mod_auth_cas on CentOS7 / Apache 2.4

Posted on by

For CentOS, this is now available in the EPEL repo

mod_auth_cas (https://github.com/Jasig/mod_auth_cas) is an Apache module that plugs into the Apache mod_auth framework, to provide authentication against a Jasig CAS SSO server.  Unfortunately development on it seems to have stalled, and it currently doesn’t support Apache 2.4 – https://github.com/Jasig/mod_auth_cas/issues/49.

There is a fork that does support Apache 2.4, so this willl cover how to build and install it.

# Clone the forked github repo
git clone https://github.com/klausdieterkrannich/mod_auth_cas.git .

# install development libraries
yum install gcc httpd-devel openssl-devel libcurl-devel automake

# Run configure
./configure

# Run Make
make

# If you get errors like:
/opt/mod_auth_cas/missing: line 81: aclocal-1.12: command not found
WARNING: 'aclocal-1.12' is missing on your system.
# then symlink the binaries as follows:
ln -s /usr/bin/aclocal /usr/bin/aclocal-1.12
ln -s /usr/bin/automake /usr/bin/automake-1.12
# and run make again

# Assuming it built OK, then install it:
make install

# On CentOS this will put the binaries into:
#/usr/lib64/httpd/modules
# and you can then copy them from here to your production systems.

 

2 thoughts on “mod_auth_cas on CentOS7 / Apache 2.4”

  1. Thanks for the guide, Mark. This isn’t an issue we’d run into yet, but we are starting to look at CentOS 7 so it’s inevitable.

    I should add, though, that it’s really not recommended to build software on production servers themselves. I would recommend building an RPM package on a separate build server, and then copy that package to your production servers for installation. Better yet, submit the package to a central package repo so everyone can use it.

    If you’re not sure about packaging RPMs, I’ll take a peek at this and see if I can build a suitable package.

  2. I didn’t say things should be build on production systems! I said:
    # On CentOS this will put the binaries into:
    #/usr/lib64/httpd/modules
    # and you can then copy them from here to your production systems.

    The (unstated) assumption being that this *wasn’t* being done on a production system!

Comments are closed.