Smoke test Debian 10 "buster"
Description
Environment
is related to
Activity
Ian Young August 23, 2019 at 5:20 PM
Here are some of the things I wrote down when smoke testing the SP on Debian 10 "buster":
I started with this example from GARR, which was written for Debian 9 "stretch".
Packages to install:
libapache2-mod-shib
libapache2-mod-php
for testing
Note that the name of the Shibboleth module has changed from stretch.
Enable modules:
a2enmod shib
not needed, already done by installationa2enmod ssl
was needed
At this point, apache2
and shibd
services are both running.
Add configuration to `/etc/apache2/sites-enabled/something.conf`
Key generation is not done for you. To get the two-key set assumed by shibboleth2.xml
:
cd /etc/shibboleth
shib-keygen -n sp-signing
shib-keygen -n sp-encrypt
Scott Cantor July 29, 2019 at 4:40 PM
It's a tricky area because any documentation has to be delineated a bit but I haven't added the Debian language to the core pages yet. I think we have an obligation to do something but I really don't have the time so if you want to make notes on what the specific steps are I can put it in once I settle on language.
Ian Young July 29, 2019 at 3:54 PM
I have also done some basic noodling with the SP packages they include. Seems to work pretty well, although finding documentation for the process isn't straightforwards. Should we do anything to correct that situation?
One thing I noticed was that their installation doesn't create keys by default, although the key generation utilities are installed (under Debian-specific names). The shibboleth2.xml
expects two certs and private key, so you need to know to invoke the generation command twice with -n
in each case to attach an appropriate prefix to the name.
I don't know if any of that has changed since Debian 9. Package names have, though.
Ian Young July 19, 2019 at 4:52 PM
Added Debian's OpenJDK 11 as supplied under Debian 10 "buster" to the _"partially supported"_ category for both the Java 7 and Java 11 platforms.
Ian Young July 12, 2019 at 2:07 PM
That's most of the smoke testing I originally wanted to do, but given that it wasn't trivial I'm going to take the opportunity to run up a test SP and test IdP on Debian 10 and see if anything else comes up. It has been a while since I used the SP, but it shouldn't be a long task.
Do what's necessary to get some confidence that Debian 10 "buster" (with its included JDK) can run our software.