Grouper UI Part 1

Shilen Patel

Duke University

This work licensed under a Creative Commons Attribution-NonCommercial 3.0 Unported License.

• Download• App Servers• Apache• Authentication• Logging

2

Contents

• Grouper packages of all official versions are hosted on the Grouper web server linked from here: http://www.internet2.edu/grouper/software.html

• Grouper installer will download most Grouper packages for you.

3

Download

• Grouper UI is deployed on an application server•Most testing on Tomcat 6•Deploy WAR file or modify server.xml file to

deploy as an exploded WAR.• Load balancer persistence.

4

App Servers

• Use a web sever like Apache to front end your Tomcat instance.•Useful if you have multiple Tomcats•Can help with authentication

5

Apache

• Authentication handled by the filter edu.internet2.middleware.grouper.ui.LoginCheckFilter

• Authentication succeeds if request.getRemoteUser() is set.

•Default works easily with tomcat-users.xml file.

• But also easy to integrate with Basic Authentication and Shibboleth.

6

Authentication

• Set tomcatAuthentication to false in the server.xml file. • <Connector port="8009" protocol="AJP/1.3" redirectPort="8443"

request.tomcatAuthentication="false" address="127.0.0.1"/>

• Remove the security-role, security-constraint and login-config sections from the web.xml file.

• Configure the Shibboleth SP.

7

Authentication using Shibboleth

• Uses log4j for logging• By default, uses the Grouper API

logging configuration.• build.properties allows you to use a

separate log4j file.

8

Logging

Thanks!

Further information:

• Infosheets, mailing lists, wiki, downloads, etc.:www.internet2.edu/grouper

• Grouper demo server:grouperdemo.internet2.edu/

• Grouper Online Training Home:spaces.internet2.edu/x/IIGfAQ

This work licensed under a Creative Commons Attribution-NonCommercial 3.0 Unported License. 9

Next Video in Grouper Online Training is:

Grouper UI Part 2

This work licensed under a Creative Commons Attribution-NonCommercial 3.0 Unported License.