ruby CAS服务器搭建 （一）
1、安装ruby
wget http://ruby.taobao.org/mirrors/ruby/1.9/ruby-1.9.2-p180.tar.bz2
tar -xjvf ruby-1.9.2-p180.tar.bz2
cd ruby-1.9.2-p180
./configure –prefix=/usr/local/ruby
make && make install
在/etc/profile文件末尾添加一行：export PATH=$PATH:/usr/local/ruby/bin
export PATH=$PATH:/usr/local/ruby/bin
在/etc/profile.d/path.sh文件中追加：/usr/local/ruby/bin
ruby –v
2.
安装rubygems
wget http://rubyforge.org/frs/download.php/74445/rubygems-1.6.2.tgz
tar xzvf rubygems-1.6.2.tgz
cd rubygems-1.6.2
sudo ruby setup.rb
sudo gem sources –a http://ruby.taobao.org/
sudo gem sources –r http://rubygems.org/
gem –v
3. 安装openssl-devel
sudo yum –y install openssl-devel(Git依赖的库)
4.安装 rubycas-server
gem install rubycas-server
5.
[root@openstack /]# ruby /usr/local/rvm/gems/ruby-1.9.2-p180/bin/rubycas-server
!!! Config file /etc/rubycas-server/config.yml does not exist!
>>> Would you like the default config file copied to "/etc/rubycas-server/config.yml"? [y/N]
y
>>> Creating config directory...
mkdir -p /etc/rubycas-server
>>> Copying "/usr/local/rvm/gems/ruby-1.9.2-p180/gems/rubycas-server-1.1.2/lib/casserver/../../config/config.example.yml" to "/etc/rubycas-server/config.yml"...
cp /usr/local/rvm/gems/ruby-1.9.2-p180/gems/rubycas-server-1.1.2/lib/casserver/../../config/config.example.yml /etc/rubycas-server/config.yml
>>> The default config has been copied. You should now edit it and try starting again.
[root@openstack /]#
[root@openstack /]# ruby /usr/local/rvm/gems/ruby-1.9.2-p180/bin/rubycas-server
>>> Redirecting RubyCAS-Server log to /var/log/casserver.log
>>> Running migrations to make sure your database schema is up to date...
/usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/connection_adapters/mysql_adapter.rb:629:in `real_connect': Access denied for user 'root'@'localhost' (using password: NO) (Mysql::Error)
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/connection_adapters/mysql_adapter.rb:629:in `connect'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/connection_adapters/mysql_adapter.rb:164:in `initialize'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/connection_adapters/mysql_adapter.rb:36:in `new'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/connection_adapters/mysql_adapter.rb:36:in `mysql_connection'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/connection_adapters/abstract/connection_pool.rb:229:in `new_connection'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/connection_adapters/abstract/connection_pool.rb:237:in `checkout_new_connection'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/connection_adapters/abstract/connection_pool.rb:191:in `block (2 levels) in checkout'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/connection_adapters/abstract/connection_pool.rb:187:in `loop'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/connection_adapters/abstract/connection_pool.rb:187:in `block in checkout'
from /usr/local/rvm/rubies/ruby-1.9.2-p180/lib/ruby/1.9.1/monitor.rb:201:in `mon_synchronize'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/connection_adapters/abstract/connection_pool.rb:186:in `checkout'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/connection_adapters/abstract/connection_pool.rb:94:in `connection'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/connection_adapters/abstract/connection_pool.rb:317:in `retrieve_connection'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/connection_adapters/abstract/connection_specification.rb:97:in `retrieve_connection'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/connection_adapters/abstract/connection_specification.rb:89:in `connection'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/migration.rb:488:in `initialize'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/migration.rb:435:in `new'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/migration.rb:435:in `up'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/activerecord-3.0.19/lib/active_record/migration.rb:417:in `migrate'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/rubycas-server-1.1.2/lib/casserver/server.rb:276:in `init_database!'