OpenShift - Installation of PicketLink and Quickstarts

This article is updated for the PicketLink v2.1.5 release and its quickstarts. The release is described here.

SetUp

Assume you have done upto step 4 from https://community.jboss.org/wiki/CheatSheetForPicketLinkOnRedHatOpenShift

Basically you should have the sso directory.

Step 1: You will need the latest version of PicketLink v2.1.5 module overriding whatever version OpenShift has.

Extract the picketlink2.1.5.module.tar (see attachments) in sso/.openshift/config/modules directory.

This should yield the following:

sso/.openshift/config/modules$ ls org/picketlink/main/
module.xml picketlink-core-2.1.5.Final.jar picketlink-jbas7-2.1.5.Final.jar

Step 2: Remove the src directory from sso directory.

Step 3: Extract the picketlink2.1.5.apps.tar (see attachments) in sso/deployments directory.

This should yield the following:

sso/deployments$ ls
picketlink

Step 4: make the following changes in your standalone.xml available in sso/.openshift/config/standalone.xml

 </extensions>


 <system-properties>
     <property name="org.apache.tomcat.util.http.ServerCookie.FWD_SLASH_IS_SEPARATOR" value="false"/>
     <property name="idp.url" value="http://sso-anilsaldhana.rhcloud.com/idp/" />
     <property name="sales.url" value="http://sso-anilsaldhana.rhcloud.com/sales/" />
     <property name="sales-post.url" value="http://sso-anilsaldhana.rhcloud.com/sales-post/" />
     <property name="employee.url" value="http://sso-anilsaldhana.rhcloud.com/employee/" />
     <property name="employee-post.url" value="http://sso-anilsaldhana.rhcloud.com/employee-post/" />
    </system-properties>

  <management>
        ....




   <security-domain name="messaging" cache-type="default">
                    <authentication>
                        <login-module code="UsersRoles" flag="required">
                            <module-option name="usersProperties" value="${jboss.server.config.dir}/application-users.properties"/>
                            <module-option name="rolesProperties" value="${jboss.server.config.dir}/application-roles.properties"/>
                        </login-module>
                    </authentication>
                </security-domain>
               <security-domain name="idp" cache-type="default">
                    <authentication>
                        <login-module code="UsersRoles" flag="required">
                            <module-option name="usersProperties" value="users.properties"/>
                            <module-option name="rolesProperties" value="roles.properties"/>
                        </login-module>
                    </authentication>
                </security-domain>
                <security-domain name="picketlink-sts" cache-type="default">
                   <authentication>
                     <login-module code="UsersRoles" flag="required">
                        <module-option name="usersProperties" value="users.properties" />
                        <module-option name="rolesProperties" value="roles.properties" />
                     </login-module>
                   </authentication>
                 </security-domain>
                <security-domain name="sp" cache-type="default">
                    <authentication>
                        <login-module code="org.picketlink.identity.federation.bindings.jboss.auth.SAML2LoginModule" flag="required"/>
                    </authentication>
                </security-domain>

            </security-domains>

Note the system properties block goes between extensions and management block. Please update the values of idp.url, sales.url etc to point to correct urls for your openshift installation.

Also you will need to update the security-domains block with new entries idp, picketlink-sts and sp blocks. Add them right after messaging block.

Step 5: git commit and push from sso directory.

~sso > git commit -a -m "PicketLink"

~sso > git push

Step 6: You should be able to access the apps in 2 different tabs of your browser.

http://sso-YOURNAME.rhcloud.com/sso/sales-post/

http://sso-YOURNAME.rhcloud.com/sso/employee/

When the IDP login page is shown, use tomcat and tomcat as username/password combination.

Examples:

http://sso-anilsaldhana.rhcloud.com/sso/sales-post/

http://sso-anilsaldhana.rhcloud.com/sso/employee/

Attachments:

https://docs.jboss.org/author/download/attachments/54264064/picketlink2.1.5.module.tar

https://docs.jboss.org/author/download/attachments/54264064/picketlink2.1.5.apps.tar