Différences entre les pages « CAS » et « Backport Gnash »

De Cliss XXI
(Différence entre les pages)
Sauter à la navigation Sauter à la recherche
imported>SylvainBeucler
 
imported>SylvainBeucler
m (Nouvelle page : Almost all dependencies are available in Etch, so it's pretty easy to install. Only 'base-files' needs to be backported, and it was already uploaded at backports.org by another back...)
 
Ligne 1 : Ligne 1 :
== Installation ==
+
Almost all dependencies are available in Etch, so it's pretty easy to install.
  
* Installer [[Java]]
+
Only 'base-files' needs to be backported, and it was already uploaded at backports.org by another backporter. This is an opportunity to try out automated and minimal dependency support for pbuilder.
* Installer Tomcat:
 
aptitude install tomcat5.5
 
sed -i -e 's,#JAVA_HOME=.*,JAVA_HOME=/usr/lib/jvm/java-6-openjdk,' /etc/default/tomcat5.5
 
# TODO: faire ça proprement avec une 'policy' dans /etc/tomcat5.5/policy.d/50user.policy
 
sed -i -e 's,#TOMCAT5_SECURITY=.*,TOMCAT5_SECURITY=no,' /etc/default/tomcat5.5
 
invoke-rc.d tomcat5.5 restart
 
* Installer le module CAS/ (v0.5):
 
wget http://www.ja-sig.org/downloads/cas/cas-server-3.2-release.tar.gz
 
tar xzf cas-server-3.2-release.tar.gz
 
cd cas-server-3.2
 
cp ./modules/cas-server-webapp-3.2.war /var/lib/tomcat5.5/webapps/
 
* Installer le module CAS/ (v0.6):
 
wget http://surfnet.dl.sourceforge.net/sourceforge/esup-phpcas/phpcas-0.6.0-RC8.zip
 
unzip phpcas-0.6.0-RC8.zip
 
cd phpcas-0.6.0-RC8
 
# rm -rf /usr/share/php/CAS/
 
cp -r source /usr/share/php/CAS
 
* Activer https:
 
/usr/lib/jvm/java-6-openjdk/bin/keytool -genkey -alias tomcat -keyalg RSA -keystore /usr/share/tomcat5.5/.keystore
 
# mot de passe: changeit
 
sudo chown tomcat55: /usr/share/tomcat5.5/.keystore
 
sudo chmod 600 /usr/share/tomcat5.5/.keystore
 
# Simulation du chemin Fedora pour l'instant:
 
sudo mkdir -p /etc/pki/tls/certs/
 
sudo ln -s /etc/ssl/certs/ca-certificates.crt /etc/pki/tls/certs/ca-bundle.crt
 
# Modifier /etc/tomcat5.5/server.xml et décommenter "Define a SSL HTTP/1.1 Connector on port 8443"
 
* Visitez:
 
** http://localhost:8180/cas-server-webapp-3.2/
 
** https://localhost:8443/cas-server-webapp-3.2/
 
* Par défaut, un module d'authentification de test est installé: si le login et le mot de passe sont identiques (quel que soit le login), CAS accepte l'authentification.
 
* Installez le client CAS:
 
wget http://mesh.dl.sourceforge.net/sourceforge/esup-phpcas/esup-phpcas-0.5.1-1.zip
 
unzip esup-phpcas-0.5.1-1.zip
 
cd esup-phpcas-0.5.1-1
 
echo "deploy.home=/usr/share/php" >> properties/build.properties
 
ant deploy
 
  
== Exemple de configuration pour GRR ==
+
* Enable backports repository:
 +
cowbuilder --login --save-after-login
 +
echo "deb http://network/mirrors/debian-backports.org etch-backports main" > /etc/apt/sources.list.d/bpo.list
 +
wget -O - http://backports.org/debian/archive.key | apt-key add -
 +
* In <code>/etc/pbuilderrc</code>, use the 'experimental' method to satisfy dependencies:
 +
PBUILDERSATISFYDEPENDSCMD="/usr/lib/pbuilder/pbuilder-satisfydepends-experimental
  
