Bug 309051

Summary:	www-misc/shibboleth-2.3.ebuild (New Package)
Product:	Gentoo Linux	Reporter:	daavelino
Component:	New packages	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED LATER
Severity:	enhancement	CC:	jlec, jonnykent
Priority:	High
Version:	unspecified
Hardware:	x86
OS:	Linux
URL:	http://shibboleth.internet2.edu/
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	shibboleth-2.3.ebuild (New ebuild) shibboleth-2.3.ebuild (files/shibd.init file) shibboleth-2.3.ebuild (files/shibd.conf) dev-libs/log4shib-1.0.4.ebuild (shibboleth-2.3 dependency) dev-libs/opensaml-2.3.ebuild (shibboleth-2.3.ebuild dependency) xmltooling-1.3.3.ebuild (shibboleth-2.3 dependency) xmltooling-1.3.3.ebuild (correction) shibboleth-2.3.ebuild (correction) A little correction for files/shibd.init file Two little corrections as suggested by Gregory Hakon. Correction. Correction. Correction.

Description daavelino 2010-03-11 20:00:03 UTC

Hi all!!

This is my proposal to include shibboleth-2.3 service provider 

(https://spaces.internet2.edu/display/SHIB2/Home) 

into Gentoo package structure.

Shibboleth allows users to securely send trusted information about themselves to remote resources. This information may then be used for authentication, authorization, content personalization, and enabling single sign-on across a broad range of services from many different providers.

I am also submitting the dependencies of this package for the sake of consistency. For that, I created three others ebuilds,

dev-libs/log4shib-1.0.4
dev-libs/opensaml-2.3
dev-libs/xmltooling-1.3.3

and I will submit them all.

Thanks in advance.

Comment 1 daavelino 2010-03-11 20:04:56 UTC

Created attachment 223199 [details]
shibboleth-2.3.ebuild (New ebuild)

Comment 2 daavelino 2010-03-11 20:06:14 UTC

Created attachment 223201 [details]
shibboleth-2.3.ebuild (files/shibd.init file)

This is the init.d/shibd script.

Comment 3 daavelino 2010-03-11 20:07:07 UTC

Created attachment 223203 [details]
shibboleth-2.3.ebuild (files/shibd.conf)

This is the conf.d/shibd file.

Comment 4 daavelino 2010-03-11 20:09:05 UTC

Created attachment 223205 [details]
dev-libs/log4shib-1.0.4.ebuild (shibboleth-2.3 dependency)

log4shib is a forked version of log4cpp that has been created for the Shibboleth project to ensure a conistent, working snapshot that builds reliably on the necessary platforms and it constitutes a dependency to install shibboleth service provider on Linux. 

It is a dependency of Shibboleth Service Provider (see www-misc/shibboleth-2.3.ebuild)

Comment 5 daavelino 2010-03-11 20:13:45 UTC

Created attachment 223207 [details]
dev-libs/opensaml-2.3.ebuild (shibboleth-2.3.ebuild dependency)

The OpenSAML 2 shared library can be built from source using any reasonably standard C++ compiler or installed from binary packages on supported platforms.

It depends on 

dev-libs/log4shib-1.0.4 or dev-libs/log4cpp-0.3.x
dev-libs/xerces-c-3.0.1
dev-libs/xmlsec=1.2.14
sys-libs/zlib-1.2.3
net-misc/curl-7.19.6

Comment 6 daavelino 2010-03-11 20:17:26 UTC

Created attachment 223209 [details]
xmltooling-1.3.3.ebuild (shibboleth-2.3 dependency)

Dependencies:

>=dev-libs/log4shib-1.0.4
>=dev-libs/log4cpp-0.3.4
>=dev-libs/xerces-c-3.0.1
>=dev-libs/xmlsec=1.2.14

Comment 7 daavelino 2010-03-11 20:43:09 UTC

shibboleth-2.3 installation process follows the order below:

emerge log4shib
USE="icu" emerge xerces-c
USE="-xalan" emerge xml-security-c
USE="log4shib xerces xmlsec" emerge xmltooling
USE="log4shib xerces xmlsec zlib" emerge opensaml
emerge shibboleth

My emerge --info follows:

Portage 2.1.6.13 (hardened/linux/x86/10.0, gcc-4.3.4, glibc-2.10.1-r1, 2.6.31.4 i686)
=================================================================
System uname: Linux-2.6.31.4-i686-Intel-R-_Core-TM-2_Duo_CPU_E7400_@_2.80GHz-with-gentoo-1.12.13
Timestamp of tree: Wed, 10 Mar 2010 17:45:01 +0000
app-shells/bash:     4.0_p35
dev-java/java-config: 2.1.9-r2
dev-lang/python:     2.6.4
dev-util/cmake:      2.6.4-r3
sys-apps/baselayout: 1.12.13
sys-apps/sandbox:    1.6-r2
sys-devel/autoconf:  2.13, 2.63-r1
sys-devel/automake:  1.7.9-r1, 1.9.6-r2, 1.10.2
sys-devel/binutils:  2.18-r3
sys-devel/gcc:       4.3.4
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.6b
virtual/os-headers:  2.6.27-r2
ACCEPT_KEYWORDS="x86"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=core2 -pipe -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/X11/xkb"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c /etc/udev/rules.d"
CXXFLAGS="-O2 -march=core2 -pipe -fomit-frame-pointer"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks fixpackages parallel-fetch protect-owned sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://gentoo.osuosl.org ftp://ftp.ecc.u-tokyo.ac.jp http://mirror.csclub.uwaterloo.ca/gentoo-distfiles"
LDFLAGS="-Wl,-O1"
LINGUAS="en"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTDIR_OVERLAY="/usr/local/portage-overlay"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X acl alsa apache2 bash-completion berkdb bzip2 cli consolekit cpus cracklib crypt ctype cups curl curlwrappers cxx dbus dri expat ffmpeg gd gdbm gif gnome gpm hal hardened iconv java6 javascript jpeg ldap matroska modules mp3 mpeg mplayer mudflap mysql ncursees ncurses nls nptl nptlonly ogg opengl openmp pam pcre perl php pic png pppd python qt4 readline reflection session spl sse sse3 ssl sysfs syslog tcpd unicode urandom usb vorbis win32codecs x86 xorg xsl zlib" ALSA_CARDS="hda-intel" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="evdev keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="vga vesa intel"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LANG, LC_ALL, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

