[Freeipa-users] FreeIPA + Ipsilon

[Simo Sorce]

On Tue, 2014-08-05 at 17:47 +0200, Luca Tartarini wrote:
> Hi, thanks for the replies.
> 
> I am finally managed to install lasso correctly (without lasso-python) but
> after the installation of ipsilon-server (ipsilon-server-install --ipa=yes
> --secure=no) when I try to connet via browser to:
> 
> https://myidp.example.com/idp
> 
> I had this error:
> 
> [error] mod_wsgi (pid=22357): Target WSGI script '/usr/sbin/ipsilon' cannot
> be loaded as Python module.
> [error] mod_wsgi (pid=22357): Exception occurred processing WSGI script
> '/usr/sbin/ipsilon'.
> [error] Traceback (most recent call last):
> [error] File "/usr/sbin/ipsilon", line 28, in <module>
> [error]  from ipsilon.root import Root
> [error] File "/usr/lib/python2.6/site-packages/ipsilon/root.py", line 26,
> in <module>
> [error] from ipsilon.admin.login import LoginPlugins
> [error] File "/usr/lib/python2.6/site-packages/ipsilon/admin/login.py",
> line 48
> [error] plugins_by_name = {p.name: p for p in
> self._site[FACILITY]['enabled']}
> [error]                                      ^
> [error] SyntaxError: invalid syntax
> 
> with HTTP 500 Internal Server Error ("GET /idp HTTP/1.1" 500 619)
> 
> The line is this one (in
> /usr/lib/python2.6/site-packages/ipsilon/admin/login.py):
> 
> plugins_by_name = {p.name: p for p in self._site[FACILITY]['enabled']}

Uhmm python 2.6, I think it does not support dict comprehension.
You can replace this line with:
dict([p.name, p for p in self._site[FACILITY]['enabled']])

Let me know if that helps.

Simo.

> The same thing if I try:
> 
> ipsilon-client-install --saml-idp-metadata
> https://myidp.example.org/idp/saml2/metadata --debug
> 
> Thanks in advance.
> 
> Luca Tartarini
> 
> 
> 
> 2014-07-31 13:11 GMT+02:00 Simo Sorce <ssorce at redhat.com>:
> 
> > On Thu, 2014-07-31 at 09:53 +0200, Luca Tartarini wrote:
> > > Hi,
> > >
> > > Thanks for the reply, unfortunately I can not find the package on
> > > Scientific Linux, is there a workaround?
> >
> > I saw from the lasso mailing list that you built the lasso package
> > yourself, make sure you built the python bindings, they are part of the
> > same source tree.
> >
> > Attached find a .spec file you can use top build lasso on EL6 platforms,
> > until it will become available "officially".
> >
> > This will build and install the python binding correctly.
> >
> > Simo.
> >
> > > Thanks.
> > >
> > > Luca Tartarini
> > >
> > >
> > > 2014-07-30 15:00 GMT+02:00 Simo Sorce <ssorce at redhat.com>:
> > >
> > > > On Tue, 2014-07-29 at 15:58 +0200, Martin Kosek wrote:
> > > > > On 07/29/2014 03:47 PM, Luca Tartarini wrote:
> > > > > > Hi everyone,
> > > > > >
> > > > > > I am new in FreeIPA, I am trying to configure FreeIPA with
> > Ipsilon. The
> > > > > > configuration is the following: Service Provider (host with
> > Scientific
> > > > > > Linux 6) with ipsilon-client and Identity Provider (another host
> > with
> > > > > > Scientific Linux 6) with FreeIPA and ipsilon-server, is the
> > > > configuration
> > > > > > feasible and/or correct?
> > > > > > If it is, then I am stuck in the installation of ipsilon-client
> > because
> > > > > > after I installed lasso-2.3.6 and all the ipsilon-client
> > prerequisites,
> > > > > > when I finally run:
> > > > > >
> > > > > > ipsilon-client-install --saml-idp-metadata
> > > > > > https://myidp.example.org/idp/saml2/metadata --saml-auth /wiki
> > > > > >
> > > > > > I get this error about lasso:
> > > > > >
> > > > > > Traceback (most recent call last):
> > > > > >   File "/usr/bin/ipsilon-client-install", line 20, in <module>
> > > > > >     from ipsilon.tools.saml2metadata import Metadata
> > > > > >   File
> > > > "/usr/lib/python2.6/site-packages/ipsilon/tools/saml2metadata.py",
> > > > > > line 22, in <module>
> > > > > >     import lasso
> > > > > >   File "/usr/lib/python2.6/site-packages/lasso.py", line 3, in
> > <module>
> > > > > >     import _lasso
> > > > > > ImportError: No module named _lasso
> > > > > >
> > > > > > Does anyone know if it's a problem about lasso's configuration or I
> > > > forgot
> > > > > > something about ipsilon-client?
> > > > > >
> > > > > > Thanks in advance.
> > > > > >
> > > > > > Luca Tartarini
> > > > >
> > > > > Not sure, _lasso.so should be provided by lasso-python package:
> > > > >
> > > > > # rpm -qf /usr/lib64/python2.6/site-packages/_lasso.so
> > > > > lasso-python-2.4.0-4.el6.x86_64
> > > > >
> > > > > CCing Simo to advise.
> > > >
> > > > Sounds like lasso-python is missing indeed.
> > > >
> > > > Simo.
> > > >
> > > >
> > > >
> >
> >
> >