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/rubycas-server-1.1.2/lib/casserver/server.rb:287:in `block in <class:Server>'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/sinatra-1.4.3/lib/sinatra/base.rb:1385:in `configure'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/rubycas-server-1.1.2/lib/casserver/server.rb:284:in `<class:Server>'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/rubycas-server-1.1.2/lib/casserver/server.rb:10:in `<module:CASServer>'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/rubycas-server-1.1.2/lib/casserver/server.rb:9:in `<top (required)>'
from /usr/local/rvm/rubies/ruby-1.9.2-p180/lib/ruby/site_ruby/1.9.1/rubygems/custom_require.rb:54:in `require'
from /usr/local/rvm/rubies/ruby-1.9.2-p180/lib/ruby/site_ruby/1.9.1/rubygems/custom_require.rb:54:in `require'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/rubycas-server-1.1.2/lib/casserver.rb:10:in `<top (required)>'
from /usr/local/rvm/rubies/ruby-1.9.2-p180/lib/ruby/site_ruby/1.9.1/rubygems/custom_require.rb:54:in `require'
from /usr/local/rvm/rubies/ruby-1.9.2-p180/lib/ruby/site_ruby/1.9.1/rubygems/custom_require.rb:54:in `require'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/rubycas-server-1.1.2/bin/rubycas-server:28:in `<top (required)>'
from /usr/local/rvm/gems/ruby-1.9.2-p180/bin/rubycas-server:19:in `load'
from /usr/local/rvm/gems/ruby-1.9.2-p180/bin/rubycas-server:19:in `<main>'
6.修改配置文件如下
vi /etc/rubycas-server/config.yml
database:
adapter: mysql
database: casserver
username: root
password: funkpass
host: localhost
reconnect: true
authenticator:
# - class: CASServer::Authenticators::Google
- class: CASServer::Authenticators::SQL
database:
adapter: mysql
database: casserver
username: root
password: funkpass
host: localhost
user_table: user
username_column: username
password_column: password
【正式用的时候不要用root了，另授权mysql用户】
7.创建对应的表
[root@xen190v-ttt bin]# mysql -h127.0.0.1 -uroot -pfunkpass casserver
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 352428
Server version: 5.1.52 Qihoo.com
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
mysql> create table user
(
userid int not null auto_increment,
username varchar(40) not null,
password varchar(40) not null,
full_name varchar(50) null,
access_level int null,
primary key(userid)
);
Query OK, 0 rows affected (0.01 sec)
mysql> quit
8.
[root@openstack /]# ruby /usr/local/rvm/gems/ruby-1.9.2-p180/bin/rubycas-server
>>> Redirecting RubyCAS-Server log to /var/log/casserver.log
>>> Running migrations to make sure your database schema is up to date...
D, [2013-10-14T10:45:59.082615 #15680] DEBUG -- : SCHEMA (0.3ms) SHOW TABLES
D, [2013-10-14T10:45:59.143210 #15680] DEBUG -- : SCHEMA (60.2ms) SHOW TABLES
D, [2013-10-14T10:45:59.144414 #15680] DEBUG -- : SQL (0.1ms) SELECT `schema_migrations`.`version` FROM `schema_migrations`
I, [2013-10-14T10:45:59.144572 #15680] INFO -- : Migrating to CreateInitialStructure (1)
>>> Your database is now up to date.
== RubyCAS-Server is starting up on port 443 for development with backup from WEBrick
!!! The specified certificate file "/path/to/your/ssl.pem" does not exist or is not readable. Your 'ssl_cert' configuration setting must be a path to a valid ssl certificate.
