This This is the group management app that we intent to use for our federation plans.
We will run this on an Ubuntu 12.04 VM.
I would like to stick as much as possible to Ubuntu provided packages, preferably the latest versions of everything. Confirmed on the list that Grouper can run fine with OpenJDK, so no need for the Sun Oracle Java stuff any more. So, at the moment it looks like we're going to use:
...
| Code Block |
|---|
apt-get install subversion postgresql libpgjava tomcat7 openjdk-7-jdk ant |
Download the source code, in this case we're fetching version 2.1.1 and stick that under /opt:
| Code Block |
|---|
cd /opt svn co http://anonsvn.internet2.edu/svn/i2mi/tags/GROUPER_2_1_1/ |
Make JDK7 the default one:
| Code Block |
|---|
update-java-alternatives --jre-headless -s java-1.7.0-openjdk-amd64 |
Create a the PostgreSQL database and credentials:
...
Because we run our databases on IPv6 only, we have to configure Postgres by editing edit /etc/postgresql/9.1/main/postgresql.conf to list:
| Code Block |
|---|
listen_addresses = '::' |
...
No errors should be reported in the end.
User interface
Compile the app:
| Code Block |
|---|
cd /opt/GROUPER_2_1_1/grouper-ui
ant dist |
Create a file /etc/tomcat7/Catalina/localhost/grouper-ui.xml with this content:
| Code Block | ||
|---|---|---|
| ||
<?xml version="1.0" encoding="UTF-8"?>
<Context
path="/grouper"
docBase="/opt/GROUPER_2_1_1/grouper-ui/dist/grouper"
reloadable="false"
/> |
Edit /etc/tomcat7/tomcat-users.xml so that there is a user called GrouperSystem, with a proper passworf:
| Code Block | ||
|---|---|---|
| ||
<tomcat-users>
<role rolename="grouper_user"/>
<user username="GrouperSystem" password="hackme" roles="grouper_user"/>
</tomcat-users> |
Change the permissions on the logging directory:
| Code Block |
|---|
chown tomcat7:tomcat7 /opt/GROUPER_2_1_1/grouper/logs |
Restart tomcat
| Code Block |
|---|
service tomcat7 restart |
You should now be able to go to http://<yourservername>:8080/grouper-ui/
and log in.
This is a tomcat app
Apache
This is optional, but good practise .Apache can be used for security considerations. All the JAVA stuff can run on unprivileged ports, and apache faces the internet.
| Code Block |
|---|
cd /etc/apache2 a2enmod proxy_ajp |
Configure SSL certificates etc