Cadoles
/
ansible-role-sso
10
0
Fork 0
Code Issues 1 Pull Requests 1 Projects Releases Wiki Activity

Using hostname for entity_id instead of haproxy_public_url (#8) 

Co-authored-by: Philippe Caseiro <pcaseiro@cadoles.com>
Reviewed-on: #8
Co-authored-by: pcaseiro <pcaseiro@cadoles.com>
Co-committed-by: pcaseiro <pcaseiro@cadoles.com>
This commit is contained in:
pcaseiro 2023-02-10 09:39:43 +01:00 committed by wpetit
parent 6d4dfc9fd6
commit 806e30489f
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tasks/hydra-saml.yml
View File

@ -59,4 +59,4 @@
mode: u=rw,g=r,o=r mode: u=rw,g=r,o=r
notify: notify:
- Restart cadoles-pod-shibboleth-sp-v3 - Restart cadoles-pod-shibboleth-sp-v3
become: true become: true

4
templates/cadoles-pod-shibboleth-sp-v3.conf.j2
View File

@ -4,7 +4,7 @@ PODMAN_ARGS="\
--network=slirp4netns:allow_host_loopback=true \ --network=slirp4netns:allow_host_loopback=true \
--replace --name 'cadoles-pod-shibboleth-sp-v3' \ --replace --name 'cadoles-pod-shibboleth-sp-v3' \
--tz=local \ --tz=local \
-e 'SP_ENTITY_ID={{ haproxy_public_base_url }}{{ haproxy_hydra_saml_base_path }}' \ -e 'SP_ENTITY_ID={{ ansible_hostname }}{{ haproxy_hydra_saml_base_path }}' \
-e 'SP_LOG_LEVEL={{ hydra_saml_sp_log_level }}' \ -e 'SP_LOG_LEVEL={{ hydra_saml_sp_log_level }}' \
-e 'IDP_ENTITY_ID={{ hydra_saml_idp_entity_id }}' \ -e 'IDP_ENTITY_ID={{ hydra_saml_idp_entity_id }}' \
-e 'IDP_METADATA_URL={{ hydra_saml_idp_metadata_url }}' \ -e 'IDP_METADATA_URL={{ hydra_saml_idp_metadata_url }}' \
@ -18,4 +18,4 @@ PODMAN_ARGS="\
-v '/etc/shibboleth/attribute-map.inc.xml:/etc/shibboleth/attribute-map.inc.xml' \ -v '/etc/shibboleth/attribute-map.inc.xml:/etc/shibboleth/attribute-map.inc.xml' \
-v '/etc/shibboleth/attribute-policy.inc.xml:/etc/shibboleth/attribute-policy.inc.xml' \ -v '/etc/shibboleth/attribute-policy.inc.xml:/etc/shibboleth/attribute-policy.inc.xml' \
-v '/etc/shibboleth/credentials:/etc/shibboleth/credentials' \ -v '/etc/shibboleth/credentials:/etc/shibboleth/credentials' \
" "