1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
|
# @summary
# Installs and configures `mod_shib`.
#
# @param suppress_warning
# Toggles whether to trigger warning on RedHat nodes.
#
# @param mod_full_path
# Specifies a path to the module. Do not manually set this parameter without a special reason.
#
# @param package_name
# Name of the Shibboleth package to be installed.
#
# @param mod_lib
# Specifies a path to the module's libraries. Do not manually set this parameter without special reason. The `path` parameter
# overrides this value.
#
# This class installs and configures only the Apache components of a web application that consumes Shibboleth SSO identities. You
# can manage the Shibboleth configuration manually, with Puppet, or using a [Shibboleth Puppet Module](https://github.com/aethylred/puppet-shibboleth).
#
# @note
# The Shibboleth module isn't available on RH/CentOS without providing dependency packages provided by Shibboleth's repositories.
# See the [Shibboleth Service Provider Installation Guide](http://wiki.aaf.edu.au/tech-info/sp-install-guide).
#
# @see https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPApacheConfig for additional documentation.
# @note Unsupported platforms: RedHat: all; CentOS: all; Scientific: all; SLES: all; Ubuntu: all; OracleLinux: all
class apache::mod::shib (
Boolean $suppress_warning = false,
Optional[Stdlib::Absolutepath] $mod_full_path = undef,
Optional[String] $package_name = undef,
Optional[String] $mod_lib = undef,
) {
include apache
if $facts['os']['family'] == 'RedHat' and ! $suppress_warning {
warning('RedHat distributions do not have Apache mod_shib in their default package repositories.')
}
$mod_shib = 'shib2'
apache::mod { $mod_shib:
id => 'mod_shib',
path => $mod_full_path,
package => $package_name,
lib => $mod_lib,
}
}
|
