[Freeipa-users] FreeIPA + Ipsilon

[Luca Tartarini]

Hi, thanks for the replies.

I am finally managed to install lasso correctly (without lasso-python) but
after the installation of ipsilon-server (ipsilon-server-install --ipa=yes
--secure=no) when I try to connet via browser to:

https://myidp.example.com/idp

I had this error:

[error] mod_wsgi (pid=22357): Target WSGI script '/usr/sbin/ipsilon' cannot
be loaded as Python module.
[error] mod_wsgi (pid=22357): Exception occurred processing WSGI script
'/usr/sbin/ipsilon'.
[error] Traceback (most recent call last):
[error] File "/usr/sbin/ipsilon", line 28, in <module>
[error]  from ipsilon.root import Root
[error] File "/usr/lib/python2.6/site-packages/ipsilon/root.py", line 26,
in <module>
[error] from ipsilon.admin.login import LoginPlugins
[error] File "/usr/lib/python2.6/site-packages/ipsilon/admin/login.py",
line 48
[error] plugins_by_name = {p.name: p for p in
self._site[FACILITY]['enabled']}
[error]                                      ^
[error] SyntaxError: invalid syntax

with HTTP 500 Internal Server Error ("GET /idp HTTP/1.1" 500 619)

The line is this one (in
/usr/lib/python2.6/site-packages/ipsilon/admin/login.py):

plugins_by_name = {p.name: p for p in self._site[FACILITY]['enabled']}

The same thing if I try:

ipsilon-client-install --saml-idp-metadata
https://myidp.example.org/idp/saml2/metadata --debug

Thanks in advance.

Luca Tartarini



2014-07-31 13:11 GMT+02:00 Simo Sorce <ssorce at redhat.com>:

> On Thu, 2014-07-31 at 09:53 +0200, Luca Tartarini wrote:
> > Hi,
> >
> > Thanks for the reply, unfortunately I can not find the package on
> > Scientific Linux, is there a workaround?
>
> I saw from the lasso mailing list that you built the lasso package
> yourself, make sure you built the python bindings, they are part of the
> same source tree.
>
> Attached find a .spec file you can use top build lasso on EL6 platforms,
> until it will become available "officially".
>
> This will build and install the python binding correctly.
>
> Simo.
>
> > Thanks.
> >
> > Luca Tartarini
> >
> >
> > 2014-07-30 15:00 GMT+02:00 Simo Sorce <ssorce at redhat.com>:
> >
> > > On Tue, 2014-07-29 at 15:58 +0200, Martin Kosek wrote:
> > > > On 07/29/2014 03:47 PM, Luca Tartarini wrote:
> > > > > Hi everyone,
> > > > >
> > > > > I am new in FreeIPA, I am trying to configure FreeIPA with
> Ipsilon. The
> > > > > configuration is the following: Service Provider (host with
> Scientific
> > > > > Linux 6) with ipsilon-client and Identity Provider (another host
> with
> > > > > Scientific Linux 6) with FreeIPA and ipsilon-server, is the
> > > configuration
> > > > > feasible and/or correct?
> > > > > If it is, then I am stuck in the installation of ipsilon-client
> because
> > > > > after I installed lasso-2.3.6 and all the ipsilon-client
> prerequisites,
> > > > > when I finally run:
> > > > >
> > > > > ipsilon-client-install --saml-idp-metadata
> > > > > https://myidp.example.org/idp/saml2/metadata --saml-auth /wiki
> > > > >
> > > > > I get this error about lasso:
> > > > >
> > > > > Traceback (most recent call last):
> > > > >   File "/usr/bin/ipsilon-client-install", line 20, in <module>
> > > > >     from ipsilon.tools.saml2metadata import Metadata
> > > > >   File
> > > "/usr/lib/python2.6/site-packages/ipsilon/tools/saml2metadata.py",
> > > > > line 22, in <module>
> > > > >     import lasso
> > > > >   File "/usr/lib/python2.6/site-packages/lasso.py", line 3, in
> <module>
> > > > >     import _lasso
> > > > > ImportError: No module named _lasso
> > > > >
> > > > > Does anyone know if it's a problem about lasso's configuration or I
> > > forgot
> > > > > something about ipsilon-client?
> > > > >
> > > > > Thanks in advance.
> > > > >
> > > > > Luca Tartarini
> > > >
> > > > Not sure, _lasso.so should be provided by lasso-python package:
> > > >
> > > > # rpm -qf /usr/lib64/python2.6/site-packages/_lasso.so
> > > > lasso-python-2.4.0-4.el6.x86_64
> > > >
> > > > CCing Simo to advise.
> > >
> > > Sounds like lasso-python is missing indeed.
> > >
> > > Simo.
> > >
> > >
> > >
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20140805/c1b1cea2/attachment.htm>