Smoke test Debian 10 "buster"

Description

Do what's necessary to get some confidence that Debian 10 "buster" (with its included JDK) can run our software.

Environment

None

is related to

Activity

Show:

Ian Young August 23, 2019 at 5:20 PM

Here are some of the things I wrote down when smoke testing the SP on Debian 10 "buster":

I started with this example from GARR, which was written for Debian 9 "stretch".

Packages to install:

  • libapache2-mod-shib

  • libapache2-mod-php for testing

Note that the name of the Shibboleth module has changed from stretch.

Enable modules:

  • a2enmod shib not needed, already done by installation

  • a2enmod ssl was needed

At this point, apache2 and shibd services are both running.

Add configuration to `/etc/apache2/sites-enabled/something.conf`

Key generation is not done for you. To get the two-key set assumed by shibboleth2.xml:

cd /etc/shibboleth shib-keygen -n sp-signing shib-keygen -n sp-encrypt

Scott Cantor July 29, 2019 at 4:40 PM

It's a tricky area because any documentation has to be delineated a bit but I haven't added the Debian language to the core pages yet. I think we have an obligation to do something but I really don't have the time so if you want to make notes on what the specific steps are I can put it in once I settle on language.

Ian Young July 29, 2019 at 3:54 PM

I have also done some basic noodling with the SP packages they include. Seems to work pretty well, although finding documentation for the process isn't straightforwards. Should we do anything to correct that situation?

One thing I noticed was that their installation doesn't create keys by default, although the key generation utilities are installed (under Debian-specific names). The shibboleth2.xml expects two certs and private key, so you need to know to invoke the generation command twice with -n in each case to attach an appropriate prefix to the name.

I don't know if any of that has changed since Debian 9. Package names have, though.

Ian Young July 19, 2019 at 4:52 PM

Added Debian's OpenJDK 11 as supplied under Debian 10 "buster" to the _"partially supported"_ category for both the Java 7 and Java 11 platforms.

Ian Young July 12, 2019 at 2:07 PM

That's most of the smoke testing I originally wanted to do, but given that it wasn't trivial I'm going to take the opportunity to run up a test SP and test IdP on Debian 10 and see if anything else comes up. It has been a while since I used the SP, but it shouldn't be a long task.

Done
Pinned fields
Click on the next to a field label to start pinning.

Details

Assignee

Reporter

Created July 11, 2019 at 9:50 AM
Updated January 18, 2023 at 1:09 PM
Resolved July 29, 2019 at 3:55 PM