The Shibboleth SP software features FastCGI authorizer and responder applications for use with any web server that supports FastCGI. This is used with nginx with the nginx-http-shibboleth module, but is entirely web-server agnostic as it is simply a rebuild of the existing packages.
Unfortunately, the default distributions of the Shibboleth SP don't come with
this support built by default. Questions have been raised on the Shibboleth
mailing list about adding this support to the core build, but to date this
hasn't happened because the fcgi-devel package lives in the EPEL
repositories and not the core.
If you can help twist someone's arm to adjust this decision, that'd help eliminate the need for this repository and us manually rebuilding Shibboleth each time a new release comes out.
By "manually", we mean watching for or otherwise being told about new Shibboleth SP releases. Here's the current ATOM feed from the Shibboleth wiki covering their blog post announcements, which occasionally include SP software releases.
This will always build the latest version of the Shibboleth SP and does so by spinning up a Docker container for recompilation of the RPMs.
Ensure Docker and Docker Compose are installed.
Run the following:
git clone https://github.com/nginx-shib/shibboleth-fastcgi.git cd shibboleth-fastcgi docker-compose up
Enjoy your new RPMs, available in the build/ directory, categorised by OS and distribution name.
If you're not into Docker, then you can use the shibboleth-rebuild.sh
script directly on your own RHEL or CentOS VM. You'll need to ensure you have
set up the basic dependencies of building RPMs first; see any of the
Dockerfile files for more information.
If you're just looking to download something that works and don't want to rebuild things yourself, the James Cook University eResearch Centre provides EL x86_64 packages in repos at https://www.hpc.jcu.edu.au/repos/jcu_eresearch/. You'll need to trust our RPM building skills and note that no support is offered to the public for this service.
PR are welcomed if you want to add another distribution or OS to the list of builds. All support maintaining this configuration or these packages is welcomed.