Drupal Shibboleth Authentication Ray Saray Ali Karim Andrea - PowerPoint PPT Presentation

Drupal Shibboleth Authentication � Ray Saray � Ali Karim � Andrea Kapitan �

� Server Tools � AWS � Docker � Shibboleth �

Service Resources � • AWS � • Elastic Beanstalk - for deploying and scaling applications � • Elastic File System (EFS) - store user files and mount to Elastic Beanstalk EC2 instance which maps to Docker � • Amazon Aurora - a low cost, high performance, scalable database � • Github and Docker repositories [Dockerhub.com] � • Shibboleth Service Provider �

Prerequisites � • Github Repository � • Dockerhub Repository � • Elastic File System (EFS) instance � • Application database � • Registered Shibboleth Service Provider � • SSL Certificate for the site �

Workflow � • Check latest code to Github � • Create Docker image � • Push Docker image to Dockerhub � • Deploy using Elastic Beanstalk CLI �

Docker � • docker build --no-cache=true -t vptldev/ drupalshib . � • Builds a Docker image containing: OS, Drupal, Shibboleth certificate and configuration files, etc… � • docker push vptldev/drupalshib �

AWS Elastic Beanstalk Configuration � • Dockerrun.aws.json � • .ebextensions folder � • eb deploy �

Shibboleth Module Installation � • Add shib_auth module to Drupal. Add using drush in the Docker container, and check the new version into Github. � • ssh to EC2 � • sudo su � • docker ps to get container id � • docker –i –t exec <CONTAINERID> bash � • cd /var/www/html � • drush en shib_auth � • drush up shib_auth � • Push your new files to github using standard git command �

� Shibboleth Service Provider Configuration P1 � • Add Shibboleth to Apache config � • Add RewiteCond to to server configuration: � RewriteCond %{REQUEST_URI} !^/ Shibboleth.sso($|/) � • Generate certificate for the Service Provider �

� � Shibboleth Service Provider Configuration P2 � Add attributes to attribute-map.xml file �

� Shibboleth Service Provider Configuration P3 � Add Shibboleth SP db connection details to odbc.ini file �

� Shibboleth Service Provider Configuration P4 � • Configure Shibboleth Service Provider shibboleth/shibboleth2.xml � • Application defaults � • ODBC database � • Session settings �

Shibboleth Service Provider Configuration P5 � • Add attributes to mapping files � • Register Shibboleth Service Provider with the Identity Provider (https://spdb.stanford.edu) �

Shibboleth Drupal Module Settings P1 � Shibboleth attribute settings � /admin/config/people/shib_auth �

Shibboleth Drupal Module Settings P2 � • Shibboleth attributes �

Troubleshooting � • We added Xdebug functionality to our Docker to allow debugging with NetBeans � To check if you get attributes from IDP: � • tail –f /var/log/shibboleth/transaction.log � • tail -f /var/log/shibboleth/shibd.log �

Node Access Configuration � Add a role for student and only give that role access to the course page, and main course page content types �

Questions? �

Thank you � https://github.com/rsaray/DrupalShibDocker.git � Ray Saray (rsaray@stanford.edu) � Ali Karim (alikarim@stanford.edu) � Andrea Kapitan (akapitan@stanford.edu) �