Shibboleth EBextension

Question

Hello,
 I am upgrading an environment from PHP 8.0 running on 64bit Amazon Linux 2/3.6.0 to PHP 8.2 running on 64bit Amazon Linux 2023/4.1.0 using Elastic Beanstalk.

The shibboleth configuration file with the correct mirror list but it still fails:
shib.config
commands:
  install_shib:
    command: |
      rm -f /etc/httpd/conf.d/ssl.conf
      /opt/elasticbeanstalk/bin/pkg-repo unlock
      yum install shibboleth -y
      /opt/elasticbeanstalk/bin/pkg-repo lock
      yum clean all -y
      rm -rf /var/cache/yum

files:
  "/etc/yum.repos.d/shibboleth.repo" :
    mode: "000644"
    owner: root
    group: root
    content: |
      [shibboleth]
        name=Shibboleth (amazonlinux2023)
        # Please report any problems to https://shibboleth.atlassian.net/jira
        type=rpm-md
        mirrorlist=https://shibboleth.net/cgi-bin/mirrorlist.cgi/amazonlinux2023
        gpgcheck=1
        gpgkey=https://shibboleth.net/downloads/service-provider/RPMS/repomd.xml.key
        https://shibboleth.net/downloads/service-provider/RPMS/cantor.repomd.xml.key
        enabled=1

Error log from Cfn-init.log
[ERROR] chkconfig failed with error 1. Output: error reading information on service shibd: No such file or directory

2024-03-08 16:11:23,205 [ERROR] Error encountered during build of prebuild_0_REDCap_AM2: Could not enable service shibd (return code 1)
Traceback (most recent call last):
  File "/usr/lib/python3.9/site-packages/cfnbootstrap/construction.py", line 579, in run_config
    CloudFormationCarpenter(config, self._auth_config, self.strict_mode).build(worklog)
  File "/usr/lib/python3.9/site-packages/cfnbootstrap/construction.py", line 288, in build
    CloudFormationCarpenter._serviceTools[manager]().apply(
  File "/usr/lib/python3.9/site-packages/cfnbootstrap/service_tools.py", line 166, in apply
    self._set_service_enabled(service, util.interpret_boolean(serviceProperties["enabled"]))
  File "/usr/lib/python3.9/site-packages/cfnbootstrap/service_tools.py", line 245, in _set_service_enabled
    modifier.set_service_enabled(service, enabled);
  File "/usr/lib/python3.9/site-packages/cfnbootstrap/service_tools.py", line 308, in set_service_enabled
    raise ToolError("Could not %s service %s" % ("enable" if enabled else "disable", service), result.returncode)
cfnbootstrap.construction_errors.ToolError: Could not enable service shibd (return code 1)
2024-03-08 16:11:23,208 [ERROR] -----------------------BUILD FAILED!------------------------
2024-03-08 16:11:23,208 [ERROR] Unhandled exception during build: Could not enable service shibd (return code 1)
Traceback (most recent call last):
  File "/opt/aws/bin/cfn-init", line 181, in 
    worklog.build(metadata, configSets, strict_mode)
  File "/usr/lib/python3.9/site-packages/cfnbootstrap/construction.py", line 137, in build
    Contractor(metadata, strict_mode).build(configSets, self)
  File "/usr/lib/python3.9/site-packages/cfnbootstrap/construction.py", line 567, in build
    self.run_config(config, worklog)
  File "/usr/lib/python3.9/site-packages/cfnbootstrap/construction.py", line 579, in run_config
    CloudFormationCarpenter(config, self._auth_config, self.strict_mode).build(worklog)
  File "/usr/lib/python3.9/site-packages/cfnbootstrap/construction.py", line 288, in build
    CloudFormationCarpenter._serviceTools[manager]().apply(
  File "/usr/lib/python3.9/site-packages/cfnbootstrap/service_tools.py", line 166, in apply
    self._set_service_enabled(service, util.interpret_boolean(serviceProperties["enabled"]))
  File "/usr/lib/python3.9/site-packages/cfnbootstrap/service_tools.py", line 245, in _set_service_enabled
    modifier.set_service_enabled(service, enabled);
  File "/usr/lib/python3.9/site-packages/cfnbootstrap/service_tools.py", line 308, in set_service_enabled
    raise ToolError("Could not %s service %s" % ("enable" if enabled else "disable", service), result.returncode)
cfnbootstrap.construction_errors.ToolError: Could not enable service shibd (return code 1)

Accepted Answer

Here is the solution for this issue:

```
files:
  "/etc/yum.repos.d/shibboleth.repo":
    mode: "000644"
    owner: root
    group: root
    content: |
      [shibboleth]
      name=Shibboleth (amazonlinux2023)
      # Please report any problems to https://shibboleth.atlassian.net/jira
      type=rpm-md
      mirrorlist=https://shibboleth.net/cgi-bin/mirrorlist.cgi/amazonlinux2023
      gpgcheck=1
      gpgkey=https://shibboleth.net/downloads/service-provider/RPMS/repomd.xml.key
              https://shibboleth.net/downloads/service-provider/RPMS/cantor.repomd.xml.key
      enabled=1

commands:
  install_shib:
    command: |
      rm -f /etc/httpd/conf.d/ssl.conf
      dnf install shibboleth -y
      dnf clean all
      rm -rf /var/cache/dnf
```

Answer

Hello,

Thank you for reaching out.

Upon checking the error this seems to be an issue with ebextension command in particular to starting the service `shibd`. There seems to be an issue while you try and enable this. You might need to check kernel logs like `journalctl -xe` to check the issue, otherwise please reach out to the concerned support team through AWS support console.

Hope this helps.

Thanks

Shibboleth EBextension

Relevant content