keystone-saml2-federation devstack plugin only works on Ubuntu

[Guang Yee]

Steps to reproduce:

1. clone devstack, latest branch
2. Create a local.conf with these lines at the end

disable_all_services

enable_plugin keystone git://git.openstack.org/openstack/keystone.git
enable_service rabbitmq, mysql, keystone, keystone-saml2-federation

This should only enable Keystone and its dependents, plus the keystone-saml2-federation plugin.

3. then run stack.sh and let it rip. It will died at some point when Apache2 failed to start.
4. run 'journalctl -xe --no-pager' and you'll see something like this

Mar 19 21:11:13 vagrant-openSUSE-Leap systemd[1]: apache2.service: Main process exited, code=exited, status=1/FAILURE
Mar 19 21:11:13 vagrant-openSUSE-Leap start_apache2[4395]: [Mon Mar 19 21:11:13.960371 2018] [proxy:warn] [pid 4395] AH01146: Ignoring parameter 'retry=0' for worker 'unix:/var/run/uwsgi/keystone-wsgi-admin.socket|uwsgi://uwsgi-uds-keystone-wsgi-admin/' because of worker sharing
Mar 19 21:11:13 vagrant-openSUSE-Leap start_apache2[4395]: AH00526: Syntax error on line 9 of /etc/apache2/vhosts.d/keystone-wsgi-public.conf:
Mar 19 21:11:13 vagrant-openSUSE-Leap start_apache2[4395]: Invalid command 'ShibRequestSetting', perhaps misspelled or defined by a module not included in the server configuration
Mar 19 21:11:13 vagrant-openSUSE-Leap systemd[1]: apache2.service: Control process exited, code=exited status=1
Mar 19 21:11:13 vagrant-openSUSE-Leap systemd[1]: Failed to start The Apache Webserver.

This is due to the fact that the 'shibboleth-sp' package is missing. Notice that manually running 'a2enmod mod_shib' does not help either, till that package is installed. I would expect the devstack plugin to install all the required packages.

[Colleen Murphy (krinkle)]

It really only works on Ubuntu, even CentOS isn't properly supported: http://git.openstack.org/cgit/openstack/keystone/tree/devstack/lib/federation.sh#n71

Devstack itself does work on Ubuntu/CentOS/openSUSE so we should try to get this plugin in shape.

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/633374
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=12d56691034b8edc730fa042fdfac0fe65f7a647
Submitter: Zuul
Branch: master

commit 12d56691034b8edc730fa042fdfac0fe65f7a647
Author: erus <email address hidden>
Date: Sat Jan 26 21:49:59 2019 -0300

    Add CentOS support in devstack federation plugin

    Modify the install_federation function for adding Shibboleth repo
    and installation for CentOS in federation.sh, and also modify
    uninstall_federation function for removing Shibboleth packages
    when running `./unstack.sh`.

    Partial-bug: #1757000

    Change-Id: I8c0f63d0a4fe19eab58e7cba3c49905f35266f9d

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/633949
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=32d92f80120ba26676e876e3e166909ee2d77570
Submitter: Zuul
Branch: master

commit 32d92f80120ba26676e876e3e166909ee2d77570
Author: erus <email address hidden>
Date: Wed Jan 30 10:44:03 2019 -0300

    Add OpenSUSE support in devstack federation plugin

    Modify the install_federation function for adding Shibboleth
    installation for OpenSUSE in federation.sh, and also modify
    uninstall_federation function for removing Shibboleth packages
    when running `./unstack.sh`.

    Partial-bug: #1757000

    Change-Id: Ic3e0c37cff4d0dd3336521bac13da550fa6edfcf

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/633963
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=22c08b5462e8f0385fcd7a0aae914f143321d88c
Submitter: Zuul
Branch: master

commit 22c08b5462e8f0385fcd7a0aae914f143321d88c
Author: erus <email address hidden>
Date: Wed Jan 30 11:31:17 2019 -0300

    Add experimental job for OpenSUSE

    Create an experimental job to test federation devstack plugin
    on OpenSUSE.

    Closes-bug: #1757000

    Depends-On: https://review.openstack.org/633949/
    Change-Id: I54985ab0a756bb48b1d378cd5ab2bfb61aa98b40

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/keystone 15.0.0.0rc1 release candidate.