pam_ohmage.so is a Linux Pluggable Authentication Module that authenticates against an Ohmage server. The Mobilize project at UCLA needs students to use RStudio to run the curriculum labs. RStudio Server Pro uses PAM for authentication. This module could be used to provide SSO-like login experience for students. Students can use the same username and password for signing in to RStudio and Ohmage.
- Install libpam headers (in libpam0g-dev):
apt-get install libpam0g-dev make
- Build the docker image:
docker build . -t mobilizingcs/pam_ohmage - Run the docker container:
docker run -v $(pwd):/go/src/pam_ohmage mobilizingcs/pam_ohmage pam_ohmage.soshould be available at./bin/pam_ohmage.so
Testing the module requires a lot of different software components to play together (ohmage, mysql, rstudio, selenium, webdriverio). Docker Compose is used to orchestrate all these components together.
npm -g install gulp-cli@1.3.0
npm install gulp@3.9.1
gulp test_[PLATFORM]
Example: gulp test_debian
Available platforms: debian, centos
Note:
- If there have been code changes to pam_ohmage, you should rebuild the pam_ohmage_build service with:
docker-compose build pam_ohmage_buildbefore runninggulp test_[PLATFORM]again. - If there have been changes to the webdriverio test suite, you should rebuild
test_[PLATFORM]service. - If there have been changes to the test platform image, you should rebuild the
[PLATFORM]service.
- Add multi-server linux user uid sync support
- Depend on ohmage username to generate linux uid
This module breaks RStudio Server Pro's user impersonation feature when the RStudio user account being impersonated does not already have a corresponding local linux account. This could happen on ephemeral RStudio servers with NFS mounted /home directory.