Cspwb 19

Workbench/configs-and-secrets/wordpress/httpd/shib.conf

@@ -22,7 +22,7 @@ ShibCompatValidUser Off
 #
 # Ensures handler will be accessible.
 #
-<Location /registrySSO/Shibboleth.sso>
+<Location /wordpresssSSO/Shibboleth.sso>
   AuthType None
   Require all granted
   SetHandler shib

Workbench/configs-and-secrets/wordpress/shibboleth/shibboleth2.xml

@@ -24,7 +24,7 @@
         cookieProps to "https" for SSL-only sites. Note that while we default checkAddress to
         "false", this makes an assertion stolen in transit easier for attackers to misuse.
         -->
-        <Sessions lifetime="28800" timeout="3600" relayState="ss:mem" handlerURL="/registrySSO/Shibboleth.sso"
+        <Sessions lifetime="28800" timeout="3600" relayState="ss:mem" handlerURL="/wordpressSSO/Shibboleth.sso"
                   checkAddress="false" handlerSSL="true" cookieProps="https"
                   redirectLimit="exact">
 

Workbench/docker-compose.yml

@@ -293,14 +293,18 @@ services:
 
   wordpress_server:
     build: ./wordpress_server/
-    container_name: wordpress_server
     networks:
       - net
     depends_on:
       - wordpress_data
     command: bash -c 'if [ ! -s /var/www/html/wp-config.php ];  then while ! nc -z  wordpress_data 3306 ; do echo waiting for mysql on wordpress_data to start; sleep 3; done; /root/wp core download --allow-root && sleep 10 && /root/wp config create --dbname=wordpress --dbuser=wordpress --dbpass=54y6RxN7GfC7aes3 --dbhost=wordpress_data --allow-root; sleep 3 && /root/wp core install --url="http://localhost/" --title="wordpress" --admin_user="admin" --admin_password="54y6RxN7GfC7aes3" --admin_email="sentrifugo.container@gmail.com" --allow-root && /root/wp --allow-root rewrite structure "/%postname%" --hard --debug; /root/wp  rewrite flush --hard --debug --allow-root && sed -i "s/<\/IfModule>/RewriteCond \%{HTTP:Authorization} \^\(\.\*\)\nRewriteRule \^\(\.\*\) - [E=HTTP_AUTHORIZATION:\%1]\n<\/IfModule>\nSetEnvIf Authorization "\(\.\*\)" HTTP_AUTHORIZATION=\$$1/" /var/www/html/.htaccess && /root/sed.sh && /root/wp plugin install jwt-authentication-for-wp-rest-api  --activate --allow-root && /root/wp plugin install wp-rest-api-log --activate --allow-root && /root/wp plugin install shibboleth --activate --allow-root; fi; /usr/local/bin/startup.sh;'
     ports:
       - "80:80"
+    healthcheck:
+      test: curl -s wordpress_server:80
+      interval: 30s
+      timeout: 30s
+      retries: 3
     devices:
       - "/dev/tty:/dev/tty"
     volumes:
@@ -320,7 +324,6 @@ services:
 
   wordpress_data:
     build: ./wordpress_data/
-    container_name: wordpress_data
     networks:
       - net
     volumes:

Workbench/wordpress_server/Dockerfile

@@ -1,4 +1,4 @@
-FROM tier/shibboleth_sp:3.0.4_03122019
+FROM tier/shibboleth_sp:latest
 
 VOLUME /var/www/html