gteLocalBuild.adoc
2018-10-16 11:02 clone and build Grouper Training Environment
2018-11-03 Verified as a valid how-to on AWS VM 54.214.116.59, t2.large
ec2-54-214-116-59.us-west-2.compute.amazonaws.com
with the following open ports: 22, 80, 8443, 10389, 18080
Original name: Showcase2018_Docker
khazelton@khazelton-XPS-13-9370:~/opt$ git clone https://github.internet2.edu/docker/grouper_training.git
Cloning into 'grouper_training'...
remote: Counting objects: 1010, done.
remote: Total 1010 (delta 0), reused 0 (delta 0), pack-reused 1010
Receiving objects: 100% (1010/1010), 320.87 KiB | 0 bytes/s, done.
Resolving deltas: 100% (412/412), done.
Checking connectivity... done.
.
khazelton@khazelton-XPS-13-9370:~/opt$ cd grouper_training
khazelton@khazelton-XPS-13-9370:~/opt/grouper_training$ ls -la
total 76
drwxrwxr-x 10 khazelton khazelton 4096 Oct 16 10:54 .
drwxrwxr-x 27 khazelton khazelton 4096 Oct 16 10:54 ..
drwxrwxr-x 3 khazelton khazelton 4096 Oct 16 10:54 base
-rw-rw-r-- 1 khazelton khazelton 51 Oct 16 10:54 common.bash
drwxrwxr-x 3 khazelton khazelton 4096 Oct 16 10:54 ex101
drwxrwxr-x 13 khazelton khazelton 4096 Oct 16 10:54 ex201
drwxrwxr-x 3 khazelton khazelton 4096 Oct 16 10:54 ex211
drwxrwxr-x 3 khazelton khazelton 4096 Oct 16 10:54 ex301
drwxrwxr-x 30 khazelton khazelton 4096 Oct 16 10:54 ex401
drwxrwxr-x 3 khazelton khazelton 4096 Oct 16 10:54 full-demo
drwxrwxr-x 8 khazelton khazelton 4096 Oct 16 10:54 .git
-rw-rw-r-- 1 khazelton khazelton 39 Oct 16 10:54 .gitignore
-rw-rw-r-- 1 khazelton khazelton 6059 Oct 16 10:54 Jenkinsfile
-rw-rw-r-- 1 khazelton khazelton 11357 Oct 16 10:54 LICENSE
-rwxrwxr-x 1 khazelton khazelton 379 Oct 16 10:54 manualBuild.sh
-rw-rw-r-- 1 khazelton khazelton 2233 Oct 16 10:54 README.md
.
khazelton@khazelton-XPS-13-9370:~/opt/grouper_training$ ./manualBuild.sh
.
[khazelton@ip-172-31-32-222 ~]$ docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
2db45c6cb47f tier/grouper-training-env:full_demo "/usr/local/bin/entr…" 28 minutes ago Up 28 minutes 0.0.0.0:389->389/tcp, 80/tcp, 4443/tcp, 0.0.0.0:3306->3306/tcp, 0.0.0.0:8443->443/tcp grouper-demo
.
[khazelton@ip-172-31-32-222 ~]$ wget --no-check-certificate https://localhost:8443/grouper
.
--2018-11-04 00:56:29-- https://localhost:8443/grouper
Resolving localhost (localhost)... ::1, 127.0.0.1
Connecting to localhost (localhost)|::1|:8443... connected.
WARNING: cannot verify localhost's certificate, issued by ‘/C=US/ST=MI/L=Ann Arbor/O=Internet2/TIER/CN=sp.example.org’:
Self-signed certificate encountered.
WARNING: certificate common name ‘sp.example.org’ doesn't match requested host name ‘localhost’.
HTTP request sent, awaiting response... 302 Found
Location: https://localhost:8443/idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZLNbsIwEIRfJfId7IQUqEUipXAoEm0RSXvopXKSDbHk2KnX6c%2FbNxCo6KGcd2Z259MuUDSq5Unnar2D9w7QeV%2BN0siPg4h0VnMjUCLXogHkruBp8rDhwZjx1hpnCqOIlyCCddLopdHYNWBTsB%2BygOfdJiK1cy1ySpUphKoNOj4PwwlNa5nnRoGrx4iGHlIDun1KM%2BKt%2BjOkFofAf%2B2ybGl%2FQCUVnLw7KKWFwtE0fSLeehWRtyBnk6BixXTGZlVQTQAEm4LIp4xVVRhAL0PsYK3RCe0iEjB%2FPvL9EQszxvjNlAe3r8TbnnreSV1Kvb8OJR9EyO%2BzbDsa%2BryAxWOXXkDixQEtPy62F7Cvx4ozYRKfgeyt6VqwJTSG4i%2FMBb2IH3a1%2FLHPW6%2B2Rsni20uUMp9LC8JBRHxC48Hy9wviHw%3D%3D&RelayState=ss%3Amem%3Ad4335fbb29e9d1e186ce4b942d2ceb2ea5756c8c603a631eeddb8a560bdfbfaa [following]
--2018-11-04 00:56:29-- https://localhost:8443/idp/profile/SAML2/Redirect/SSO?SAMLRequest=fZLNbsIwEIRfJfId7IQUqEUipXAoEm0RSXvopXKSDbHk2KnX6c%2FbNxCo6KGcd2Z259MuUDSq5Unnar2D9w7QeV%2BN0siPg4h0VnMjUCLXogHkruBp8rDhwZjx1hpnCqOIlyCCddLopdHYNWBTsB%2BygOfdJiK1cy1ySpUphKoNOj4PwwlNa5nnRoGrx4iGHlIDun1KM%2BKt%2BjOkFofAf%2B2ybGl%2FQCUVnLw7KKWFwtE0fSLeehWRtyBnk6BixXTGZlVQTQAEm4LIp4xVVRhAL0PsYK3RCe0iEjB%2FPvL9EQszxvjNlAe3r8TbnnreSV1Kvb8OJR9EyO%2BzbDsa%2BryAxWOXXkDixQEtPy62F7Cvx4ozYRKfgeyt6VqwJTSG4i%2FMBb2IH3a1%2FLHPW6%2B2Rsni20uUMp9LC8JBRHxC48Hy9wviHw%3D%3D&RelayState=ss%3Amem%3Ad4335fbb29e9d1e186ce4b942d2ceb2ea5756c8c603a631eeddb8a560bdfbfaa
Reusing existing connection to [localhost]:8443.
HTTP request sent, awaiting response... 302 302
Location: /idp/profile/SAML2/Redirect/SSO;jsessionid=E747C29295E5C3890C253DCE5ABF6146?execution=e1s1 [following]
--2018-11-04 00:56:31-- https://localhost:8443/idp/profile/SAML2/Redirect/SSO;jsessionid=E747C29295E5C3890C253DCE5ABF6146?execution=e1s1
Reusing existing connection to [localhost]:8443.
HTTP request sent, awaiting response... 200 200
Length: 2864 (2.8K) [text/html]
Saving to: ‘grouper’
.
100%[=================================================================================================>] 2,864 --.-K/s in 0s
.
2018-11-04 00:56:32 (179 MB/s) - ‘grouper’ saved [2864/2864]
So the training is live, but can’t be reached from outside. Need to edit Shib IdP and SP metadata localhost endpoints to endpoints on this container