Puppet Class: apache::mod::shib

Defined in:
manifests/mod/shib.pp

Summary

Installs and configures `mod_shib`.

Overview

This class installs and configures only the Apache components of a web application that consumes Shibboleth SSO identities. You can manage the Shibboleth configuration manually, with Puppet, or using a [Shibboleth Puppet Module](github.com/aethylred/puppet-shibboleth).

Note:

The Shibboleth module isn’t available on RH/CentOS without providing dependency packages provided by Shibboleth’s repositories. See the [Shibboleth Service Provider Installation Guide](wiki.aaf.edu.au/tech-info/sp-install-guide).

Note:

Unsupported platforms: RedHat: all; CentOS: all; Scientific: all; SLES: all; Ubuntu: all; OracleLinux: all

Parameters:

  • suppress_warning (Boolean) (defaults to: false) —

    Toggles whether to trigger warning on RedHat nodes.

  • mod_full_path (Optional[Stdlib::Absolutepath]) (defaults to: undef) —

    Specifies a path to the module. Do not manually set this parameter without a special reason.

  • package_name (Optional[String]) (defaults to: undef) —

    Name of the Shibboleth package to be installed.

  • mod_lib (Optional[String]) (defaults to: undef) —

    Specifies a path to the module’s libraries. Do not manually set this parameter without special reason. The ‘path` parameter overrides this value.

See Also:



26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
 
# File 'manifests/mod/shib.pp', line 26

class apache::mod::shib (
  Boolean $suppress_warning                     = false,
  Optional[Stdlib::Absolutepath] $mod_full_path = undef,
  Optional[String] $package_name                = undef,
  Optional[String] $mod_lib                     = undef,
) {
  include apache
  if $facts['os']['family'] == 'RedHat' and ! $suppress_warning {
    warning('RedHat distributions do not have Apache mod_shib in their default package repositories.')
  }

  $mod_shib = 'shib2'

  apache::mod { $mod_shib:
    id      => 'mod_shib',
    path    => $mod_full_path,
    package => $package_name,
    lib     => $mod_lib,
  }
}