Disable mod_shib when shibboleth is not enabled

ubc · Nov 26, 2024 · d759267 · d759267
1 parent 72844ad
commit d759267
Showing 1 changed file with 8 additions and 3 deletions.
diff --git a/docker-entrypoint.d/shib b/docker-entrypoint.d/shib
@@ -1,7 +1,12 @@
 #!/bin/bash
 set -e
 
-export SHIBD_SERVICE_IP=`getent hosts ${SHIBD_SERVICE_NAME} | awk '{ print $1  }'`
+if [[ -z "${SHIBBOLETH_SP_ENTITY_ID}" ]]; then
+  # disable mod_shib
+  a2dismod shib
+else
+  export SHIBD_SERVICE_IP=`getent hosts ${SHIBD_SERVICE_NAME} | awk '{ print $1  }'`
 
-envsubst < /etc/shibboleth/shibboleth2.xml-template > /etc/shibboleth/shibboleth2.xml
-chmod 644 /etc/shibboleth/shibboleth2.xml
+  envsubst < /etc/shibboleth/shibboleth2.xml-template > /etc/shibboleth/shibboleth2.xml
+  chmod 644 /etc/shibboleth/shibboleth2.xml
+fi