Shibboleth authentication for Roundup

Tonu Mikk <[email protected]>
Newsgroups gmane.comp.bug-tracking.roundup.user
Message-ID <CABDFm8gdaUT07qA=MG3ss0rcACrD3At4TRe15i-5khu4z8BP+w@mail.gmail.com>
Hello,

I am interested in using Shibboleth <https://shibboleth.net/about/>
authentication for Roundup Issue Tracker.  One of the attributes returned
by Shibboleth is REMOTE_USER.  I was hoping that I would be able to use the
REMOTE_USER by Roundup Issue tracker and have the user log in upon
successful Shibboleth authentication as long as their REMOTE_USER value
matches the username in the tracker. This doesn't seem to work.  I enabled
Python Debug in the Virtual config to see where the error appears and I
include it below.

I tried the virtual host file in two ways - using the line "RequestHeader
set REMOTE-USER %{REMOTE_USER}s" and without it. And in both cases the
Python debug presents the same error:

  File "/usr/lib/python2.6/site-packages/roundup/cgi/client.py", line
538, in inner_main
    raise NotFound(e)

NotFound: Shibboleth.sso


Looking for advice on how to proceed.  Thank you!

I have configured the tracker using Apache and mod-python with the
following virtual host configuration:

<VirtualHost xxx.xxx.xxx.xxx:443>
        ServerName      mydomain.com
        ServerAdmin     [email protected]

        AliasMatch ^/@@file(.*) /swadm/roundup/trackers/wcag/html$1
        AliasMatch ^/(?!@@file)(.*) /swadm/roundup/trackers/wcag/html/
dummy.py/$1

        DocumentRoot    /swadm/roundup/trackers/wcag/html

        <Directory      /swadm/roundup/trackers/wcag/html>
                # Default allow policy
                Order Deny,Allow
        AuthType shibboleth
        ShibRequestSetting requireSession 1
        Require valid-user
        RequestHeader set REMOTE-USER %{REMOTE_USER}s

        </Directory>

        AddHandler      python-program .py
        PythonOptimize  On
        PythonPath      "sys.path + ['/usr/lib64/python2.6/site-packages']"
        PythonHandler   roundup.cgi.apache
        PythonOption    TrackerHome     /swadm/roundup/trackers/wcag
        PythonDebug On

      # SSL information omitted for brevity.
</VirtualHost>

Python Debug:

MOD_PYTHON ERROR

ProcessId:      23377
Interpreter:    'mydomain.com'

ServerName:     'mydomain.com'
DocumentRoot:   '/swadm/roundup/trackers/wcag/html'

URI:            '/Shibboleth.sso/SAML2/POST'
Location:       None
Directory:      None
Filename:       '/swadm/roundup/trackers/wcag/html/dummy.py'
PathInfo:       '/Shibboleth.sso/SAML2/POST'

Phase:          'PythonHandler'
Handler:        'roundup.cgi.apache'

Traceback (most recent call last):

  File "/usr/lib64/python2.6/site-packages/mod_python/importer.py",
line 1540, in HandlerDispatch
    default=default_handler, arg=req, silent=hlist.silent)

  File "/usr/lib64/python2.6/site-packages/mod_python/importer.py",
line 1232, in _process_target
    result = _execute_target(config, req, object, arg)

  File "/usr/lib64/python2.6/site-packages/mod_python/importer.py",
line 1131, in _execute_target
    result = object(arg)

  File "/usr/lib/python2.6/site-packages/roundup/cgi/apache.py", line
135, in handler
    _client.main()

  File "/usr/lib/python2.6/site-packages/roundup/cgi/client.py", line
367, in main
    self.inner_main()

  File "/usr/lib/python2.6/site-packages/roundup/cgi/client.py", line
538, in inner_main
    raise NotFound(e)

NotFound: Shibboleth.sso


-- 
Tonu Mikk
Adaptive Technologist | Disability Resource Center |
diversity.umn.edu/disability
University of Minnesota | umn.edu
[email protected] | 612-625-3307

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

_______________________________________________
Roundup-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/roundup-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.