/usr/local/rvm/gems/ruby-1.9.2-p180/gems/rubycas-server-1.1.2/lib/casserver/server.rb:175:in `handler_ssl_options': The specified certificate file "/path/to/your/ssl.pem" does not exist or is not readable. Your 'ssl_cert' configuration setting must be a ath to a valid ssl certificate. (RuntimeError)
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/rubycas-server-1.1.2/lib/casserver/server.rb:159:in `handler_options'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/rubycas-server-1.1.2/lib/casserver/server.rb:70:in `run!'
from /usr/local/rvm/gems/ruby-1.9.2-p180/gems/rubycas-server-1.1.2/bin/rubycas-server:30:in `<top (required)>'
from /usr/local/rvm/gems/ruby-1.9.2-p180/bin/rubycas-server:19:in `load'
from /usr/local/rvm/gems/ruby-1.9.2-p180/bin/rubycas-server:19:in `<main>'
[root@openstack /]#
9可见，只差证书了
[root@openstack /]# cat /etc/rubycas-server/config.yml |grep ssl.pem
ssl_cert: /path/to/your/ssl.pem
需要把证书放到配置的这个位置，或者修改配置指向ssl.pem
我们这里先测试不使用证书的方法
注释掉
#ssl_cert: /path/to/your/ssl.pem
10.
[root@openstack /]# ruby /usr/local/rvm/gems/ruby-1.9.2-p180/bin/rubycas-server
>>> Redirecting RubyCAS-Server log to /var/log/casserver.log
>>> Running migrations to make sure your database schema is up to date...
D, [2013-10-14T10:56:00.238824 #25402] DEBUG -- : SCHEMA (0.3ms) SHOW TABLES
D, [2013-10-14T10:56:00.239453 #25402] DEBUG -- : SCHEMA (0.2ms) SHOW TABLES
D, [2013-10-14T10:56:00.240567 #25402] DEBUG -- : SQL (0.1ms) SELECT `schema_migrations`.`version` FROM `schema_migrations`
I, [2013-10-14T10:56:00.240712 #25402] INFO -- : Migrating to CreateInitialStructure (1)
>>> Your database is now up to date.
== RubyCAS-Server is starting up on port 443 for development with backup from WEBrick
[2013-10-14 10:56:07] INFO WEBrick 1.3.1
[2013-10-14 10:56:07] INFO ruby 1.9.2 (2011-02-18) [x86_64-linux]
[2013-10-14 10:56:07] INFO WEBrick::HTTPServer#start: pid=25402 port=443
11.现在启动没问题了，本地访问一下
[root@openstack /opt/nginx/sbin]# curl "127.0.0.1:443"
[root@openstack /opt/nginx/sbin]# curl "127.0.0.1:443" -i
HTTP/1.1 303 See Other
Content-Type: text/html;charset=utf-8
Location: http://127.0.0.1:443/login
Content-Length: 0
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Server: WEBrick/1.3.1 (Ruby/1.9.2/2011-02-18)
Date: Mon, 14 Oct 2013 03:21:27 GMT
Connection: Keep-Alive
[root@openstack /opt/nginx/sbin]# curl "127.0.0.1:443/login"
<?xml version="1.0" ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"XHTML1-s.dtd" >
<html xmlns="http://www.w3.org/TR/1999/REC-html-in-xml"
xml:lang="en" lang="en" >
<head>
<title>CASCentral Login</title>
<link rel="stylesheet" type="text/css" href="/themes/cas.css" />
<link rel="stylesheet" type="text/css" href="/themes/simple/theme.css" />
<link rel="icon" type="image/png" href="/themes/simple/favicon.png" />
</head>
<body onload="if (document.getElementById('username')) document.getElementById('username').focus()">
<table id="login-box">
<tr>
<td colspan="2">
<div id="headline-container">
<strong>CAS</strong>
Central Login
</div>
</td>
</tr>
<tr>
<td id="logo-container">
<img id="logo" src="/themes/simple/logo.png" />
</td>
<td id="login-form-container">
<form method="post" action="login" id="login-form"
onsubmit="submitbutton = document.getElementById('login-submit'); submitbutton.value='Please wait...'; submitbutton.disabled=true; return true;">
<table id="form-layout">
<tr>
<td id="username-label-container">
<label id="username-label" for="username">
Username
