Gluu IdP using Load Balancer URL

By: Cip Dominguez user 21 Jul 2016 at 9:36 p.m. CDT

4 Responses
Cip Dominguez gravatar
I have a customer where I've installed Gluu 2.4.3 and configured it successfully as a SAML IdP provider. During the install and setup.py process, the local server hostname (itssso.uncw.edu) was used and tested successfully. Now my customer wants to change the URL of the Gluu IdP to go through a load balancer (sso.uncw.edu). I've updated the "idpUrl" to "https://sso.uncw.edu" under Configuration -> JSON Configuration -> OxTrust Configuration and it updated the IdP metadata successfully and sent it to the Service Provider. However, how do I change all the other URL's used at runtime during the Gluu authentication and authorization process? They all seem to keep redirecting to itssso.uncw.edu which was chosen during installation and I need all URL's to be sso.uncw.edu. Please advise. Thanks!
Rhel67
closed

Answers

By Michael Schwartz Account Admin 21 Jul 2016 at 9:55 p.m. CDT

Copy
Michael Schwartz gravatar
The hostname is in many files. You need to make sure when you run setup, that you use the load balancer host name.

By Cip Dominguez user 21 Jul 2016 at 10:07 p.m. CDT

Copy
Cip Dominguez gravatar
Can I rerun the setup.py script a second time to change the local hostname to the load balancer name? I see hostnames stored in many files as well as in the OpenDJ Gluu server instance. Uninstall/Re-install is not an option since I don't want to have to exchange new IdP metadata with my Service Provider all over again since we have a working implementation.

By Michael Schwartz Account Admin 21 Jul 2016 at 10:43 p.m. CDT

Copy
Michael Schwartz gravatar
Unfortunately, no. You can use `setup.properties.last` and the `-f` option, change the hostname, and then use export script, but you'd have to really know what you're doing. Probably safer to just redeploy...

By Cip Dominguez user 25 Jul 2016 at 2:17 a.m. CDT

Copy
Cip Dominguez gravatar
I ended up redeploying with the load balancer URL. Thanks!

Post an answer