From 1ea3abf5908a7ab3baa87d154c3a2f7ab7d31818 Mon Sep 17 00:00:00 2001 From: Paul Caskey Date: Thu, 19 Dec 2024 20:54:44 +0000 Subject: [PATCH] add COmanage Match --- Workbench/comanage_match/Dockerfile | 40 ++++ .../container_files/httpd/match-ssl.crt | 22 ++ .../container_files/httpd/match-ssl.key | 27 +++ .../shibboleth/attribute-map.xml | 169 +++++++++++++++ .../shibboleth/idp-metadata.xml | 202 ++++++++++++++++++ .../shibboleth/shibboleth2.xml | 113 ++++++++++ .../shibboleth/sp-encrypt-cert.pem | 25 +++ .../shibboleth/sp-encrypt-key.pem | 40 ++++ .../shibboleth/sp-signing-cert.pem | 25 +++ .../shibboleth/sp-signing-key.pem | 40 ++++ .../container_files/system/setservername.sh | 10 + Workbench/comanage_match_data/Dockerfile | 5 + .../seed-data/addExtension.sql | 2 + Workbench/docker-compose.yml | 41 ++++ .../webproxy/container_files/httpd/index.html | 2 + .../webproxy/container_files/httpd/proxy.conf | 5 + .../container_files/mdload/match-sp.xml | 113 ++++++++++ .../container_files/system/setservername.sh | 2 +- .../container_files/system/startWithMDLoad.sh | 3 +- 19 files changed, 884 insertions(+), 2 deletions(-) create mode 100644 Workbench/comanage_match/Dockerfile create mode 100644 Workbench/comanage_match/container_files/httpd/match-ssl.crt create mode 100644 Workbench/comanage_match/container_files/httpd/match-ssl.key create mode 100644 Workbench/comanage_match/container_files/shibboleth/attribute-map.xml create mode 100644 Workbench/comanage_match/container_files/shibboleth/idp-metadata.xml create mode 100644 Workbench/comanage_match/container_files/shibboleth/shibboleth2.xml create mode 100644 Workbench/comanage_match/container_files/shibboleth/sp-encrypt-cert.pem create mode 100644 Workbench/comanage_match/container_files/shibboleth/sp-encrypt-key.pem create mode 100644 Workbench/comanage_match/container_files/shibboleth/sp-signing-cert.pem create mode 100644 Workbench/comanage_match/container_files/shibboleth/sp-signing-key.pem create mode 100644 Workbench/comanage_match/container_files/system/setservername.sh create mode 100644 Workbench/comanage_match_data/Dockerfile create mode 100644 Workbench/comanage_match_data/container_files/seed-data/addExtension.sql create mode 100644 Workbench/webproxy/container_files/mdload/match-sp.xml diff --git a/Workbench/comanage_match/Dockerfile b/Workbench/comanage_match/Dockerfile new file mode 100644 index 0000000..06c9577 --- /dev/null +++ b/Workbench/comanage_match/Dockerfile @@ -0,0 +1,40 @@ +FROM comanageproject/comanage-match:1.2.0-shibboleth-sp-supervisor-6 + +ARG CSPHOSTNAME=localhost +ENV CSPHOSTNAME=$CSPHOSTNAME + +# match settings (env vars from https://spaces.at.internet2.edu/display/COmanage/Configuring+Match+Container+Images) +ENV COMANAGE_MATCH_ADMIN_USERNAME=banderson@example.org +ENV COMANAGE_MATCH_SECURITY_SALT=kd67NSQ93VcXPioYT6083620jfutBHGKSNND23hvGG09m10S +ENV COMANAGE_MATCH_VIRTUAL_HOST_FQDN=$CSPHOSTNAME +ENV COMANAGE_MATCH_VIRTUAL_HOST_SCHEME=https +#from database.php +ENV COMANAGE_MATCH_DATABASE=match +ENV COMANAGE_MATCH_DATABASE_HOST=comanage-match-data +ENV COMANAGE_MATCH_DATABASE_USER=match_user +ENV COMANAGE_MATCH_DATABASE_USER_PASSWORD=Password1 +#from email.php +ENV COMANAGE_MATCH_EMAIL_FROM_EMAIL=noreply@workbench.incommon.org +ENV COMANAGE_MATCH_EMAIL_FROM_NAME="Do Not Reply" +ENV COMANAGE_MATCH_EMAIL_TRANSPORT=Smtp +ENV COMANAGE_MATCH_EMAIL_HOST=tls://email-smtp.us-west-2.amazonaws.com +ENV COMANAGE_MATCH_EMAIL_ACCOUNT=AKIAZDWJANQRZKPFVK6J +ENV COMANAGE_MATCH_EMAIL_ACCOUNT_PASSWORD=BNAp6WlvsI4iXK3ush8pwPD2QKHDYQ09ti+Z3r/mb2Nx +ENV COMANAGE_MATCH_EMAIL_PORT=465 +# for httpd +ENV COMANAGE_MATCH_HTTP_NO=true +ENV COMANAGE_MATCH_HTTPS_LISTEN_PORT=443 +ENV HTTPS_CERT_FILE=/etc/pki/tls/certs/match-ssl.crt +ENV HTTPS_PRIVKEY_FILE=/etc/pki/tls/private/match-ssl.key + +COPY container_files/httpd/match-ssl.crt /etc/pki/tls/certs/ +COPY container_files/httpd/match-ssl.key /etc/pki/tls/private/ +RUN chmod 600 /etc/pki/tls/certs/match-ssl.crt && chmod 600 /etc/pki/tls/private/match-ssl.key + +COPY container_files/shibboleth/ /etc/shibboleth/ + +#dynamically set hostname +COPY container_files/system/setservername.sh /usr/local/bin/ +RUN chmod 755 /usr/local/bin/setservername.sh && /usr/local/bin/setservername.sh + + diff --git a/Workbench/comanage_match/container_files/httpd/match-ssl.crt b/Workbench/comanage_match/container_files/httpd/match-ssl.crt new file mode 100644 index 0000000..d7e9300 --- /dev/null +++ b/Workbench/comanage_match/container_files/httpd/match-ssl.crt @@ -0,0 +1,22 @@ +-----BEGIN CERTIFICATE----- +MIIDqTCCApGgAwIBAgIJALFLXI21jEHrMA0GCSqGSIb3DQEBCwUAMGsxCzAJBgNV +BAYTAlVTMREwDwYDVQQIDAhNaWNoaWdhbjESMBAGA1UEBwwJQW5uIEFyYm9yMRIw +EAYDVQQKDAlJbnRlcm5ldDIxITAfBgNVBAMMGGNvbWFuYWdlLW1hdGNoLndvcmti +ZW5jaDAeFw0yNDEyMTkxNDI3NDhaFw0zNDEyMTcxNDI3NDhaMGsxCzAJBgNVBAYT +AlVTMREwDwYDVQQIDAhNaWNoaWdhbjESMBAGA1UEBwwJQW5uIEFyYm9yMRIwEAYD +VQQKDAlJbnRlcm5ldDIxITAfBgNVBAMMGGNvbWFuYWdlLW1hdGNoLndvcmtiZW5j +aDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALKgirFsUBMGr8+H5QtY +e/w8HB5spFUJUX7+Ako1v9yY95WYolbs5s8/TO8iVdRw38yn7mVOavPpquhEfuBg +oUI4iGftowEv+cT7C1ALZHfHr7cpYGOYS0sHOXWVaUx6ggPR57Vs+gb/3sLA9AUR +F+AUG+Fkd49yWF+MwnV8ieA88qdx828RdfmWqeO3VAjNXxsWN7/hX9RKBmBSS0n0 +6xaSIqA/5vTD+8kA+D0Rvvv2xBmpBJo+FbLhA9qz2NJM7iVy7xxC/HQojBrXt7qd +63EkPv7H6o6sBzZQ4oxyT3on8E6tUPfa/jrRhHuJt9JmDVEZyvhOkidDyvZef+Qr +bckCAwEAAaNQME4wHQYDVR0OBBYEFPXB9x9X7k3gk3Jwm1BS4/HFldPVMB8GA1Ud +IwQYMBaAFPXB9x9X7k3gk3Jwm1BS4/HFldPVMAwGA1UdEwQFMAMBAf8wDQYJKoZI +hvcNAQELBQADggEBACXerk/2Q4+Hw6laPj/IkreUgrHe9oCt3EjbMSTjUERp6j/c +Trmy/QefGVICpGPnBNV5XcDmPMoAG5UJ5wxG3lXu2VFuf1qhs4yuTzYuskZGijEv +xGIxhMuhPuRZrccfrqMXMGS0HV0kPKVJcTD21wzoJNzvBxZG1YGshehBUComsjFt +YHaqHD4tgMCA+TElILi9GJk9hiqc4+X6V/XXPDitXXx+eKC4fNrXfdJ+tb5eE/A7 +a6204TeVdOX+iChjJOOcSJY3uLto/Ez0dVxrMIEbppZWMlrl7tlJVS9Y4lKkw3FC +XDWW3UplClTk3tCtfhfF1zLm2gk40ep38o8O8NY= +-----END CERTIFICATE----- diff --git a/Workbench/comanage_match/container_files/httpd/match-ssl.key b/Workbench/comanage_match/container_files/httpd/match-ssl.key new file mode 100644 index 0000000..bad477c --- /dev/null +++ b/Workbench/comanage_match/container_files/httpd/match-ssl.key @@ -0,0 +1,27 @@ +-----BEGIN RSA PRIVATE KEY----- +MIIEowIBAAKCAQEAsqCKsWxQEwavz4flC1h7/DwcHmykVQlRfv4CSjW/3Jj3lZii +Vuzmzz9M7yJV1HDfzKfuZU5q8+mq6ER+4GChQjiIZ+2jAS/5xPsLUAtkd8evtylg +Y5hLSwc5dZVpTHqCA9HntWz6Bv/ewsD0BREX4BQb4WR3j3JYX4zCdXyJ4Dzyp3Hz +bxF1+Zap47dUCM1fGxY3v+Ff1EoGYFJLSfTrFpIioD/m9MP7yQD4PRG++/bEGakE +mj4VsuED2rPY0kzuJXLvHEL8dCiMGte3up3rcSQ+/sfqjqwHNlDijHJPeifwTq1Q +99r+OtGEe4m30mYNURnK+E6SJ0PK9l5/5CttyQIDAQABAoIBAFZBC3fNE4V8bxzJ +RCKMYaJU7EcMsvWVAFNQGI75EWJWQwdroshSsMlWibHXZJamwoqydH1atm59YNez +a4ixYGz3m3aD23hRUEx75OSL+8GTHRhW1IKDIahjHq3WrfgOGAX8L+T9cGY827Yz +MiHYNS0wyJ23w7vyvRW2hJfywSkTtW1l2yXHrU8/AYcq0in07GPeIdSnmrRuov+b +kPAkiLkJBXrMmPkKX0qQ9jCU2hdZVHtlaoMSr2/6klNn2ynNLST08W9Hd5qQTbpw +eDmKQZYUH2W/dEnmii4MzA9FiW0s6sPV5NSMQAZoWpSk2bt1rAFZp5UjWGuXX5gz +xGRahFkCgYEA7fNDS/+O/lPTjaAdoZ9triYrKHdRTlNwfenkinghMj/yKLFmCu6/ +C+6sGvJELJaJqQc1rYSwNhd3VeI+lpqqTmPrtid16ZD9InQbA2Zywa5XI1okCWtH +TQccSRE9B4Ow4NUfjIyFeI6u1xq3P+2sM5EXWMLl7g2nMKKCejoFQC8CgYEAwC1J +pwBvLFfTUMNxoILpXx31xcrKvRCfGWRWB8hyj2x14/7qhpGueUkjqHSRl0fW6urk +zdmiPRmb2R68bOZ2alkbvgrxWyicSoRWyaLsipbk0H4o3tBOxZHTGqdY/6czlBJX +vYHc1qi3+Ak/+xYXxh3d13uNpVq72d2pNx9we4cCgYEAlGAWXLN01P4scqmfEIM7 +f1ZpnwgX+QFqqflI+1dBS/Y36EwGV1bcZnJje0IKZMtR98Z5IEQXJQOo9DLp2DuF +avA/sQwWKJiyX+OKXKprcH5n87Fnuz/b7Bo89wr6xU7G4svCqn+NUsmWGKeeEQ0B +Tf5xUnXlrnVxBZCwT8sSLx0CgYBxcYp74f6+n22nzGfkB8N5mbb+tpJtf0Vb+OXs +HEC8N5t0JoQNQixLfohlJcLYGdldvaGpfqKODPL5/XHfm0Al0UpWKiGF3Xg9aNfO +mbWmriKOjRrVRQRrDoUew9D+wZXp/9X5kZJqyRgofFVfhBAurGzLiiz4gpJHrtj4 +KD//OwKBgAkrQfT4pvsiUi+c8oCEiHd/rR3e+Q3mhJrx3/lRWff7X7lb90JeVa9y +xwfe9V/mWhihXCVPJMyyMKrfonDBlsXW7EiruJxIOa11hNXD07UsOYwKk0WAhmXU +iv7FsRK9JStKTKw/sI9P8H+Xfi/2zyc+8vJJprXdZtJBnTM4/fEr +-----END RSA PRIVATE KEY----- diff --git a/Workbench/comanage_match/container_files/shibboleth/attribute-map.xml b/Workbench/comanage_match/container_files/shibboleth/attribute-map.xml new file mode 100644 index 0000000..f7580d0 --- /dev/null +++ b/Workbench/comanage_match/container_files/shibboleth/attribute-map.xml @@ -0,0 +1,169 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/Workbench/comanage_match/container_files/shibboleth/idp-metadata.xml b/Workbench/comanage_match/container_files/shibboleth/idp-metadata.xml new file mode 100644 index 0000000..7d33cd1 --- /dev/null +++ b/Workbench/comanage_match/container_files/shibboleth/idp-metadata.xml @@ -0,0 +1,202 @@ + + + + + + + example.org + + + + + + + +MIIDEzCCAfugAwIBAgIUS9SuTXwsFVVG+LjOEAbLqqT/el0wDQYJKoZIhvcNAQEL +BQAwFTETMBEGA1UEAwwKaWRwdGVzdGJlZDAeFw0xNTEyMTEwMjIwMjZaFw0zNTEy +MTEwMjIwMjZaMBUxEzARBgNVBAMMCmlkcHRlc3RiZWQwggEiMA0GCSqGSIb3DQEB +AQUAA4IBDwAwggEKAoIBAQCMAoDHx8xCIfv/6QKqt9mcHYmEJ8y2dKprUbpdcOjH +YvNPIl/lHPsUyrb+Nc+q2CDeiWjVk1mWYq0UpIwpBMuw1H6+oOqr4VQRi65pin0M +SfE0MWIaFo5FPvpvoptkHD4gvREbm4swyXGMczcMRfqgalFXhUD2wz8W3XAM5Cq2 +03XeJbj6TwjvKatG5XPdeUe2FBGuOO2q54L1hcIGnLMCQrg7D31lR13PJbjnJ0No +5C3k8TPuny6vJsBC03GNLNKfmrKVTdzr3VKp1uay1G3DL9314fgmbl8HA5iRQmy+ +XInUU6/8NXZSF59p3ITAOvZQeZsbJjg5gGDip5OZo9YlAgMBAAGjWzBZMB0GA1Ud +DgQWBBRPlM4VkKZ0U4ec9GrIhFQl0hNbLDA4BgNVHREEMTAvggppZHB0ZXN0YmVk +hiFodHRwczovL2lkcHRlc3RiZWQvaWRwL3NoaWJib2xldGgwDQYJKoZIhvcNAQEL +BQADggEBAIZ0a1ov3my3ljJG588I/PHx+TxAWONWmpKbO9c/qI3Drxk4oRIffiac +ANxdvtabgIzrlk5gMMisD7oyqHJiWgKv5Bgctd8w3IS3lLl7wHX65mTKQRXniG98 +NIjkvfrhe2eeJxecOqnDI8GOhIGCIqZUn8ShdM/yHjhQ2Mh0Hj3U0LlKvnmfGSQl +j0viGwbFCaNaIP3zc5UmCrdE5h8sWL3Fu7ILKM9RyFa2ILHrJScV9t623IcHffHP +IeaY/WtuapsrqRFxuQL9QFWN0FsRIdLmjTq+00+B/XnnKRKFBuWfjhHLF/uu8f+E +t6Lf23Kb8yD6ZR7dihMZAGHnYQ/hlhM= + + + + + + + + + +MIIDFDCCAfygAwIBAgIVAN3vv+b7KN5Se9m1RZsCllp/B/hdMA0GCSqGSIb3DQEB +CwUAMBUxEzARBgNVBAMMCmlkcHRlc3RiZWQwHhcNMTUxMjExMDIyMDE0WhcNMzUx +MjExMDIyMDE0WjAVMRMwEQYDVQQDDAppZHB0ZXN0YmVkMIIBIjANBgkqhkiG9w0B +AQEFAAOCAQ8AMIIBCgKCAQEAh91caeY0Q85uhaUyqFwP2bMjwMFxMzRlAoqBHd7g +u6eo4duaeLz1BaoR2XTBpNNvFR5oHH+TkKahVDGeH5+kcnIpxI8JPdsZml1srvf2 +Z6dzJsulJZUdpqnngycTkGtZgEoC1vmYVky2BSAIIifmdh6s0epbHnMGLsHzMKfJ +Cb/Q6dYzRWTCPtzE2VMuQqqWgeyMr7u14x/Vqr9RPEFsgY8GIu5jzB6AyUIwrLg+ +MNkv6aIdcHwxYTGL7ijfy6rSWrgBflQoYRYNEnseK0ZHgJahz4ovCag6wZAoPpBs +uYlY7lEr89Ucb6NHx3uqGMsXlDFdE4QwfDLLhCYHPvJ0uwIDAQABo1swWTAdBgNV +HQ4EFgQUAkOgED3iYdmvQEOMm6u/JmD/UTQwOAYDVR0RBDEwL4IKaWRwdGVzdGJl +ZIYhaHR0cHM6Ly9pZHB0ZXN0YmVkL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEB +CwUAA4IBAQBIdd4YWlnvJjql8+zKKgmWgIY7U8DA8e6QcbAf8f8cdE33RSnjI63X +sv/y9GfmbAVAD6RIAXPFFeRYJ08GOxGI9axfNaKdlsklJ9bk4ducHqgCSWYVer3s +RQBjxyOfSTvk9YCJvdJVQRJLcCvxwKakFCsOSnV3t9OvN86Ak+fKPVB5j2fM/0fZ +Kqjn3iqgdNPTLXPsuJLJO5lITRiBa4onmVelAiCstI9PQiaEck+oAHnMTnC9JE/B +DHv3e4rwq3LznlqPw0GSd7xqNTdMDwNOWjkuOr3sGpWS8ms/ZHHXV1Vd22uPe70i +s00xrv14zLifcc8oj5DYzOhYRifRXgHX + + + + + + + + + +MIIDEzCCAfugAwIBAgIUG6Nn1rlERS1vsi88tcdzSYX0oqAwDQYJKoZIhvcNAQEL +BQAwFTETMBEGA1UEAwwKaWRwdGVzdGJlZDAeFw0xNTEyMTEwMjIwMTRaFw0zNTEy +MTEwMjIwMTRaMBUxEzARBgNVBAMMCmlkcHRlc3RiZWQwggEiMA0GCSqGSIb3DQEB +AQUAA4IBDwAwggEKAoIBAQCBXv0o3fmT8iluyLjJ4lBAVCW+ZRVyEXPYQuRi7vfD +cO4a6d1kxiJLsaK0W88VNxjFQRr8PgDkWr28vwoH1rgk4pLsszLD48DBzD942peJ +l/S6FnsIJjmaHcBh4pbNhU4yowu63iKkvttrcZAEbpEro6Z8CziWEx8sywoaYEQG +ifPkr9ORV6Cn3txq+9gMBePG41GrtZrUGIu+xrndL0Shh4Pq0eq/9MAsVlIIXEa8 +9WfH8J2kFcTOfoWtIc70b7TLZQsx4YnNcnrGLSUEcstFyPLX+Xtv5SNZF89OOIxX +VNjNvgE5DbJb9hMM4UAFqI+1bo9QqtxwThjc/sOvIxzNAgMBAAGjWzBZMB0GA1Ud +DgQWBBStTyogRPuAVG6q7yPyav1uvE+7pTA4BgNVHREEMTAvggppZHB0ZXN0YmVk +hiFodHRwczovL2lkcHRlc3RiZWQvaWRwL3NoaWJib2xldGgwDQYJKoZIhvcNAQEL +BQADggEBAFMfoOv+oISGjvamq7+Y4G7ep5vxlAPeK3RATYPYvAmyH946qZXh98ni +QXyuqZW5P5eEt86toY45IwDU5r09SKwHughEe99iiEkxh0mb2qo84qX9/qcg+kyN +jeLd/OSyolpUCEFNwOFcog7pj7Eer+6AHbwTn1Mjb5TBsKwtDMJsaxPvdj0u7M5r +xL/wHkFhn1rCo2QiojzjSlV3yLTh49iTyhE3cG+RxaNKDCxhp0jSSLX1BW/ZoPA8 ++PMJEA+Q0QbyRD8aJOHN5O8jGxCa/ZzcOnYVL6AsEXoDiY3vAUYh1FUonOWw0m9H +p+tGUbGS2l873J5PrsbpeKEVR/IIoKo= + + + + + + + urn:mace:shibboleth:1.0:nameIdentifier + urn:oasis:names:tc:SAML:2.0:nameid-format:transient + + + + + + + + + + + + + localhost + + + + + + +MIIDEzCCAfugAwIBAgIUS9SuTXwsFVVG+LjOEAbLqqT/el0wDQYJKoZIhvcNAQEL +BQAwFTETMBEGA1UEAwwKaWRwdGVzdGJlZDAeFw0xNTEyMTEwMjIwMjZaFw0zNTEy +MTEwMjIwMjZaMBUxEzARBgNVBAMMCmlkcHRlc3RiZWQwggEiMA0GCSqGSIb3DQEB +AQUAA4IBDwAwggEKAoIBAQCMAoDHx8xCIfv/6QKqt9mcHYmEJ8y2dKprUbpdcOjH +YvNPIl/lHPsUyrb+Nc+q2CDeiWjVk1mWYq0UpIwpBMuw1H6+oOqr4VQRi65pin0M +SfE0MWIaFo5FPvpvoptkHD4gvREbm4swyXGMczcMRfqgalFXhUD2wz8W3XAM5Cq2 +03XeJbj6TwjvKatG5XPdeUe2FBGuOO2q54L1hcIGnLMCQrg7D31lR13PJbjnJ0No +5C3k8TPuny6vJsBC03GNLNKfmrKVTdzr3VKp1uay1G3DL9314fgmbl8HA5iRQmy+ +XInUU6/8NXZSF59p3ITAOvZQeZsbJjg5gGDip5OZo9YlAgMBAAGjWzBZMB0GA1Ud +DgQWBBRPlM4VkKZ0U4ec9GrIhFQl0hNbLDA4BgNVHREEMTAvggppZHB0ZXN0YmVk +hiFodHRwczovL2lkcHRlc3RiZWQvaWRwL3NoaWJib2xldGgwDQYJKoZIhvcNAQEL +BQADggEBAIZ0a1ov3my3ljJG588I/PHx+TxAWONWmpKbO9c/qI3Drxk4oRIffiac +ANxdvtabgIzrlk5gMMisD7oyqHJiWgKv5Bgctd8w3IS3lLl7wHX65mTKQRXniG98 +NIjkvfrhe2eeJxecOqnDI8GOhIGCIqZUn8ShdM/yHjhQ2Mh0Hj3U0LlKvnmfGSQl +j0viGwbFCaNaIP3zc5UmCrdE5h8sWL3Fu7ILKM9RyFa2ILHrJScV9t623IcHffHP +IeaY/WtuapsrqRFxuQL9QFWN0FsRIdLmjTq+00+B/XnnKRKFBuWfjhHLF/uu8f+E +t6Lf23Kb8yD6ZR7dihMZAGHnYQ/hlhM= + + + + + + + + + +MIIDFDCCAfygAwIBAgIVAN3vv+b7KN5Se9m1RZsCllp/B/hdMA0GCSqGSIb3DQEB +CwUAMBUxEzARBgNVBAMMCmlkcHRlc3RiZWQwHhcNMTUxMjExMDIyMDE0WhcNMzUx +MjExMDIyMDE0WjAVMRMwEQYDVQQDDAppZHB0ZXN0YmVkMIIBIjANBgkqhkiG9w0B +AQEFAAOCAQ8AMIIBCgKCAQEAh91caeY0Q85uhaUyqFwP2bMjwMFxMzRlAoqBHd7g +u6eo4duaeLz1BaoR2XTBpNNvFR5oHH+TkKahVDGeH5+kcnIpxI8JPdsZml1srvf2 +Z6dzJsulJZUdpqnngycTkGtZgEoC1vmYVky2BSAIIifmdh6s0epbHnMGLsHzMKfJ +Cb/Q6dYzRWTCPtzE2VMuQqqWgeyMr7u14x/Vqr9RPEFsgY8GIu5jzB6AyUIwrLg+ +MNkv6aIdcHwxYTGL7ijfy6rSWrgBflQoYRYNEnseK0ZHgJahz4ovCag6wZAoPpBs +uYlY7lEr89Ucb6NHx3uqGMsXlDFdE4QwfDLLhCYHPvJ0uwIDAQABo1swWTAdBgNV +HQ4EFgQUAkOgED3iYdmvQEOMm6u/JmD/UTQwOAYDVR0RBDEwL4IKaWRwdGVzdGJl +ZIYhaHR0cHM6Ly9pZHB0ZXN0YmVkL2lkcC9zaGliYm9sZXRoMA0GCSqGSIb3DQEB +CwUAA4IBAQBIdd4YWlnvJjql8+zKKgmWgIY7U8DA8e6QcbAf8f8cdE33RSnjI63X +sv/y9GfmbAVAD6RIAXPFFeRYJ08GOxGI9axfNaKdlsklJ9bk4ducHqgCSWYVer3s +RQBjxyOfSTvk9YCJvdJVQRJLcCvxwKakFCsOSnV3t9OvN86Ak+fKPVB5j2fM/0fZ +Kqjn3iqgdNPTLXPsuJLJO5lITRiBa4onmVelAiCstI9PQiaEck+oAHnMTnC9JE/B +DHv3e4rwq3LznlqPw0GSd7xqNTdMDwNOWjkuOr3sGpWS8ms/ZHHXV1Vd22uPe70i +s00xrv14zLifcc8oj5DYzOhYRifRXgHX + + + + + + + + + +MIIDEzCCAfugAwIBAgIUG6Nn1rlERS1vsi88tcdzSYX0oqAwDQYJKoZIhvcNAQEL +BQAwFTETMBEGA1UEAwwKaWRwdGVzdGJlZDAeFw0xNTEyMTEwMjIwMTRaFw0zNTEy +MTEwMjIwMTRaMBUxEzARBgNVBAMMCmlkcHRlc3RiZWQwggEiMA0GCSqGSIb3DQEB +AQUAA4IBDwAwggEKAoIBAQCBXv0o3fmT8iluyLjJ4lBAVCW+ZRVyEXPYQuRi7vfD +cO4a6d1kxiJLsaK0W88VNxjFQRr8PgDkWr28vwoH1rgk4pLsszLD48DBzD942peJ +l/S6FnsIJjmaHcBh4pbNhU4yowu63iKkvttrcZAEbpEro6Z8CziWEx8sywoaYEQG +ifPkr9ORV6Cn3txq+9gMBePG41GrtZrUGIu+xrndL0Shh4Pq0eq/9MAsVlIIXEa8 +9WfH8J2kFcTOfoWtIc70b7TLZQsx4YnNcnrGLSUEcstFyPLX+Xtv5SNZF89OOIxX +VNjNvgE5DbJb9hMM4UAFqI+1bo9QqtxwThjc/sOvIxzNAgMBAAGjWzBZMB0GA1Ud +DgQWBBStTyogRPuAVG6q7yPyav1uvE+7pTA4BgNVHREEMTAvggppZHB0ZXN0YmVk +hiFodHRwczovL2lkcHRlc3RiZWQvaWRwL3NoaWJib2xldGgwDQYJKoZIhvcNAQEL +BQADggEBAFMfoOv+oISGjvamq7+Y4G7ep5vxlAPeK3RATYPYvAmyH946qZXh98ni +QXyuqZW5P5eEt86toY45IwDU5r09SKwHughEe99iiEkxh0mb2qo84qX9/qcg+kyN +jeLd/OSyolpUCEFNwOFcog7pj7Eer+6AHbwTn1Mjb5TBsKwtDMJsaxPvdj0u7M5r +xL/wHkFhn1rCo2QiojzjSlV3yLTh49iTyhE3cG+RxaNKDCxhp0jSSLX1BW/ZoPA8 ++PMJEA+Q0QbyRD8aJOHN5O8jGxCa/ZzcOnYVL6AsEXoDiY3vAUYh1FUonOWw0m9H +p+tGUbGS2l873J5PrsbpeKEVR/IIoKo= + + + + + + + + + + + + + + + diff --git a/Workbench/comanage_match/container_files/shibboleth/shibboleth2.xml b/Workbench/comanage_match/container_files/shibboleth/shibboleth2.xml new file mode 100644 index 0000000..8f7972a --- /dev/null +++ b/Workbench/comanage_match/container_files/shibboleth/shibboleth2.xml @@ -0,0 +1,113 @@ + + + + + + + + + + + + + + + SAML2 + + + + SAML2 Local + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/Workbench/comanage_match/container_files/shibboleth/sp-encrypt-cert.pem b/Workbench/comanage_match/container_files/shibboleth/sp-encrypt-cert.pem new file mode 100644 index 0000000..a1a8978 --- /dev/null +++ b/Workbench/comanage_match/container_files/shibboleth/sp-encrypt-cert.pem @@ -0,0 +1,25 @@ +-----BEGIN CERTIFICATE----- +MIIERzCCAq+gAwIBAgIUMC5kAwOH+9io4LQZ7Km3GoOZCjQwDQYJKoZIhvcNAQEL +BQAwIzEhMB8GA1UEAxMYY29tYW5hZ2UtbWF0Y2gud29ya2JlbmNoMB4XDTI0MTIx +OTE0NDEyNVoXDTM0MTIxNzE0NDEyNVowIzEhMB8GA1UEAxMYY29tYW5hZ2UtbWF0 +Y2gud29ya2JlbmNoMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAupwd +OA+j10PAlvPoCnl85MGUuV/atEBO2zASjPUP8izSBNqqVptgh3fpRDoNj0v2/dMp +WUUdSV4j8qkGBq5TMu+/zpweAYAH0jKZtftUpe1olVly4xeGH+SNPmiY6zIWYGZk +uSiIcN2WWNFZfgWwgqHxkaB9NiQPsPyYyaABumzRoNXNtJvyuEo2uDJoxG76r6Ae +wUp2EQJ9mxN1I5vIdPkXLig+iTirNPmZoprfAFNP7tVwQJ4GU1hW0rWHeJxVy5Dm +4RGCdfUwoEPwxct+Yugh2kwDCCIwAoxdMInYgFWg7jBCYu4axU/99E9FFrlrTyTn +Y4IV8dsDnZiy8msPWKPUics8wNKnbacROXAqn01Q6HsSqpcybk/QgBxrfAi2jQU/ +jbkjafD6ppKhRRF+r6Csb2bFDNwAOWrb/ifihMgVgbUNpKjliFuF9laojwi64QmR +3bC/RVotvABi5Y5GR9C0J+P7YXE/cJP0GKtiz9oq/j1xYCWuAGOBLj06+MY3AgMB +AAGjczBxMFAGA1UdEQRJMEeCGGNvbWFuYWdlLW1hdGNoLndvcmtiZW5jaIYraHR0 +cHM6Ly9jb21hbmFnZS1tYXRjaC53b3JrYmVuY2gvc2hpYmJvbGV0aDAdBgNVHQ4E +FgQUdznHRrLMtzRfjf3SoLhtK/7wZykwDQYJKoZIhvcNAQELBQADggGBALeMd3G8 +ZDFMW0RzmBZCXLG/1F8UB0QiLZcbeT70GSNzBFNHhb9JEOSVVdO3HY/Y9/FZkhhZ +fzL4hP4EmalS+qSH7doAtbVbA6b86iXqqKbWpMNC+U3iiEGqWIB6vkthajvD0RXv +0k6Uq0zIpKyzjoh+vraw1F6F0yxg5XuaZHW6/c0iOLgxG2qLJzDbjtMxqsBYONqZ +CEqFlwEY4JRNMssq96R8lHxi5DSwD3paHAvvZ6wItUO/RZnJxEIm65PXxIpPvK3U +093zKljkj1H6ib64ZC4oAic7fAeA6xes9LAz+iaj4MUxMUCXjvFElhJIOQAI8eI4 +EU+BYcdX/HNwXMfBpDQbt1hY6K+sLJE5cH6rig03crJtstUPXtJN18+fNQNIFNcX +WAxfOhDTCgRXADolugX3VpQ70HoyL4aZug9+4VonGpNPe4GTxMMiN3GvF5mfZNjQ +5U8L8uXOKN4oqZjecmSnDoZaU3elTKyiD6yDmDk+GVBWZtErcQzx/T3Wrg== +-----END CERTIFICATE----- diff --git a/Workbench/comanage_match/container_files/shibboleth/sp-encrypt-key.pem b/Workbench/comanage_match/container_files/shibboleth/sp-encrypt-key.pem new file mode 100644 index 0000000..61ba62a --- /dev/null +++ b/Workbench/comanage_match/container_files/shibboleth/sp-encrypt-key.pem @@ -0,0 +1,40 @@ +-----BEGIN PRIVATE KEY----- +MIIG/QIBADANBgkqhkiG9w0BAQEFAASCBucwggbjAgEAAoIBgQC6nB04D6PXQ8CW +8+gKeXzkwZS5X9q0QE7bMBKM9Q/yLNIE2qpWm2CHd+lEOg2PS/b90ylZRR1JXiPy +qQYGrlMy77/OnB4BgAfSMpm1+1Sl7WiVWXLjF4Yf5I0+aJjrMhZgZmS5KIhw3ZZY +0Vl+BbCCofGRoH02JA+w/JjJoAG6bNGg1c20m/K4Sja4MmjEbvqvoB7BSnYRAn2b +E3Ujm8h0+RcuKD6JOKs0+Zmimt8AU0/u1XBAngZTWFbStYd4nFXLkObhEYJ19TCg +Q/DFy35i6CHaTAMIIjACjF0widiAVaDuMEJi7hrFT/30T0UWuWtPJOdjghXx2wOd +mLLyaw9Yo9SJyzzA0qdtpxE5cCqfTVDoexKqlzJuT9CAHGt8CLaNBT+NuSNp8Pqm +kqFFEX6voKxvZsUM3AA5atv+J+KEyBWBtQ2kqOWIW4X2VqiPCLrhCZHdsL9FWi28 +AGLljkZH0LQn4/thcT9wk/QYq2LP2ir+PXFgJa4AY4EuPTr4xjcCAwEAAQKCAYAd +9daTG5+4ff47vikxFVRB/fp80LDyY6jFdDBmRSosPZnygZD7mrKizVO8Sn3G1fFv +yylGVdxf3Sd0XELFa9Obx/ZJm7MNlpqq2sjm+NUcVsOFxvi1ER/Nmwo6TNzQVhhV +ndrqB2HwjQMIe4QcwZkXQBzivpubx6plRgjZxkDAx5vYcLs4FhmgEPo8FIvRjefd +rp2Bdw0Bqh60eSlDcE18ykk4demkal7CgJh0DN1k1fttYwNEvJpTY0l9RvvbF25A +agyhoc2Hqbu7yAXkiYnnSVF7lY7g9HCBVZgNasY6I9oQv1VdDXB08ER0RRgh+3b1 +X6dkn3adHeWfrteE51TORv6bNDp013JNeDImfJRlBCLrWtGwTi2c1/Xol2D6ildS +FwBQ9UQAQzytMky5CYgs+/cUuyVNI5rmcCnrB8zcMa5mq0p/ESl0OUR3fSBOM2p5 +jSJS7PWKDr6vnq58if3fpzhO7I2F4XS7Ms9fOOrE8dtueCD9fyVxZSEzFJDvaIEC +gcEA70O/y4YxoL1Qha7h+9yHKUJOi4KkyYs/4JFth/JtN1rmjsZSZk0MrpZKIpEI +6VphRhN4aG6UoUZLMQA3jMVy+5bSGnVbXhBcvLHuVYCQDZfVYGBlt3qwFDfPtsmz +Ti+1PFY1ozyrYlpr3yEXeYJ6VQ/Ltty5Dm5KZCYYtQ/EWLvmIA9iGCu9LeNH1DdQ +rvbkfCqGeK4nemhmFh4jHf/j8i25Rrl3TXZbyySH8EdvsobHWOwNFDL2uJQx0ySx +c1PhAoHBAMepiFCCbm5eejjB4arahI/w1yFDo6t1YDO9GrKxUJjgi0FbScFLCUMi +Yn7WaMWvyrVbq4HLdVSPAllQoXSQmMWssKH4XT97nBO5omlYAbB/bEPKwCSaDclX +PiIYoUMg7Yx6n0EccH+zDLNSvQzap1of40hr1AcqULd2fBEkYgERVBx1zxxJkL5y +xqebSQBvcVo5aLkQNNejRfXY89cdoQRlhf6uhP32QGzB75ZnTrIpSgruPGeVaXXH +jv95kJPdFwKBwQDJW6jjrXHCptBHUSBaCAOv01+qxS3Nd+UwJvOY/4qulU+HRJxA +AAP2QgDuCkUHrcpDYUtqB/YJq9DH0jjtvZXA6fKz1aQpC3ggTVYYmvOgnPE0BKxV +t2jL+xRR7nl6CWhq+Np3IC3TvekehQjud8JgJ8T3hdYvsN3mXrFYX4aMbsWCoa+a +S+UP40Cl9k9uj9VGMbutgFM1DvsrDf3b12iMfbJ5NMiUZlFmKr5ElroH8ql9ylpP +b3x3ZjBwU2cLecECgcBPddb8Q4xzfEIkCHUpK+IJ7w2O/X5LpGDu9lmDuDGdRe/l +yNDnjldXUn3kgKwd0MJZvuvYsgI17tw+c2puG4XRVdLOAywJMcaByyUpy46QkYWi +zTP+3RiTgpcFtsunDZm8iKiMnybei4GIdGssjHCB26L2lYNCfsK04QCrSdF/H0hc +Mz6DwXtLcB5DYfeBpthz0dktnZeKIj6bgwY4HGCSgVz8aLQg5jnpjp0tPFwDZ49C +HmIHz1yzNQJiBh1V220CgcAGRt05uQakG/5/8H5Fbntgd/Pf/UiR99sa/D0LMdGO +FLFkq+ut4/oGiTYU18vPXI/N78R3QXZmOVpxvZNQQU16q3jb/S9RSkMiEJvhHOD+ +J+0Ix7+q4tJKbWsAAcFFMUfxJeLJJvOpone6yl5t8179voDCsHe39pWRZfm2osTw +1jL9yBshtmbdGDnLcru7+uX9VFoEe+rUYP8g1d0+ePG+h3YiOcSB1NNaZJ46s8io +nGtWNRODGXsz8Jg/emR5/5s= +-----END PRIVATE KEY----- diff --git a/Workbench/comanage_match/container_files/shibboleth/sp-signing-cert.pem b/Workbench/comanage_match/container_files/shibboleth/sp-signing-cert.pem new file mode 100644 index 0000000..b8d2e38 --- /dev/null +++ b/Workbench/comanage_match/container_files/shibboleth/sp-signing-cert.pem @@ -0,0 +1,25 @@ +-----BEGIN CERTIFICATE----- +MIIERzCCAq+gAwIBAgIUXj29r7vhVtrbJcAUX8B87tW2ziEwDQYJKoZIhvcNAQEL +BQAwIzEhMB8GA1UEAxMYY29tYW5hZ2UtbWF0Y2gud29ya2JlbmNoMB4XDTI0MTIx +OTE0NDEwM1oXDTM0MTIxNzE0NDEwM1owIzEhMB8GA1UEAxMYY29tYW5hZ2UtbWF0 +Y2gud29ya2JlbmNoMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEA9qZI +5W74/kT+jNlGnCUEBQFwTqH1YVDshhtt2rWdKCOh6mnlcg2udFQJTMZKoD8t9NqT +WLUvzAAIHuuiRTdhPwpxBRUvN8eDC3hX47ENapRqRI/ysKudM8f2TayrOsfJoa4D +6k9nqfiCGpUcJMczFpCIltK8aHvTjbXI3myes5yE/CX5vZCMJ3bqLLKrE+Oll3b3 +Vs55wQTttelD4zbGJwdTW1sDJOmsr2TPaPzWw/b5TbjBOpmZbEjMSlU1bP/A+yKb +RRXH9dY/8luOC+kgT/YqEMAPvyRQi9YSc7rO0TBhkD8RDn1EsHgro473Ffe0AIe6 +IH6TAz5kZ7lmpzLPQ4YVP6ePmdlQ+kH5CjkI9DAGQjYYPgXkHUyHG9R43hFznVrb +75Bgd5O0QyrWknOqWJuyBJich9HR9VmZGQo0lG8IsGjryd6i7lVLgijRfZwpbIi0 +F0b98luW8c8ui/c2IyEk5xlF/WE7bL/WQuYJUCLPnOCJfX8rcR/HyhKeMqVbAgMB +AAGjczBxMFAGA1UdEQRJMEeCGGNvbWFuYWdlLW1hdGNoLndvcmtiZW5jaIYraHR0 +cHM6Ly9jb21hbmFnZS1tYXRjaC53b3JrYmVuY2gvc2hpYmJvbGV0aDAdBgNVHQ4E +FgQUHMZ/ShedHfCvlxm4Hgsm/fO1GPMwDQYJKoZIhvcNAQELBQADggGBAHeyhP6r +je3fR+y9tTGO7N2K32Fjb7k5TTSOPCZSCqpk0BQbZy6nELn5z3zfen8TKAAz7j0Y +BuoUvrKa1TCKVvOcJGe3fTgy/c9iXjutNGcjMbbx3AA2+Lfm4k5qrc3GdO3pNK0w +vIGLom1/aWo7bC5CWmGKx4PNxSmaY1rrHWgyS9SBMaGheyKPj70Vmjf7WUEH5rdV +STqqWy3d+tN1BI6vmn1MlxqO4uFFouYaGdu3jpB39Z9Qu7do1GW19LWDRPVSf/ZP +gr93YHYv+jtlW1JboI69+pl8sCBWxiSvLH7Miq2G4AGUtWI12aFWmix8WXSNjPY8 +wqkzT6drukBVCT1pJWzFk/e+XIv2MC5bYlDohI/ySV8wlr0sXHI85nsjdaRRleo/ +yebI1Pxqhy8dCOYUdMDtpaVSaC55uVVt4V7tQdTCoYTKoN5iBc1jrkwirp4URknf +OmwywddKMz6rTHLCBSrTs+F+5Q1XCN4UZy9RUbjWAzcvrZRD5gGa7MtUiA== +-----END CERTIFICATE----- diff --git a/Workbench/comanage_match/container_files/shibboleth/sp-signing-key.pem b/Workbench/comanage_match/container_files/shibboleth/sp-signing-key.pem new file mode 100644 index 0000000..bc08212 --- /dev/null +++ b/Workbench/comanage_match/container_files/shibboleth/sp-signing-key.pem @@ -0,0 +1,40 @@ +-----BEGIN PRIVATE KEY----- +MIIG/QIBADANBgkqhkiG9w0BAQEFAASCBucwggbjAgEAAoIBgQD2pkjlbvj+RP6M +2UacJQQFAXBOofVhUOyGG23atZ0oI6HqaeVyDa50VAlMxkqgPy302pNYtS/MAAge +66JFN2E/CnEFFS83x4MLeFfjsQ1qlGpEj/Kwq50zx/ZNrKs6x8mhrgPqT2ep+IIa +lRwkxzMWkIiW0rxoe9ONtcjebJ6znIT8Jfm9kIwnduossqsT46WXdvdWznnBBO21 +6UPjNsYnB1NbWwMk6ayvZM9o/NbD9vlNuME6mZlsSMxKVTVs/8D7IptFFcf11j/y +W44L6SBP9ioQwA+/JFCL1hJzus7RMGGQPxEOfUSweCujjvcV97QAh7ogfpMDPmRn +uWanMs9DhhU/p4+Z2VD6QfkKOQj0MAZCNhg+BeQdTIcb1HjeEXOdWtvvkGB3k7RD +KtaSc6pYm7IEmJyH0dH1WZkZCjSUbwiwaOvJ3qLuVUuCKNF9nClsiLQXRv3yW5bx +zy6L9zYjISTnGUX9YTtsv9ZC5glQIs+c4Il9fytxH8fKEp4ypVsCAwEAAQKCAYA9 +MlfO2UBdMjgoMTakQkjjhw5a7DNKQH5W7dJNXBdQoLqpQzoDGOLqiPk/u8lDRjm8 +UUkSzu27g1yAc31xCAMQVaJiHPX4tH9Opr7DxyephIZzWXXhIMth0CDL9+YKMQzV +mSvuhGIXmYmKV+nCNEx4Mkc5iLLnh6WfOPXMPg4ISXLzbuaugoFLv2TtzyzERAzP +blyDBLrPyc3C/0vxQaNbhqVHeubmTzYh1HTjuyv8Njh38Lm8tOSMqelKHich0riN +xBeZOvN0hdDpV60HP8ljWUTRGSBnFpY6rSxmx1DJkbP7acFqrL2qavDlYxnntwuj +7ze1FlT3Kc3KdCWPeWpFdvN3bkDieWV7mjXSE125CAxirpzZLY7ETgv/uPrYcNr9 +MEJmpzgH/xhPD+bfxcSZMROezpI+b/gTFXXmdTOncw5QGC7+e7ZtyA6JUF3yNuZo +4zNXDTGMVDYteidx/oG7SjXUEe2JX2hFjf/Z1srMnNp1xaSrL+z4r54OymqJj3EC +gcEA/Y4Xstqq8ej1dm5ps1uNG7bSkjHOGkoxwhWnFkKxZmG+JdmKUVwFROdDpcz/ +X0INqVx/3IT3d8Kv7gHrEWwM8jqhbA1x2pRD/KCK93kVQtFj9XKk63biPBOBH1AD +qH8GqVMD9OXj1tVEXsH3KWyjAxDnnxopU6pWnL18BqMRo+hD5bgHjqSu3HlhXCXS +GLltRnwTnaWpuQIZDM1gA2KITYD6x7XA9SyG58dlzXpjxNvDbbaiLcxzcJYVKhhx +QcUxAoHBAPkHJVEPJ3Io69CcNK5f7JAkCiXVRq+5I+CEveTqnhuZ1VA4D6+spxDv +l3MGRFdPwk00kbmGSMvSyLGzxFu41HTHCJMcyqYBLC3RpWxqOxWK2fU+ksoeGDbf +CyNhiY0km1FS4GlJeK5EBnRRuwIV0GGpel2GTiiiZn4obea0Z5hn4iS6prXXvOVq +NXXbdg+MrZbNxEOvGGPMXYnQgbW+BLQRpKCp9IYl9Xx8/JyEhPzVkOjHq/3ogywl +fklZHNPgSwKBwQC5iEbZDd62QuOSNHrNzjjzxZRRe3Y3kIDWZuerh0OuCemMYqEu +pWoJoDvEz7sxpfC/M7svznASRvha7TZnuivC95n0qeXcrk8NRSBKs2QWT4eYK7p3 +vbcPhKogEnmKyuBB+EfV5H4STl3IBKBpxF+Ht8/0gL0qxmK4MILXjG01BZjhOAb3 +npOBKqROPDJ++vf18oab/YOyp9FSp9kQwQHBzJY0mk9GV72jTim08FCe1LwsxM3p +O0hhYsC728TL/pECgcA+r3bMRcVHLlfV5kw4jLruubO4PEyT1UXbsW5fnlN4XSve +Co6gSRSw5a647J3tYI1ng9Ee41eVvxR37umBsTAByUw2Q+wbB3aIfhpnBQKkdJRS +8JJgwFyWC2UxXc8TMWDLgtIsjqsLKuJ5C03Iw5b1zoSX4EPyZJbqMOEhTs45BgVd ++4IVih3pneehKEI6vc3AhUFfTEcWcA4nr83G4vMqJLrNGpsL3ahC0u9/srgLMPNO +NVztCEdkqHd2nTDtgKsCgcB+ECuCBmNICj9qEiQ29HCjtvfKrHv8WUwKamuHzM+p +dEbzJJVZ/XJ1cOpqfE1/iIJso1dv4BlfiJd/hpQYlXbqbREV9NCkJhe4i8MBAhTb +cQPuzO2/6Vp2544pD2JGg/PXqzNI5U7a0m6HvBxDgMbPUZ2QxLmk1ju02mPGe+5x +l3AGQBSoUqzgc+V/qRZM3mFBBK+8688NdL5aLjeZGXcMn86EAg+wcqaYNJnC4TWY +vy0oyINVpOQFRXbBpdUjQb4= +-----END PRIVATE KEY----- diff --git a/Workbench/comanage_match/container_files/system/setservername.sh b/Workbench/comanage_match/container_files/system/setservername.sh new file mode 100644 index 0000000..a2ab30d --- /dev/null +++ b/Workbench/comanage_match/container_files/system/setservername.sh @@ -0,0 +1,10 @@ +#!