/[pdpsoft]/trunk/eu.rcauth.pilot-ica/DS/ansible/roles/delegserver/vars/rh7.yml
ViewVC logotype

Contents of /trunk/eu.rcauth.pilot-ica/DS/ansible/roles/delegserver/vars/rh7.yml

Parent Directory Parent Directory | Revision Log Revision Log


Revision 3233 - (show annotations) (download) (as text)
Fri Apr 20 13:52:02 2018 UTC (4 years, 1 month ago) by msalle
File MIME type: text/x-yaml
File size: 3150 byte(s)
Various updates, synced from EGI test CA

- Add instructions for JSON Web Key creation in README
- remove Tamas
- Update logfile size for shibd.logger and cfg.xml (both oauth2.log and
  trace.log) to 10MB
- Adapt http config for Shib to easier allow banning users
- Update download URL for javax.mail.jar (now via github)

1 ---
2
3 enabled_services:
4 - tomcat
5 - httpd
6 - shibd
7 - mariadb
8
9 # general dependencies
10
11 dependencies:
12 - epel-release
13
14 # java constants
15
16 java_download_url: "https://javadl.sun.com/webapps/download/AutoDL?BundleId=114680"
17 #javax_mail_url: "https://java.net/projects/javamail/downloads/download/javax.mail.jar"
18 javax_mail_url: "https://github.com/javaee/javamail/releases/download/JAVAMAIL-1_6_1/javax.mail.jar"
19 java_home: /usr/java/default
20
21 # tomcat constants
22
23 tomcat_packages:
24 - tomcat
25 - tomcat-admin-webapps
26
27 #tomcat_extra_packages:
28 # - javamail
29
30 #tomcat_jglobus_packages:
31 # - jglobus-jsse
32 # - jglobus-ssl-proxies
33
34 #tomcat_extra_libs: /usr/share/java/jglobus
35
36 catalina_home: /usr/share/tomcat
37 tomcat_user: tomcat
38 tomcat_service: tomcat
39
40 # apache
41
42 httpd_packages:
43 - httpd
44 - httpd-tools
45 - mod_ssl
46
47 httpd_service: httpd
48 httpd_web_root: /var/www/html
49
50 # The shibboleth repo is now pulled in by the cafrontend role!
51 # shibboleth
52
53 #shib_repo_baseurl: http://download.opensuse.org/repositories/security:/shibboleth/CentOS_7/
54 #shib_repo_gpgkey: http://download.opensuse.org/repositories/security:/shibboleth/CentOS_7/repodata/repomd.xml.key
55
56 shib_packages:
57 - shibboleth
58
59 shib_service: shibd
60
61 shib_httpd_conf: /etc/httpd/conf.d/shib.conf
62 shib_attr_map_file: /etc/shibboleth/attribute-map.xml
63 shib_conf_file: /etc/shibboleth/shibboleth2.xml
64
65 shib_attr_map:
66 - {name: "urn:oid:2.5.4.3", id: "cn"}
67 - {name: "urn:oid:0.9.2342.19200300.100.1.1", id: "uid"}
68 - {name: "urn:oid:0.9.2342.19200300.100.1.3", id: "mail"}
69 - {name: "urn:oid:2.16.840.1.113730.3.1.241", id: "displayName"}
70 - {name: "urn:oid:2.5.4.42", id: "givenName"}
71 - {name: "urn:oid:2.5.4.4", id: "sn"}
72 - {name: "urn:oid:1.3.6.1.4.1.25178.1.2.9", id: "schacHomeOrganization"}
73 - {name: "urn:oid:2.5.4.10", id: "o"}
74
75 # mysql
76
77 # NOTE
78 # THERE IS NO MYSQL PACKAGE IN CENTOS7 SINCE IT COMES WITH THE MARIADB IMPLEMENTATION
79 # YOU CAN INSTALL MTSQL FROM THE REPOSITORY BELOW, BUT THIS WILL NOT WORK PROPERLY
80
81 #mysql_repo_baseurl: http://repo.mysql.com/yum/mysql-5.7-community/el/7/$basearch/
82 #mysql_repo_connectors_baseurl: http://repo.mysql.com/yum/mysql-connectors-community/el/7/$basearch/
83 #mysql_repo_gpgkey: https://repo.mysql.com/RPM-GPG-KEY-mysql
84
85 #mysql_packages:
86 # - mysql-community-server
87 # - mysql-connector-java
88 # - mysql-connector-python
89
90 #mysql_root_password: changeme
91
92 # mariadb
93
94 # NOTE
95 # THE MARIADB PACKAGES ARE IN THE CENTOS7 REPOS, BUT THERE IS NO MARIADB JDBC CONNECTOR PROVIDED
96 # THE CONNECTOR DOWLOADED FROM THE OFFICIAL MARIADB WEBPAGE DOES NOT WORK PROPERLY ON CENTOS7
97 # THEREFOR WE USE THE CONNECTOR PROVIDED BY MYSQL INSTEAD.
98
99 # THE ABOVE EFFECTIVELY MEANS THAT OA4MP WILL RUN WITH 'MYSQL' CONNECTOR AND IMPLEMENTATION
100 # BUT THE UNDERLYING DATABASE WILL ACTUALLY BY MARIADB.
101
102 mariadb_packages:
103 - mariadb
104 - mariadb-server
105 - mysql-connector-java
106 - MySQL-python
107
108 mariadb_connector_path: /usr/share/java
109 mariadb_connector: mysql-connector-java.jar
110
111 # postgresql
112
113 postgresql_packages:
114 - postgresql
115 - postgresql-server
116 - postgresql-jdbc
117 - python-psycopg2
118
119 postgresql_connector_path: /usr/share/java
120 postgresql_connector: postgresql-jdbc.jar

grid.support@nikhef.nl
ViewVC Help
Powered by ViewVC 1.1.28