This page may be out of date as of 2018. Please see https://spaces.at.internet2.edu/display/ITAP/InCommon+Trusted+Access+Platform+Release |
Grouper is packaged in TIER as what the installer delivers on a MySQL (MariaDB) database. It is a virtualbox image, which creates and runs a docker container.
https://github.internet2.edu/docker/grouper/blob
The instructions handed over the TIER packaging team in 2016 to setup the applications are here
See the TIER packaging site for more information and download links, Testbed
Future work includes using Shibboleth for UI authentication, configuring provisioning, user management with COManage, having an upgrade/patch process, TIER API tomee, etc.
(shouldnt have to do this) Start tomcat:
[grouper@localhost run]$ sudo docker exec -i -t grouper /bin/bash bash-4.2# /opt/grouper/2.3.0/apache-tomcat-8.5.12/bin/startup.sh |
Note, The VM requires internet access to finish setup BEFORE it can be used. So you MUST give it internet access at least during the initial setup.
Note, if things freeze Oracle VirtualBox might have run out of resources and paused. Just go to the main VirtualBox window and click pause to run it again
https://docs.google.com/document/d/1B8iL8Vm50BbJ4-HaoqjzXrlxa-oiDZpEhvtiQfa7y44/edit#
Get the current VM. Get the link from https://spaces.at.internet2.edu/x/DQfSBQ
Close background applications on your workstation for memory reasons
Load the VM in virtualbox (Import the OVA, do not start the VM at this point)
Setup networking in VM in virtualbox
( A NAT network is suggested, but not specifically required.)
Add some settings to the VM configuration
Port forward 22,8080,3306 in the virtual box Network settings (Assuming you are using a NAT network. Other Network configs may not require/allow ports to be forwarded.)
Follow instructions in the README.md ( located at /home/grouper/README.md See the file for details for the following sections.)
Agree to the Oracle JDK ToS ( by editing the file install_oracle_jdk.sh NOTE: This file is executed as part of the next step, so just edit it here.)
[grouper@localhost ~]$ emacs /home/grouper/build/grouper/additional_container_files/bin/install_oracle_jdk.sh |
Build the Grouper container
[grouper@localhost ~]$ /home/grouper/build/grouper/bin/build.sh |
Change Service Passwords
[grouper@localhost ~]$ emacs /home/grouper/run/conf/common.env [grouper@localhost ~]$ emacs /home/grouper/run/conf/grouper.env [grouper@localhost ~]$ emacs /home/grouper/run/conf/db.env |
Run the Grouper Service
[grouper@localhost ~]$ /home/grouper/run/bin/run.sh |
NOTE: Now you have the service on 8080 ( and optionally 8443 if SSL is up) and running!
Start using Grouper !
You can connect to the Web Grouper UI at http://127.0.0.1:8080/ ( or http://127.0.0.1:8443/ )
Use User: GrouperSystem with Password from (edit that in the docker image in /opt/grouper/2.3.0/apache-tomcat-6.0.35/conf/tomcat-users.xml ( after getting a shell in the docker image with the command "sudo docker exec -i -t grouper /bin/bash" )
GrouperSystem/XXXXXXXXXX |
You can also connect directly to the mysql (port forward to 3319) with, db: grouper, user: grouper_user, pass: 3cf0ccc7d6b240390188367933c9cd90
You can also Interact with docker ( from an SSH session or the VM console)
[grouper@localhost ~]$ docker ps [grouper@localhost ~]$ sudo docker exec -i -t grouper /bin/bash [grouper@localhost ~]$ docker compose up [grouper@localhost ~]$ docker stop grouper [grouper@localhost ~]$ docker start grouper |
Test grouper WS with a call like this: http://localhost:8080/grouper-ws/servicesRest/v2_3_000/groups/qsuob:all_students/members
TIER-Grouper Release 17040 (in the TIER Packaging wiki)