/bin/bash + +files="/etc/shibboleth/idp-metadata.xml" + +for file in $files + do + sed -i "s|__CSPHOSTNAME__|$CSPHOSTNAME|g" $file + done + + diff --git a/Workbench/comanage_match_data/Dockerfile b/Workbench/comanage_match_data/Dockerfile new file mode 100644 index 0000000..34035c3 --- /dev/null +++ b/Workbench/comanage_match_data/Dockerfile @@ -0,0 +1,5 @@ +FROM postgres:12 + +COPY container_files/seed-data/ /docker-entrypoint-initdb.d/ + + diff --git a/Workbench/comanage_match_data/container_files/seed-data/addExtension.sql b/Workbench/comanage_match_data/container_files/seed-data/addExtension.sql new file mode 100644 index 0000000..3b939a7 --- /dev/null +++ b/Workbench/comanage_match_data/container_files/seed-data/addExtension.sql @@ -0,0 +1,2 @@ +create extension fuzzystrmatch; + diff --git a/Workbench/docker-compose.yml b/Workbench/docker-compose.yml index adceab6..8a21970 100644 --- a/Workbench/docker-compose.yml +++ b/Workbench/docker-compose.yml @@ -238,6 +238,26 @@ services: volumes: - comanage_data:/var/lib/postgresql/data + comanage_match_data: + build: ./comanage_match_data/ + environment: + POSTGRES_USER: match_user + POSTGRES_PASSWORD: Password1 + POSTGRES_DB: match + networks: + net: + aliases: + - comanage-match-data + ports: + - 55432:5432 + healthcheck: + test: /usr/bin/pg_isready + interval: 30s + timeout: 30s + retries: 3 + volumes: + - comanage_match_data:/var/lib/postgresql/data + comanage_midpoint_data: build: ./comanage_midpoint_data/ environment: @@ -593,6 +613,26 @@ services: aliases: - comanage-cron + comanage_match: + build: + context: ./comanage_match/ + args: + - CSPHOSTNAME + depends_on: + - comanage_match_data + environment: + - ENV + - USERTOKEN + networks: + - net + ports: + - 19443:443 + healthcheck: + test: curl -kf https://127.0.0.1/match/ || exit 1 + interval: 30s + timeout: 30s + retries: 3 + ad: build: context: ./ad/ @@ -665,6 +705,7 @@ volumes: grouper_data_2: source_data: comanage_data: + comanage_match_data: comanage_midpoint_data: comanage_mysql: source_mysql: diff --git a/Workbench/webproxy/container_files/httpd/index.html b/Workbench/webproxy/container_files/httpd/index.html index a087f80..00650d7 100644 --- a/Workbench/webproxy/container_files/httpd/index.html +++ b/Workbench/webproxy/container_files/httpd/index.html @@ -13,6 +13,7 @@

Welcome to the InCommon TAP Workbench!

  • midPoint (4.9)
  • COmanage Registry (4.4.0)
    • +
  • COmanage Match (1.2.0)
  • Shibboleth IdP UI (1.18.0)
    • @@ -39,6 +40,7 @@

    Welcome to the InCommon TAP Workbench!

  • Grouper SP (3.4.1) status
  • midPoint SP (3.4.1) status
  • COmanage SP (3.4.1) status
    • +
  • COmanage Match SP (3.4.1) status
  • Wordpress SP (3.4.1) status
    • diff --git a/Workbench/webproxy/container_files/httpd/proxy.conf b/Workbench/webproxy/container_files/httpd/proxy.conf index 27c9e3f..9ab8fa7 100644 --- a/Workbench/webproxy/container_files/httpd/proxy.conf +++ b/Workbench/webproxy/container_files/httpd/proxy.conf @@ -72,6 +72,11 @@ ProxyPass /registry https://comanage/registry ProxyPassReverse /registry https://comanage/registry ProxyPass /registrySSO https://comanage/registrySSO +ProxyPass /match https://comanage_match/match +ProxyPassReverse /match https://comanage_match/match +ProxyPass /matchSSO https://comanage_match/matchSSO +ProxyPassReverse /matchSSO https://comanage_match/matchSSO + #ProxyPreserveHost on ProxyPass /wordpressSSO https://wordpress_server/wordpressSSO ProxyPass /wordpress https://wordpress_server/wordpress diff --git a/Workbench/webproxy/container_files/mdload/match-sp.xml b/Workbench/webproxy/container_files/mdload/match-sp.xml new file mode 100644 index 0000000..7cf37bc --- /dev/null +++ b/Workbench/webproxy/container_files/mdload/match-sp.xml @@ -0,0 +1,113 @@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + comanage-match.workbench + + CN=comanage-match.workbench + +MIIERzCCAq+gAwIBAgIUXj29r7vhVtrbJcAUX8B87tW2ziEwDQYJKoZIhvcNAQEL +BQAwIzEhMB8GA1UEAxMYY29tYW5hZ2UtbWF0Y2gud29ya2JlbmNoMB4XDTI0MTIx +OTE0NDEwM1oXDTM0MTIxNzE0NDEwM1owIzEhMB8GA1UEAxMYY29tYW5hZ2UtbWF0 +Y2gud29ya2JlbmNoMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEA9qZI +5W74/kT+jNlGnCUEBQFwTqH1YVDshhtt2rWdKCOh6mnlcg2udFQJTMZKoD8t9NqT +WLUvzAAIHuuiRTdhPwpxBRUvN8eDC3hX47ENapRqRI/ysKudM8f2TayrOsfJoa4D +6k9nqfiCGpUcJMczFpCIltK8aHvTjbXI3myes5yE/CX5vZCMJ3bqLLKrE+Oll3b3 +Vs55wQTttelD4zbGJwdTW1sDJOmsr2TPaPzWw/b5TbjBOpmZbEjMSlU1bP/A+yKb +RRXH9dY/8luOC+kgT/YqEMAPvyRQi9YSc7rO0TBhkD8RDn1EsHgro473Ffe0AIe6 +IH6TAz5kZ7lmpzLPQ4YVP6ePmdlQ+kH5CjkI9DAGQjYYPgXkHUyHG9R43hFznVrb +75Bgd5O0QyrWknOqWJuyBJich9HR9VmZGQo0lG8IsGjryd6i7lVLgijRfZwpbIi0 +F0b98luW8c8ui/c2IyEk5xlF/WE7bL/WQuYJUCLPnOCJfX8rcR/HyhKeMqVbAgMB +AAGjczBxMFAGA1UdEQRJMEeCGGNvbWFuYWdlLW1hdGNoLndvcmtiZW5jaIYraHR0 +cHM6Ly9jb21hbmFnZS1tYXRjaC53b3JrYmVuY2gvc2hpYmJvbGV0aDAdBgNVHQ4E +FgQUHMZ/ShedHfCvlxm4Hgsm/fO1GPMwDQYJKoZIhvcNAQELBQADggGBAHeyhP6r +je3fR+y9tTGO7N2K32Fjb7k5TTSOPCZSCqpk0BQbZy6nELn5z3zfen8TKAAz7j0Y +BuoUvrKa1TCKVvOcJGe3fTgy/c9iXjutNGcjMbbx3AA2+Lfm4k5qrc3GdO3pNK0w +vIGLom1/aWo7bC5CWmGKx4PNxSmaY1rrHWgyS9SBMaGheyKPj70Vmjf7WUEH5rdV +STqqWy3d+tN1BI6vmn1MlxqO4uFFouYaGdu3jpB39Z9Qu7do1GW19LWDRPVSf/ZP +gr93YHYv+jtlW1JboI69+pl8sCBWxiSvLH7Miq2G4AGUtWI12aFWmix8WXSNjPY8 +wqkzT6drukBVCT1pJWzFk/e+XIv2MC5bYlDohI/ySV8wlr0sXHI85nsjdaRRleo/ +yebI1Pxqhy8dCOYUdMDtpaVSaC55uVVt4V7tQdTCoYTKoN5iBc1jrkwirp4URknf +OmwywddKMz6rTHLCBSrTs+F+5Q1XCN4UZy9RUbjWAzcvrZRD5gGa7MtUiA== + + + + + + + comanage-match.workbench + + CN=comanage-match.workbench + +MIIERzCCAq+gAwIBAgIUMC5kAwOH+9io4LQZ7Km3GoOZCjQwDQYJKoZIhvcNAQEL +BQAwIzEhMB8GA1UEAxMYY29tYW5hZ2UtbWF0Y2gud29ya2JlbmNoMB4XDTI0MTIx +OTE0NDEyNVoXDTM0MTIxNzE0NDEyNVowIzEhMB8GA1UEAxMYY29tYW5hZ2UtbWF0 +Y2gud29ya2JlbmNoMIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAupwd +OA+j10PAlvPoCnl85MGUuV/atEBO2zASjPUP8izSBNqqVptgh3fpRDoNj0v2/dMp +WUUdSV4j8qkGBq5TMu+/zpweAYAH0jKZtftUpe1olVly4xeGH+SNPmiY6zIWYGZk +uSiIcN2WWNFZfgWwgqHxkaB9NiQPsPyYyaABumzRoNXNtJvyuEo2uDJoxG76r6Ae +wUp2EQJ9mxN1I5vIdPkXLig+iTirNPmZoprfAFNP7tVwQJ4GU1hW0rWHeJxVy5Dm +4RGCdfUwoEPwxct+Yugh2kwDCCIwAoxdMInYgFWg7jBCYu4axU/99E9FFrlrTyTn +Y4IV8dsDnZiy8msPWKPUics8wNKnbacROXAqn01Q6HsSqpcybk/QgBxrfAi2jQU/ +jbkjafD6ppKhRRF+r6Csb2bFDNwAOWrb/ifihMgVgbUNpKjliFuF9laojwi64QmR +3bC/RVotvABi5Y5GR9C0J+P7YXE/cJP0GKtiz9oq/j1xYCWuAGOBLj06+MY3AgMB +AAGjczBxMFAGA1UdEQRJMEeCGGNvbWFuYWdlLW1hdGNoLndvcmtiZW5jaIYraHR0 +cHM6Ly9jb21hbmFnZS1tYXRjaC53b3JrYmVuY2gvc2hpYmJvbGV0aDAdBgNVHQ4E +FgQUdznHRrLMtzRfjf3SoLhtK/7wZykwDQYJKoZIhvcNAQELBQADggGBALeMd3G8 +ZDFMW0RzmBZCXLG/1F8UB0QiLZcbeT70GSNzBFNHhb9JEOSVVdO3HY/Y9/FZkhhZ +fzL4hP4EmalS+qSH7doAtbVbA6b86iXqqKbWpMNC+U3iiEGqWIB6vkthajvD0RXv +0k6Uq0zIpKyzjoh+vraw1F6F0yxg5XuaZHW6/c0iOLgxG2qLJzDbjtMxqsBYONqZ +CEqFlwEY4JRNMssq96R8lHxi5DSwD3paHAvvZ6wItUO/RZnJxEIm65PXxIpPvK3U +093zKljkj1H6ib64ZC4oAic7fAeA6xes9LAz+iaj4MUxMUCXjvFElhJIOQAI8eI4 +EU+BYcdX/HNwXMfBpDQbt1hY6K+sLJE5cH6rig03crJtstUPXtJN18+fNQNIFNcX +WAxfOhDTCgRXADolugX3VpQ70HoyL4aZug9+4VonGpNPe4GTxMMiN3GvF5mfZNjQ +5U8L8uXOKN4oqZjecmSnDoZaU3elTKyiD6yDmDk+GVBWZtErcQzx/T3Wrg== + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/Workbench/webproxy/container_files/system/setservername.sh b/Workbench/webproxy/container_files/system/setservername.sh index 0138b69..594ea7d 100755 --- a/Workbench/webproxy/container_files/system/setservername.sh +++ b/Workbench/webproxy/container_files/system/setservername.sh @@ -1,6 +1,6 @@ #!/bin/bash -files="/etc/shibboleth/idp-metadata.xml /var/www/html/index.html /mdload/grouper-sp.xml /mdload/midpoint-sp.xml /mdload/mpproxy-sp.xml /mdload/comanage-sp.xml /mdload/proxy-sp.xml /mdload/wordpress-sp.xml" +files="/etc/shibboleth/idp-metadata.xml /var/www/html/index.html /mdload/grouper-sp.xml /mdload/midpoint-sp.xml /mdload/mpproxy-sp.xml /mdload/comanage-sp.xml /mdload/proxy-sp.xml /mdload/wordpress-sp.xml /mdload/match-sp.xml" for file in $files do diff --git a/Workbench/webproxy/container_files/system/startWithMDLoad.sh b/Workbench/webproxy/container_files/system/startWithMDLoad.sh index 14080d2..3242f6c 100755 --- a/Workbench/webproxy/container_files/system/startWithMDLoad.sh +++ b/Workbench/webproxy/container_files/system/startWithMDLoad.sh @@ -9,7 +9,8 @@ pushd /mdload ./loadMD.sh midPointSP /mdload/midpoint-sp.xml 0 && \ ./loadMD.sh ProxySP /mdload/proxy-sp.xml 0 && \ ./loadMD.sh WordPressSP /mdload/wordpress-sp.xml 0 && \ - ./loadMD.sh COmanageSP /mdload/comanage-sp.xml 0 + ./loadMD.sh COmanageSP /mdload/comanage-sp.xml 0 && \ + ./loadMD.sh COmanageMatchSP /mdload/match-sp.xml 0 popd wait