nginx-mod-am

KO | EN

gitlite — search

#python #java #python3 #arduino #golang #machine-learning #rust #html #flask #javascript #seismology #nodejs

★ 15 Open GitHub ↗

OpenAM Policy Agent for NGINX

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

OpenAM Policy Agent for NGINX
=============================

# Download

## 20160226 Release
 * [Debian/Ubuntu x86_64](https://www.osstech.co.jp/download/hamano/nginx/nginx_agent_20160226.deb.x86_64.zip)

## 20141119 Release

* [Windows](https://www.osstech.co.jp/download/hamano/nginx/nginx_agent_20141119.msi)
 * [RHEL/CentOS 7 x86_64](https://www.osstech.co.jp/download/hamano/nginx/nginx_agent_20141119.el7.x86_64.zip)
 * [RHEL/CentOS 6 x86_64](https://www.osstech.co.jp/download/hamano/nginx/nginx_agent_20141119.el6.x86_64.zip)
 * [RHEL/CentOS 5 x86_64](https://www.osstech.co.jp/download/hamano/nginx/nginx_agent_20141119.el5.x86_64.zip)
 * [Debian/Ubuntu x86_64](https://www.osstech.co.jp/download/hamano/nginx/nginx_agent_20141119.deb.x86_64.zip)

# Requirement library

You need to install folowing libraries due to the nginx agent being linked to 
the libraries dynamically.

for RHEL/CentOS:
~~~
# yum install nspr nss libxml2 pcre openssl
~~~

for Debian/Ubuntu:
~~~
# apt-get install libnspr4 libnss3 libxml2 libpcre3 libssl1.0.0
~~~

# Agent Installation

## Steps

1. Extract nginx_agent_YYYYMMDD.zip installation bits.

~~~
 # unzip nginx_agent_YYYYMMDD.zip -d /opt
 ~~~

2. Goto nginx_agent

~~~
 # cd /opt/nginx_agent/
 ~~~

3. Execute agentadmin.sh

~~~
 # ./bin/agentadmin.sh
 ~~~

4. Follow the installation interactions and provide these details:

- OpenSSO server URL
  - Agent Profile name
  - Agent Password

5. Execute nginx
 ~~~
 # ./bin/nginx
 ~~~

# Agent Uninstallation

stop nginx and delete nginx_agent/ directory.

# Nginx Configuration

Specify OpenSSOAgentBootstrap.properties that agentadmin.sh has generated.
This is centralized agent configuration mode.

http {
        ...
        am_boot_file "/path/to/OpenSSOAgentBootstrap.properties";

You can specify if you using local configuration mode.

am_conf_file "/path/to/OpenSSOAgentConfiguration.properties";

If you want to use nginx as a reverse proxy.

location / {
        ...
        proxy_pass        http://example.com:80/;
        proxy_set_header  X-Real-IP  $remote_addr;

Currently I recommend one worker process because multi process mode
does not work notification from OpenAM.

Pretty soon, I'll try solving the multi process problem. However nginx
works very well with only one process.

worker_processes  1;

If you find some problem, then please send me the debug logfile.

error_log logs/error.log debug_http;

# Build Instructions

1. Install Dependencies

for RHEL/CentOS:
 ~~~
 # yum install zlib-devel nspr-devel nss-devel libxml2-devel pcre-devel openssl-dev
 ~~~

for Debian/Ubuntu:
 ~~~
 # apt-get install zlib1g-dev libnspr4-dev libnss3-dev libxml2-dev libpcre3-dev libssl-dev
 ~~~

2. Setup extlib

You can download the Agent SDK here:
 https://forgerock.org/downloads/openam-builds/

~~~
 $ mkdir extlib
 $ unzip -d extlib/common common_3_0_Linux_64bit.zip
 $ ln -s libamsdk.so.3 extlib/common/lib/libamsdk.so
 ~~~

3. Build

~~~
 $ make dist
 ~~~

nginx-mod-am

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README