Integrating with mod_auth_openidc

By: Kuppusamy Venkatasubramanian user 29 Sep 2020 at 9:01 a.m. CDT

4 Responses
Kuppusamy Venkatasubramanian gravatar
Trying to integrate apache plugin with openid connector with gluu. Followed the document at https://gluu.org/docs/gluu-server/4.2/integration/sswebapps/openidc-rp/ . These changes were applied in the apache server under gluu server inside chroot. As Ubuntu 20 comes with build in apache server, that server had to be stopped and all changes were applied in the apache server inside gluu server. After applying the changes according to the documentation and trying to start apache server but apache server can't start with error as "Unknown Authz provider: valid-user". Pls. advise
Ubuntu 20.0
closed

Answers

By Michael Schwartz Account Admin 29 Sep 2020 at 9:38 a.m. CDT

Copy
Michael Schwartz gravatar
I do not recommend installing mod_auth_openidc on the apache server used as the reverse proxy. Normally, one uses mod_auth_openidc to protect other web sites.

By Kuppusamy Venkatasubramanian user 29 Sep 2020 at 9:44 p.m. CDT

Copy
Kuppusamy Venkatasubramanian gravatar
I couldn't reach the apache running in main OS. Whenever i hit, https://myhostname.com it always hits apache running inside the chroot container and getting forwarded to gluu. Though when i do ps for apache outside the chroot, i could see a process running and the process ID is different from the process ID of the apache running inside chroot. Where these OPEN ID plugin change should be applied? If these changes should be on the apache in main OS, do we need to change the port and create a route to forward it to the apache inside chroot?

By Michael Schwartz Account Admin 04 Oct 2020 at 9:04 p.m. CDT

Copy
Michael Schwartz gravatar
You should not install apache on the Gluu Server host!!! Install apache on a separate server. The only apache running should be the inside the chroot. Your IDP should be on it's own server. You would never have the IDP and SP on the same machine.

By Mohib Zico staff 12 Oct 2020 at 12:56 a.m. CDT

Copy
Mohib Zico gravatar
Please reopen the ticket if required. Thanks!

Post an answer