[rubygem-openshift-origin-auth-remote-user] Initial import (#909471).

tdawson tdawson at fedoraproject.org
Mon Apr 1 19:53:07 UTC 2013


commit 4bb296c790af1e492a795a62322c645fbd65fb12
Author: Troy Dawson <tdawson at redhat.com>
Date:   Mon Apr 1 14:53:02 2013 -0500

    Initial import (#909471).

 .gitignore                                         |    1 +
 ...em-openshift-origin-auth-remote-user-doc.README |   44 +++++
 rubygem-openshift-origin-auth-remote-user.favicon  |  Bin 0 -> 150 bytes
 rubygem-openshift-origin-auth-remote-user.spec     |  185 ++++++++++++++++++++
 sources                                            |    1 +
 5 files changed, 231 insertions(+), 0 deletions(-)
---
diff --git a/.gitignore b/.gitignore
index e69de29..930ca58 100644
--- a/.gitignore
+++ b/.gitignore
@@ -0,0 +1 @@
+/openshift-origin-auth-remote-user-1.5.6.gem
diff --git a/rubygem-openshift-origin-auth-remote-user-doc.README b/rubygem-openshift-origin-auth-remote-user-doc.README
new file mode 100644
index 0000000..743b151
--- /dev/null
+++ b/rubygem-openshift-origin-auth-remote-user-doc.README
@@ -0,0 +1,44 @@
+                    Remote User Auth Plugin for OpenShift
+                   ----------------------------------
+The Remote User Auth plugin is an optional plugin for OpenShift and it provides
+authentication.  Authentication is delegated to a web server.  The Ruby code
+trusts the REMOTE_USER environment variable.  This plugin defers the
+node->broker authentication to the base AuthService class in
+openshift-origin-controller.
+
+This document describes how to register and authenticate an OpenShift user
+using the Remote User Auth plugin.  This example will use Basic Authentication.
+
+* Create the htpassd file:
+
+    # Substitute the username as needed
+    htpasswd -c /etc/openshift/htpasswd user1
+
+* Create an Apache configuration.  A sample is provided:
+    mv /var/www/openshift/broker/httpd/conf.d/openshift-origin-auth-remote-user.conf{.sample,}
+
+    NOTE: This file should be loaded by
+    /var/www/openshift/broker/httpd/httpd.conf.  This is done
+    automatically as part of the openshift-origin-broker package.
+
+* Create the broker key
+    /usr/bin/openssl genrsa -out /etc/openshift/server_priv.pem 2048
+    /usr/bin/openssl rsa -in /etc/openshift/server_priv.pem -pubout > /etc/openshift/server_pub.pem
+
+* Edit the configuration in /etc/openshift/plugins.d/openshift-origin-auth-remote-user.conf.
+
+* Restart the openshift-broker service
+    service openshift-broker restart
+
+* Authenticate OpenShift Origin user
+  Any REST api calls or CLI tools to OpenShift Origin will be processed only for the registered user-name/password
+  Example:
+    The below query fails with 'Access Denied' error.
+    curl -k https://localhost/broker/rest/domains
+
+    The below query succeeds for valid username/password.
+    curl -k --user "<registered-user-name>:<password>" https://localhost/broker/rest/domains
+
+    No auth is required for the following APIs:
+    curl -k https://localhost/broker/rest/cartridges
+    curl -k https://localhost/broker/rest/api
diff --git a/rubygem-openshift-origin-auth-remote-user.favicon b/rubygem-openshift-origin-auth-remote-user.favicon
new file mode 100644
index 0000000..3005e1b
Binary files /dev/null and b/rubygem-openshift-origin-auth-remote-user.favicon differ
diff --git a/rubygem-openshift-origin-auth-remote-user.spec b/rubygem-openshift-origin-auth-remote-user.spec
new file mode 100644
index 0000000..4bdb578
--- /dev/null
+++ b/rubygem-openshift-origin-auth-remote-user.spec
@@ -0,0 +1,185 @@
