pflaeging-net-public/httpd-saml-docker
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
No description
19 commits 1 branch 0 tags 64 KiB
  • Shell 44.1%
  • HTML 35.7%
  • Dockerfile 20.2%
Find a file
Exact
Peter Pfläging dd08e3d86a Merge branch 'master' of ssh://gitlab.pflaeging.net:1822/pflaeging-net/httpd-saml-docker
2018-09-05 20:04:33 +02:00
apache-conf Update with Active Directory config 2018-09-05 19:59:56 +02:00
docker-compose.yml Cleanup & rights on /var/www 2018-08-20 00:33:44 +02:00
Dockerfile Now with https forwarding parameters 2018-08-20 00:17:26 +02:00
LICENSE Add LICENSE 2018-08-17 10:34:11 +00:00
mellon-setup.sh Now with https forwarding parameters 2018-08-20 00:17:26 +02:00
mellon.conf Hopefully first running production version 2018-08-17 12:32:21 +02:00
Readme.md Readme added 2018-08-19 16:11:48 +02:00
replacer.sh First version for testing 2018-08-09 17:42:53 +02:00
run-httpd.sh Cleanup & rights on /var/www 2018-08-20 00:33:44 +02:00
version.txt Cleanup & rights on /var/www 2018-08-20 00:33:44 +02:00

Readme.md

httpd-saml-docker -> A SAML proxy in docker

Base

This image is based on:

  • CentOS 7
  • Apache 2.4
  • mod_mellon (SAML Module for Apache)
  • mod_ldap (LDAP Module for Apache)

What for?

This image is at the moment primary as a SAML2 / SSL Proxy for alfresco 6.07 community as docker image.

The main config lies in apache-conf/httpd.conf: please read and understand!

It's a good example for both ways of authentication:

  • Webfrontend (alfresco share) is a normal SAML2 handshake
  • Services like webdav and CMIS are implemented with LDAP basic auth.

Components

The complete system comes with three components:

  • alfresco docker images with external auth and ldap sync (see repo: ../alfresco/docker)
  • this repo is the authentication frontend and the SSL termination point
  • a keycloak / postgres / openldap docker stack as IdP (see repo: ../keycloak-docker)

Setup

There's a small shellscript which guides you through the setup of the system.

For this image you need to do:

  • Create a SDN for the internal traffic between the docker-stacks: docker network create internalnet
  • Get a certificate pair (.crt & .key) for your host (normal apache SSL) Get ist via https://letsencrypt.org and save it as apache-conf/certificate.crt & certificate.key
  • Get your "SAML IdP SSO descriptor" and save it under apache-conf/idp-metadata.xml (For keycloak it's like: curl -o apache-conf/idp-metadata.xml https://my-idp-host/auth/realms/my-realmname/protocol/saml/descriptor