DjNRO

        'PASSWORD': '',                  # Not used with sqlite3.

        'HOST': '',                      # Set to empty string for localhost. Not used with sqlite3.

        'PORT': '',                      # Set to empty string for default. Not used with sqlite3.

        'STORAGE_ENGINE': 'INNODB',    

    }

}

# Examples: "http://media.lawrence.com/media/", "http://example.com/media/"

MEDIA_URL = ''

# Absolute path to the directory static files should be collected to.

# Don't put anything in this directory yourself; store your static files

# in apps' "static/" subdirectories and in STATICFILES_DIRS.

# URL prefix for static files.

# Example: "http://media.lawrence.com/static/"

STATIC_URL = 'http://example.com/static'

# Additional locations of static files

STATICFILES_DIRS = (

    # Don't forget to use absolute paths, not relative paths.

)

# List of finder classes that know how to find static files in

# various locations.

STATICFILES_FINDERS = (

    'django.contrib.staticfiles.finders.FileSystemFinder',

    'django.contrib.staticfiles.finders.AppDirectoriesFinder',

#    'django.contrib.staticfiles.finders.DefaultStorageFinder',

)

# Make this unique, and don't share it with anybody.

    'django.contrib.markup',

    'django.contrib.admin',

    'django.contrib.admindocs',

    'edumanage',

    'accounts',

    'south',

    'registration',

    'tinymce',

    'social_auth',

    'utils',

)

# A sample logging configuration. The only tangible logging

# If it's the same with LANGUAGES, simply do URL_NAME_LANGS = LANGUAGES

URL_NAME_LANGS = (

        ('en', 'English' ),

        ('el', 'Ελληνικά'),

    )

# Frontend country specific vars, eg. Greece

NRO_COUNTRY_NAME = _('My Country')

NRO_COUNTRY_CODE = 'gr'

# main domain url used in right top icon, eg. http://www.grnet.gr

NRO_DOMAIN_MAIN_URL = "http://www.example.com"

NRO_PROV_BY_DICT = {"name": "GRNET NOC", "url": "//noc.grnet.gr"}

#provider social media contact (Use: // to preserve https)

NRO_PROV_SOCIAL_MEDIA_CONTACT = [

                                {"url":"//twitter.com/grnetnoc", "icon":"/static/img/twitter_img.png", "name":"Twitter"},

                                ]

# map center (lat, lng)

MAP_CENTER = (36.97, 23.71)

NRO_DOMAIN_HELPDESK_DICT = {"name": _("Domain Helpdesk"), 'email':'helpdesk@example.com', 'phone': '12324567890', 'uri': 'helpdesk.example.com'}

#Countries for Realm model:

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

The following variables/settings need to be altered or set:

Set Admin contacts::

	ADMINS = (

    SECRET_KEY = '<put something really random here, eg. %$#%@#$^2312351345#$%3452345@#$%@#$234#@$hhzdavfsdcFDGVFSDGhn>'

Django social auth needs changes in the Authentication Backends depending on which social auth you want to enable::

	AUTHENTICATION_BACKENDS = (

		...

		'django.contrib.auth.backends.ModelBackend',

	)

	)

As the application includes a "Nearest Eduroam" functionality, world eduroam points are harvested via the eduroam.org kml file::

	EDUROAM_KML_URL = 'http://monitor.eduroam.org/kml/all.kml'

Depending on your AAI policy set an appropriate authEntitlement::

	SHIB_AUTH_ENTITLEMENT = 'urn:mace:example.com:pki:user'

Mail server parameters::

Set your cache backend (if you want to use one). For production instances you can go with memcached. For development you can switch to the provided dummy instance::

    CACHES = {

        'default': {

            'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache',

            'LOCATION': '127.0.0.1:11211',

        }

    }

Models Name_i18n and URL_i18n include a language choice field

If languages are the same with LANGUAGES variable, simply do URL_NAME_LANGS = LANGUAGES else set your own::

	# Frontend country specific vars, eg. Greece

	NRO_COUNTRY_NAME = _('My Country')

	NRO_COUNTRY_CODE = 'gr'

	# main domain url used in right top icon, eg. http://www.grnet.gr

	NRO_DOMAIN_MAIN_URL = "http://www.example.com"

	NRO_PROV_BY_DICT = {"name": "EXAMPLE DEV TEAM", "url": "http://devteam.example.com"}

	#NRO social media contact (Use: // to preserve https)

	NRO_PROV_SOCIAL_MEDIA_CONTACT = [

	                                {"url":"//soc.media.url", "icon":"icon.png",  "name":"NAME2(eg. Twitter)"},

	                                ]

	# map center (lat, lng)

	MAP_CENTER = (36.97, 23.71)

	NRO_DOMAIN_HELPDESK_DICT = {"name": _("Domain Helpdesk"), 'email':'helpdesk@example.com', 'phone': '12324567890', 'uri': 'helpdesk.example.com'}

	#Countries for Realm model:

	REALM_COUNTRIES = (

Django Social Auth parameters::

    TWITTER_CONSUMER_KEY = ''

    TWITTER_CONSUMER_SECRET = ''

                }

For more administrative info on eduroam CAT, you can visit: `A guide to eduroam CAT for federation administrators <https://confluence.terena.org/display/H2eduroam/A+guide+to+eduroam+CAT+for+federation+administrators>`_.

Database Sync

^^^^^^^^^^^^^

	WSGIDaemonProcess	djnro		processes=3 threads=20 display-name=%{GROUP}

	WSGIProcessGroup	djnro

	...

	<VirtualHost *:443>

		ServerName		example.com

		ServerAdmin		admin@example.com

		ServerSignature		On

		SSLEngine on

		SSLCertificateFile	...

		SSLCertificateChainFile ...

		SSLCertificateKeyFile	...

		# Shibboleth SP configuration

		ShibConfig		/etc/shibboleth/shibboleth2.xml

		Alias			/shibboleth-sp	/usr/share/shibboleth

	    # Integration of Shibboleth into Django app:

		<Location /login>

			AuthType shibboleth

			ShibRequireSession On

			ShibUseHeaders On

			require valid-user

		</Location>

		<Location /Shibboleth.sso>

			SetHandler shib

		</Location>

		Alias /static 		/path/to/djnro/static

		WSGIScriptAlias /      /path/to/djnro/apache/django.wsgi

	</VirtualHost>

*Info*: It is strongly suggested to allow access to /admin|overview|alt-login *ONLY* from trusted subnets.

Once you are done, restart apache.

Initial Data

The approach in the application is that the NRO sets the environment for the local eduroam admins. Towards that direction, the NRO has to insert the initial data for his/her clients/institutions in the *Institutions* Model

Next Steps (Set your Logo)

^^^^^^^^^^^^^^^^^^^^^^^^^^

DjNRO heavily depends on the following:

* Python (<3 & >=2.6)

* Django (1.4) - python-django

* memcached

* python-mysqldb (If you wish to use MySQL as the DB backend)

* mysql-client-5.1

* libapache2-mod-wsgi

* apache2-shibboleth : The server should be setup as a Shibboleth SP

* A mail server - Tested with exim

Django Social Auth

------------------

* django-social-auth

 *  OpenId support depends on python-openid

 *  OAuth support depends on python-oauth2