+%global brokerdir %{_var}/www/openshift/broker
+%{!?scl:%global pkg_name %{name}}
+%{?scl:%scl_package rubygem-%{gem_name}}
+%global gem_name openshift-origin-auth-remote-user
+%global rubyabi 1.9.1
+
+Summary:       OpenShift plugin for remote-user authentication
+Name:          rubygem-%{gem_name}
+Version:       1.5.6
+Release:       5%{?dist}
+Group:         Development/Languages
+License:       ASL 2.0
+URL:           http://openshift.redhat.com
+Source0:       http://mirror.openshift.com/pub/openshift-origin/source/%{name}/%{gem_name}-%{version}.gem
+Source1:       %{name}-doc.README
+Source2:       %{name}.favicon
+%if 0%{?fedora} >= 19
+Requires:      ruby(release)
+%else
+Requires:      %{?scl:%scl_prefix}ruby(abi) >= %{rubyabi}
+%endif
+Requires:      %{?scl:%scl_prefix}rubygems
+Requires:      %{?scl:%scl_prefix}rubygem(rails)
+Requires:      rubygem(openshift-origin-common)
+Requires:      rubygem(openshift-origin-controller)
+Requires:      openshift-origin-broker
+%if 0%{?fedora} >= 19
+BuildRequires: ruby(release)
+%else
+BuildRequires: %{?scl:%scl_prefix}ruby(abi) >= %{rubyabi}
+%endif
+BuildRequires: %{?scl:%scl_prefix}rubygems
+BuildRequires: %{?scl:%scl_prefix}rubygems-devel
+BuildArch:      noarch
+Provides:       rubygem(%{gem_name}) = %version
+
+%description
+Provides a remote-user auth service based plugin
+
+%package doc
+Summary: OpenShift plugin for remote-user authentication documentation
+
+%description doc
+Provides a remote-user auth service based plugin documentation
+
+%prep
+gem unpack %{SOURCE0}
+%setup -q -D -T -n  %{gem_name}-%{version}
+gem spec %{SOURCE0} -l --ruby > %{gem_name}.gemspec
+
+%build
+%{?scl:scl enable %scl - << \EOF}
+gem build %{gem_name}.gemspec
+%gem_install
+%{?scl:EOF}
+
+%install
+mkdir -p %{buildroot}%{gem_dir}
+cp -a ./%{gem_dir}/* %{buildroot}%{gem_dir}/
+
+# Add documents/examples
+install -m 644 %{SOURCE1} .
+
+mkdir -p %{buildroot}%{brokerdir}/httpd/conf.d
+install -m 755 conf/%{gem_name}-basic.conf.sample %{buildroot}%{brokerdir}/httpd/conf.d
+install -m 755 conf/%{gem_name}-ldap.conf.sample %{buildroot}%{brokerdir}/httpd/conf.d
+install -m 755 conf/%{gem_name}-kerberos.conf.sample %{buildroot}%{brokerdir}/httpd/conf.d
+
+mkdir -p %{buildroot}/etc/openshift/plugins.d
+cp conf/openshift-origin-auth-remote-user.conf.example %{buildroot}/etc/openshift/plugins.d/openshift-origin-auth-remote-user.conf.example
+
+# Spec File Cleanup
+cp -fp %{SOURCE2} %{buildroot}%{gem_instdir}/test/dummy/public/favicon.ico
+rm -rf %{buildroot}%{gem_instdir}/.yardoc
+rm -f %{buildroot}%{gem_instdir}/%{name}.spec
+chmod 644 %{buildroot}%{brokerdir}/httpd/conf.d/*.sample
+
+%files
+%doc %{name}-doc.README
+%doc %{gem_instdir}/LICENSE
+%doc %{gem_instdir}/COPYRIGHT
+%doc %{gem_instdir}/README.md
+%dir %{gem_instdir}
+%{gem_instdir}/README-KERB
+%{gem_instdir}/README-LDAP
+%{gem_instdir}/conf/
+%{gem_instdir}/config/
+%{gem_libdir}
+%{gem_spec}
+%exclude %{gem_cache}
+%{brokerdir}/httpd/conf.d/%{gem_name}-basic.conf.sample
+%{brokerdir}/httpd/conf.d/%{gem_name}-ldap.conf.sample
+%{brokerdir}/httpd/conf.d/%{gem_name}-kerberos.conf.sample
+
+%files doc
+%doc %{gem_docdir}
+%{gem_instdir}/Rakefile
+%{gem_instdir}/Gemfile
+%{gem_instdir}/openshift-origin-auth-remote-user.gemspec
+%{gem_instdir}/test
+/etc/openshift/plugins.d/openshift-origin-auth-remote-user.conf.example
+
+%changelog
+* Mon Apr 01 2013 Troy Dawson <tdawson at redhat.com> - 1.5.6-5
+- Remove rubygems(json) dependancy
+
+* Thu Mar 28 2013 Troy Dawson <tdawson at redhat.com> - 1.5.6-4
+- fix docs again
+
