OpenAM Policy Agent for NGINX

Download

You need to install folowing libraries due to the nginx agent being linked to the libraries dynamically.

for RHEL/CentOS:

# yum install nspr nss libxml2 pcre openssl

for Debian/Ubuntu:

# apt-get install libnspr4 libnss3 libxml2 libpcre3 libssl1.0.0

# unzip nginx_agent_YYYYMMDD.zip -d /opt

# cd /opt/nginx_agent/

# ./bin/agentadmin.sh

# ./bin/nginx

stop nginx and delete nginx_agent/ directory.

Specify OpenSSOAgentBootstrap.properties that agentadmin.sh has generated. This is centralized agent configuration mode.

http {
    ...
    am_boot_file "/path/to/OpenSSOAgentBootstrap.properties";

You can specify if you using local configuration mode.

    am_conf_file "/path/to/OpenSSOAgentConfiguration.properties";

If you want to use nginx as a reverse proxy.

location / {
    ...
    proxy_pass        http://example.com:80/;
    proxy_set_header  X-Real-IP  $remote_addr;

Currently I recommend one worker process because multi process mode does not work notification from OpenAM.

Pretty soon, I'll try solving the multi process problem. However nginx works very well with only one process.

worker_processes  1;

If you find some problem, then please send me the debug logfile.

error_log logs/error.log debug_http;

for RHEL/CentOS:

# yum install zlib-devel nspr-devel nss-devel libxml2-devel pcre-devel openssl-dev

for Debian/Ubuntu:

# apt-get install zlib1g-dev libnspr4-dev libnss3-dev libxml2-dev libpcre3-dev libssl-dev

$ mkdir extlib
$ unzip -d extlib/common common_3_0_Linux_64bit.zip
$ ln -s libamsdk.so.3 extlib/common/lib/libamsdk.so

$ make dist