X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/4e8c321b344d8ec23de7ee7c68b2553d87defb67..bc9845761c44beecdd046620694f6d88af0e32fd:/doc/install/install-sso.html.textile.liquid diff --git a/doc/install/install-sso.html.textile.liquid b/doc/install/install-sso.html.textile.liquid index 56c7a4b337..a3064038e8 100644 --- a/doc/install/install-sso.html.textile.liquid +++ b/doc/install/install-sso.html.textile.liquid @@ -128,7 +128,7 @@ Enter password for new role: paste-database-password-you Enter it again: paste-database-password-you-generated -Rails will take care of creating the database, based on the information from @/etc/arvados/sso/database.yml@. +Rails will take care of creating the database, based on the information from @/etc/arvados/sso/database.yml@. Alternatively, if the database user you intend to use for the SSO server should not be allowed to create new databases, the user and the database can be created like this: @@ -141,34 +141,23 @@ Enter it again: paste-database-password-you-generated -
~$ sudo dpkg-reconfigure arvados-sso-server
-
- - -On a Red Hat-based system, we need to reinstall the package instead: - - -
~$ sudo yum reinstall arvados-sso-server
-
-
+{% assign railspkg = "arvados-sso-server" %} +{% include 'install_rails_reconfigure' %} h2(#client). Create arvados-server client -Use @rails console@ to create a @Client@ record that will be used by the Arvados API server. The values of @app_id@ and @app_secret@ correspond to the values for @sso_app_id@ and @sso_app_secret@ in the "API server's SSO settings.":install-api-server.html#omniauth +{% assign railshost = "" %} +{% assign railsdir = "/var/www/arvados-sso/current" %} +Use @rails console@ to create a @Client@ record that will be used by the Arvados API server. {% include 'install_rails_command' %} + +Enter the following commands at the console. The values that appear after you assign @app_id@ and @app_secret@ correspond to the values for @sso_app_id@ and @sso_app_secret@, respectively, in the "API server's SSO settings":install-api-server.html#omniauth. -
~$ ruby -e 'puts rand(2**400).to_s(36)'
-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
-~$ RAILS_ENV=production bundle exec rails console
-:001 > c = Client.new
+
:001 > c = Client.new
 :002 > c.name = "joshid"
 :003 > c.app_id = "arvados-server"
-:004 > c.app_secret = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
+:004 > c.app_secret = rand(2**400).to_s(36)
+=> "save this string for your API server's sso_app_secret"
 :005 > c.save!
 :006 > quit
 
@@ -244,11 +233,12 @@ There are two configuration options for local accounts: For more information about configuring backend support for sending email (required to send email confirmations) see "Configuring Action Mailer":http://guides.rubyonrails.org/configuring.html#configuring-action-mailer -If @allow_account_registration@ is false, you may manually create local accounts on the SSO server from the rails console: +If @allow_account_registration@ is false, you may manually create local accounts on the SSO server from the Rails console. {% include 'install_rails_command' %} + +Enter the following commands at the console. -
~$ RAILS_ENV=production bundle exec rails console
-:001 > user = User.new(:email => "test@example.com")
+
:001 > user = User.new(:email => "test@example.com")
 :002 > user.password = "passw0rd"
 :003 > user.save!
 :004 > quit
@@ -306,5 +296,3 @@ In order to use Google+ authentication, you must use the "---YOUR---CLIENT---ID---HERE--"-
   google_oauth2_client_secret: "---YOUR---CLIENT---SECRET---HERE--"-
- -