+* Wed Mar 27 2013 Troy Dawson <tdawson at redhat.com> - 1.5.6-3
+- put docs in gem_docdir
+- exclude gem_cache
+- use gem_install macro
+- remove post config file fix, not needed
+
+* Thu Mar 21 2013 Troy Dawson <tdawson at redhat.com> - 1.5.6-2
+- Fix to make it build/install on F19+
+- Convert to use gem instead of tarball
+
+* Wed Mar 06 2013 Adam Miller <admiller at redhat.com> 1.5.6-1
+- RemoteUserAuthService should use authenticate_request, not authenticate
+  (ccoleman at redhat.com)
+
+* Tue Feb 26 2013 Adam Miller <admiller at redhat.com> 1.5.5-1
+- Implement authorization support in the broker (ccoleman at redhat.com)
+
+* Wed Feb 20 2013 Adam Miller <admiller at redhat.com> 1.5.4-1
+- fix rubygem sources (tdawson at redhat.com)
+
+* Tue Feb 19 2013 Adam Miller <admiller at redhat.com> 1.5.3-1
+- Fixes for ruby193 (john at ibiblio.org)
+
+* Fri Feb 08 2013 Adam Miller <admiller at redhat.com> 1.5.2-1
+- Merge pull request #1289 from
+  smarterclayton/isolate_api_behavior_from_base_controller
+  (dmcphers+openshiftbot at redhat.com)
+- Merge branch 'improve_action_logging' into
+  isolate_api_behavior_from_base_controller (ccoleman at redhat.com)
+- change %%define to %%global (tdawson at redhat.com)
+- Remove legacy login() method on authservice (ccoleman at redhat.com)
+
+* Thu Feb 07 2013 Adam Miller <admiller at redhat.com> 1.5.1-1
+- bump_minor_versions for sprint 24 (admiller at redhat.com)
+
+* Wed Feb 06 2013 Adam Miller <admiller at redhat.com> 1.4.3-1
+- remove BuildRoot: (tdawson at redhat.com)
+- make Source line uniform among all spec files (tdawson at redhat.com)
+
+* Tue Jan 29 2013 Adam Miller <admiller at redhat.com> 1.4.2-1
+- 875575 (dmcphers at redhat.com)
+- separate out console and broker realms per BZ893369 (lmeyer at redhat.com)
+- %%post script to fix the realm from any previous install. (lmeyer at redhat.com)
+- removing app templates and other changes (dmcphers at redhat.com)
+
+* Wed Jan 23 2013 Adam Miller <admiller at redhat.com> 1.4.1-1
+- bump_minor_versions for sprint 23 (admiller at redhat.com)
+
+* Thu Jan 10 2013 Adam Miller <admiller at redhat.com> 1.3.2-1
+- Merge pull request #697 from Miciah/plugins-auth-remote-user-README-updates
+  (dmcphers+openshiftbot at redhat.com)
+- remote-user README: delete known issues that have been resolved
+  (miciah.masters at gmail.com)
+- remote-user README: fix name of openshift-broker service
+  (miciah.masters at gmail.com)
+
+* Wed Dec 12 2012 Adam Miller <admiller at redhat.com> 1.3.1-1
+- bump_minor_versions for sprint 22 (admiller at redhat.com)
+
+* Wed Dec 05 2012 Adam Miller <admiller at redhat.com> 1.2.3-1
+- updated gemspecs so they work with scl rpm spec files. (tdawson at redhat.com)
+
+* Thu Nov 29 2012 Adam Miller <admiller at redhat.com> 1.2.2-1
+- add oo-ruby (dmcphers at redhat.com)
+
+* Sat Nov 17 2012 Adam Miller <admiller at redhat.com> 1.2.1-1
+- bump_minor_versions for sprint 21 (admiller at redhat.com)
+
+* Wed Nov 14 2012 Adam Miller <admiller at redhat.com> 1.1.2-1
+- add config to gemspec (dmcphers at redhat.com)
+- Moving plugins to Rails 3.2.8 engine (kraman at gmail.com)
+- getting specs up to 1.9 sclized (dmcphers at redhat.com)
+- specifying rake gem version range (abhgupta at redhat.com)
+
+* Thu Nov 01 2012 Adam Miller <admiller at redhat.com> 1.1.1-1
+- bump_minor_versions for sprint 20 (admiller at redhat.com)
diff --git a/sources b/sources
index e69de29..81e8808 100644
--- a/sources
+++ b/sources
@@ -0,0 +1 @@
+78e58b00f31aa3e00cff0f46f468ca26  openshift-origin-auth-remote-user-1.5.6.gem


More information about the scm-commits mailing list