</label>
</td>
<td id="username-container">
<input type="text" id="username" name="username"
size="32" tabindex="1" accesskey="u" />
</td>
</tr>
<tr>
<td id="password-label-container">
<label id="password-label" for="password">
Password
</label>
</td>
<td id="password-container">
<input type="password" id="password" name="password"
size="32" tabindex="2" accesskey="p" autocomplete="off" />
</td>
</tr>
<tr>
<td />
<td id="submit-container">
<input type="hidden" id="lt" name="lt" value="LT-1381720899rA9973007F53DDD0527" />
<input type="hidden" id="service" name="service" value="" />
<input type="submit" class="button" accesskey="l" value="LOGIN"
tabindex="4" id="login-submit" />
</td>
</tr>
<tr>
<td colspan="2" id="infoline">
Powered by <a href="http://code.google.com/p/rubycas-server/">RubyCAS-Server</a>
</td>
</tr>
</table>
</form>
</td>
</tr>
</table>
</body>
</html>
[root@openstack /opt/nginx/sbin]#
12.现在从外界访问不了
tcp 0 0 127.0.0.1:443 0.0.0.0:* LISTEN 14624/ruby
13.修改配置
vi /etc/rubycas-server/config.yml
bind_address: 0.0.0.0
仍然绑定127.0.0.1导致外界无法访问
14.猜测使用了/etc/hosts中的localhost作为绑定
更改/etc/hosts
0.0.0.0 localhost
[root@openstack /opt/nginx/sbin]# netstat -nlp|grep 443
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 680/ruby
可以了
15.试下
[root@openstack /opt/nginx/sbin]# curl "10.16.13.37:443/login"
<?xml version="1.0" ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"XHTML1-s.dtd" >
<html xmlns="http://www.w3.org/TR/1999/REC-html-in-xml"
xml:lang="en" lang="en" >
<head>
<title>CASCentral Login</title>
<link rel="stylesheet" type="text/css" href="/themes/cas.css" />
<link rel="stylesheet" type="text/css" href="/themes/simple/theme.css" />
<link rel="icon" type="image/png" href="/themes/simple/favicon.png" />
</head>
<body onload="if (document.getElementById('username')) document.getElementById('username').focus()">
<table id="login-box">
<tr>
<td colspan="2">
<div id="headline-container">
<strong>CAS</strong>
Central Login
</div>
</td>
</tr>
<tr>
<td id="logo-container">
<img id="logo" src="/themes/simple/logo.png" />
</td>
<td id="login-form-container">
<form method="post" action="login" id="login-form"
onsubmit="submitbutton = document.getElementById('login-submit'); submitbutton.value='Please wait...'; submitbutton.disabled=true; return true;">
<table id="form-layout">
<tr>
<td id="username-label-container">
<label id="username-label" for="username">
Username
</label>
</td>
<td id="username-container">
<input type="text" id="username" name="username"
size="32" tabindex="1" accesskey="u" />
</td>
</tr>
<tr>
<td id="password-label-container">
<label id="password-label" for="password">
Password
</label>
</td>
<td id="password-container">
<input type="password" id="password" name="password"
size="32" tabindex="2" accesskey="p" autocomplete="off" />
</td>
</tr>
<tr>
<td />
<td id="submit-container">
<input type="hidden" id="lt" name="lt" value="LT-1381722029r733421F509E9779FF7" />
<input type="hidden" id="service" name="service" value="" />
<input type="submit" class="button" accesskey="l" value="LOGIN"
tabindex="4" id="login-submit" />
</td>
</tr>
<tr>
<td colspan="2" id="infoline">
Powered by <a href="http://code.google.com/p/rubycas-server/">RubyCAS-Server</a>
</td>
</tr>
</table>
</form>
</td>
</tr>
</table>
</body>
</html>
没问题了
16.现在随便输入账号密码，报错误的账号密码
17.在数据库插入
insert into user(userid,username,password,full_name,access_level)values(null,'zzz','zzzpass','zzz',0);
18.用zzz zzzpass试验下
没问题了
