProxyPassReverse /bamboo-manager/ http://localhost:8009/bamboo-manager/

ProxyPass /bamboo-monitor/ ajp://localhost:8009/bamboo-monitor/
ProxyPassReverse /bamboo-monitor/ http://localhost:8009/bamboo-monitor/

ProxyPass /defltws/ ajp://localhost:8010/defltws/
ProxyPassReverse /defltws/ http://localhost:8010/defltws/

ProxyPass /defltws-manager/ ajp://localhost:8010/defltws-manager/
ProxyPassReverse /defltws-manager/ http://localhost:8010/defltws-manager/

ProxyPass /defltws-monitor/ ajp://localhost:8010/defltws-monitor/
ProxyPassReverse /defltws-monitor/ http://localhost:8010/defltws-monitor/

ProxyPass /shibverify/ ajp://localhost:8009/shibverify/
ProxyPassReverse /shibverify/ http://localhost:8009/shibverify/

<Location /defltws>
	SSLVerifyClient require
</Location>
{code}
\\
\\