shib and proxy config for comanage

internet2 · Dec 4, 2020 · 5cd22f7 · 5cd22f7
1 parent 4a3c76f
commit 5cd22f7
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 1 deletion.
diff --git a/Workbench/configs-and-secrets/comanage/shibboleth/shibboleth2.xml b/Workbench/configs-and-secrets/comanage/shibboleth/shibboleth2.xml
@@ -24,7 +24,7 @@
         cookieProps to "https" for SSL-only sites. Note that while we default checkAddress to
         "false", this makes an assertion stolen in transit easier for attackers to misuse.
         -->
-        <Sessions lifetime="28800" timeout="3600" relayState="ss:mem" handlerURL="/grouperSSO/Shibboleth.sso"
+        <Sessions lifetime="28800" timeout="3600" relayState="ss:mem" handlerURL="/registrySSO/Shibboleth.sso"
                   checkAddress="false" handlerSSL="true" cookieProps="https"
                   redirectLimit="exact">
 

diff --git a/Workbench/docker-compose.yml b/Workbench/docker-compose.yml
@@ -313,6 +313,7 @@ services:
       - wordpress_data:/var/lib/mysql
     ports:
       - 3306
+
   comanage:
     build: 
       context: ./comanage/
@@ -325,6 +326,10 @@ services:
      - net
     ports:
      - 11443:443
+    volumes:
+     - type: bind
+       source: ./configs-and-secrets/comanage/shibboleth/shibboleth2.xml
+       target: /etc/shibboleth/shibboleth2.xml
 
 networks:
   net:    

diff --git a/Workbench/webproxy/container_files/httpd/proxy.conf b/Workbench/webproxy/container_files/httpd/proxy.conf
@@ -39,4 +39,5 @@ ProxyPass /phpmyadmin https://directory/phpmyadmin
 ProxyPassReverse /phpmyadmin https://directory/phpmyadmin
 
 ProxyPass /registry https://comanage/registry
+ProxyPass /registrySSO https://comanage/registrySSO
 #ProxyPassReverse /comanage https://comanage/