* Configurez le client CAS dans <code>cas.sso</code>:
+
Normally the backports repository will not be used, because it has a default priority of -1. With the 'experimental' method (meant for the Debian experimental repository), backports dependencies will be used, but only if no Stable dependency could be found first, which is exactly what we want.
cat <<'EOF' > /usr/share/php/CAS/cas.sso
 
<?php
 
$serveurSSO="localhost";
 
$serveurSSOPort=8443;
 
$serveurSSORacine='cas-server-webapp-3.2';
 
EOF
 
  
== Liens ==
+
The only change we need in gnash 0.8.2-1 is to replace all the <code>base-files (>= 4.0.1)</code> with <code>base-files (>= 4.0.1~)</code> (trailing <code>~</code>), so that the backported dependency (<code>4.0.1~bpo40+1</code>) can be used. The rest of the dependencies are already edited in this regard.
  
* [http://www.switch.ch/aai/docs/shibboleth/SWITCH/1.3/idp/install-idp-1.3-debian.html Install Shibboleth 1.3 Identity Provider on Debian 4.0 (etch), Tomcat only with CAS SSO]: accent sur les certificats x509?
+
Then we proceed with the backport:
* [http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html SSL Configuration HOW-TO]: documentation de Tomcat
+
yes | dch -D etch-backports \
 +
  --newversion $(dpkg-parsechangelog | sed -ne 's,^Version: ,,p')~bpo40+1 \
 +
  --force-bad-version -- \
 +
  "Rebuild for Debian Backports <http://www.backports.org/>"
 +
# TODO: --pbuildersatisfydepends doesn't work, why?
 +
#pdebuild --pbuilder cowbuilder --pbuildersatisfydepends /usr/lib/pbuilder/pbuilder-satisfydepends-experimental
 +
# Meanwhile we edit /etc/pbuilderrc manually
 +
pdebuild --pbuilder cowbuilder
 +
 
 +
Back to [[Backports]].

Version du 5 avril 2008 à 22:19

Almost all dependencies are available in Etch, so it's pretty easy to install.

Only 'base-files' needs to be backported, and it was already uploaded at backports.org by another backporter. This is an opportunity to try out automated and minimal dependency support for pbuilder.

  • Enable backports repository:
cowbuilder --login --save-after-login
echo "deb http://network/mirrors/debian-backports.org etch-backports main" > /etc/apt/sources.list.d/bpo.list
wget -O - http://backports.org/debian/archive.key | apt-key add -
  • In /etc/pbuilderrc, use the 'experimental' method to satisfy dependencies:
PBUILDERSATISFYDEPENDSCMD="/usr/lib/pbuilder/pbuilder-satisfydepends-experimental

Normally the backports repository will not be used, because it has a default priority of -1. With the 'experimental' method (meant for the Debian experimental repository), backports dependencies will be used, but only if no Stable dependency could be found first, which is exactly what we want.

The only change we need in gnash 0.8.2-1 is to replace all the base-files (>= 4.0.1) with base-files (>= 4.0.1~) (trailing ~), so that the backported dependency (4.0.1~bpo40+1) can be used. The rest of the dependencies are already edited in this regard.

Then we proceed with the backport:

yes | dch -D etch-backports \
  --newversion $(dpkg-parsechangelog | sed -ne 's,^Version: ,,p')~bpo40+1 \
  --force-bad-version -- \
  "Rebuild for Debian Backports <http://www.backports.org/>"
# TODO: --pbuildersatisfydepends doesn't work, why?
#pdebuild --pbuilder cowbuilder --pbuildersatisfydepends /usr/lib/pbuilder/pbuilder-satisfydepends-experimental
# Meanwhile we edit /etc/pbuilderrc manually
pdebuild --pbuilder cowbuilder

Back to Backports.