==== SP gitlab omniauth 15.9.2 =====

pb after update to gitlab-ce 15.9.2 

  * https://gitlab.com/gitlab-org/gitlab/-/issues/393065
  * https://gitlab.com/gitlab-org/gitlab/-/merge_requests/109667

==== workaround ====

  * https://gitlab.com/gitlab-org/gitlab/-/issues/393065#note_1294480666

===== applied workaround =====

==== install gem omniauth-shibboleth ====

<code>
[root@gitlab gitlab]# /opt/gitlab/embedded/bin/gem install omniauth-shibboleth
Fetching omniauth-shibboleth-1.3.0.gem
Successfully installed omniauth-shibboleth-1.3.0
Parsing documentation for omniauth-shibboleth-1.3.0
Installing ri documentation for omniauth-shibboleth-1.3.0
Done installing documentation for omniauth-shibboleth after 0 seconds
1 gem installed

</code>


==== backup current files ====

<code>
[root@gitlab gitlab]#  cp /opt/gitlab/embedded/service/gitlab-rails/Gemfile.checksum /opt/gitlab/embedded/service/gitlab-rails/Gemfile.checksum.noshib
[root@gitlab gitlab]# cp /opt/gitlab/embedded/service/gitlab-rails/Gemfile /opt/gitlab/embedded/service/gitlab-rails/Gemfile-noshib
[root@gitlab gitlab]# cp /opt/gitlab/embedded/service/gitlab-rails/Gemfile.lock /opt/gitlab/embedded/service/gitlab-rails/Gemfile.lock.noshib
[root@gitlab gitlab]# cp /opt/gitlab/embedded/service/gitlab-rails/app/helpers/auth_helper.rb /opt/gitlab/embedded/service/gitlab-rails/app/helpers/auth_helper.rb.noshib
</code>

==== revert to shibboleth ====

by applying on previous file those changes 

  * https://gitlab.com/gitlab-org/gitlab/-/merge_requests/109667/diffs?commit_id=93d13533cdad1aa5e7b508f88b44fb9a758d06d5#291cee108a37b977c7af1c5ee0178f2ec53f8271

<code>
[root@gitlab gitlab]# vim /opt/gitlab/embedded/service/gitlab-rails/Gemfile.checksum
[root@gitlab gitlab]# vim /opt/gitlab/embedded/service/gitlab-rails/Gemfile   
[root@gitlab gitlab]# vim /opt/gitlab/embedded/service/gitlab-rails/Gemfile.lock
[root@gitlab gitlab]# vim /opt/gitlab/embedded/service/gitlab-rails/app/helpers/auth_helper.rb
</code>

==== unfrozen ====
<code>
[root@gitlab gitlab]# /opt/gitlab/embedded/bin/bundle config unset frozen
</code>

==== shibboleth image logo ====

download the shibboleth login button image

<code>
[root@gitlab gitlab]# mkdir -p /opt/gitlab/embedded/service/gitlab-rails/public/images/auth_buttons/

[root@gitlab gitlab]#  cd /opt/gitlab/embedded/service/gitlab-rails/public/images/auth_buttons/
[root@gitlab auth_buttons]# wget https://gitlab.com/gitlab-org/gitlab/-/raw/7e59365ce5ccc85df70d4c54b36e98e2edbdaf3d/app/assets/images/auth_buttons/shibboleth_64.png
</code>


==== reconfigure ====

reconfigure and finish the update process (that might have broken because of the lack of shibboleth) 

<code>
[root@gitlab gitlab]# gitlab-ctl reconfigure
[2023-03-06T17:22:32+01:00] INFO: version_file[Create version file for Workhorse] sending restart action to runit_service[gitlab-workhorse] (delayed)
Recipe: gitlab::gitlab-workhorse
  * runit_service[gitlab-workhorse] action restart (up to date)
[2023-03-06T17:22:32+01:00] INFO: Cinc Client Run complete in 144.713641926 seconds

Running handlers:
[2023-03-06T17:22:32+01:00] INFO: Running report handlers
Running handlers complete
[2023-03-06T17:22:32+01:00] INFO: Report handlers complete
Infra Phase complete, 9/592 resources updated in 02 minutes 52 seconds
gitlab Reconfigured!
</code>