Comment 8 Alex Legler (RETIRED) archtester

2010-03-11 20:55:08 UTC

Please do not CC architecture teams on your own. Thanks.

Comment 9 daavelino 2010-03-11 21:06:11 UTC

Created attachment 223215 [details]
xmltooling-1.3.3.ebuild (correction)

Attached the wrong file, sorry. This is the right.

Comment 10 daavelino 2010-03-12 12:44:23 UTC

Created attachment 223269 [details]
shibboleth-2.3.ebuild (correction)

shibboleth-2.3 can't deal with xerces-c greater than 3.0 so this ebuild takes it into account.

Comment 11 Justin Lecher (RETIRED) gentoo-dev

2010-03-21 19:14:23 UTC

Please file one bug per package.

Comment 12 daavelino 2010-05-11 12:09:17 UTC

Created attachment 231075 [details]
A little correction for files/shibd.init file

A little correction for files/shibd.init that enable it to pass parameters correctly.

Comment 13 daavelino 2010-09-02 14:07:13 UTC

Created attachment 245738 [details]
Two little corrections as suggested by Gregory Hakon.

It get correctly apache2.2 apxs and remove correctly shibboleth directories under --unmerge condictions.

Comment 14 daavelino 2010-09-02 19:34:17 UTC

Created attachment 245780 [details]
Correction.

Updates shibd.conf

Comment 15 daavelino 2010-09-02 19:35:40 UTC

Created attachment 245782 [details]
Correction.

Comment 16 daavelino 2010-09-02 19:37:21 UTC

Created attachment 245783 [details]
Correction.

Finds the correct apache apxs file (for apache-2.2) and creates the correct directory structure now.

Comment 17 daavelino 2010-09-08 13:04:26 UTC

This briefly describes the procedure to install shibboleth-2.3 using the ebuilds put here.

ACCEPT_KEYWORDS="~x86" emerge log4shib
ACCEPT_KEYWORDS="~x86" USE="icu" emerge =xerces-c-3.0.1
ACCEPT_KEYWORDS="~x86" USE="-xalan" emerge xml-security-c
ACCEPT_KEYWORDS="~x86" USE="log4shib xerces xmlsec" emerge xmltooling
ACCEPT_KEYWORDS="~x86" USE="log4shib xerces xmlsec zlib" emerge opensaml
ACCEPT_KEYWORDS="~x86" USE="icu" emerge shibboleth

I put it here because shibboleth-2.3 (until now) can't deal with xerces-c greater than 3.0.1 and, if you don't force it to be in this version, the shibboleth will notice it and reinstall it in this version but all previous dependences will be broken.

Comment 18 Gregory 2010-12-10 09:49:52 UTC

(In reply to comment #6)
> Created an attachment (id=223209) [details]
> xmltooling-1.3.3.ebuild (shibboleth-2.3 dependency)
> 
> Dependencies:
> 
> >=dev-libs/log4shib-1.0.4
> >=dev-libs/log4cpp-0.3.4
> >=dev-libs/xerces-c-3.0.1
> >=dev-libs/xmlsec=1.2.14

It seems to met that dependencies are >=dev-libs/xmlsec-1.2.14 and not >=dev-libs/xmlsec=1.2.14

Problem with the =1.2.14

Error(s) in metadata for 'dev-libs/opensaml-2.3':
  DEPEND: log4shib? ( >=dev-libs/log4shib-1.0.4 ) log4cpp? ( >=dev-libs/log4cpp-0.3.4 ) xerces? ( >=dev-libs/xerces-c-3.0.1 ) xmlsec? ( >=dev-libs/xmlsec=1.2.14 ) zlib? ( >=sys-libs/zlib-1.2.3 )
    Invalid atom (>=dev-libs/xmlsec=1.2.14), token 15
  RDEPEND: log4shib? ( >=dev-libs/log4shib-1.0.4 ) log4cpp? ( >=dev-libs/log4cpp-0.3.4 ) xerces? ( >=dev-libs/xerces-c-3.0.1 ) xmlsec? ( >=dev-libs/xmlsec=1.2.14 ) zlib? ( >=sys-libs/zlib-1.2.3 )
    Invalid atom (>=dev-libs/xmlsec=1.2.14), token 15