Fix /doc/workshop subtree merge

Something went wrong with git subtree merge of the external
freeipa-workshop repository. A couple of files accidently ended up
in / instead of /doc/workshop/.

Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>

doc/workshop/README.facilitators

@@ -0,0 +1,35 @@
+Notes for workshop facilitators
+===============================
+
+Orientation presentation
+------------------------
+
+It is suggested to begin the workshop with a short "orientation"
+presentation, which should cover:
+
+- Goals of the workshop
+- Curriculum overview
+- High-level IdM concepts
+- High-level FreeIPA architecture
+- Further resources (this can be covered at end of workshop)
+
+Here is an example presentation you are welcome to use:
+https://github.com/frasertweedale/talks/raw/master/2016-02-03-lca-freeipa-workshop/presentation.odp
+
+Feedback
+--------
+
+Please offer participants the opportunity to provide feedback about
+their workshop.  It should include questions about their technical
+background and prior general IdM knowledge, as well as whether the
+workshop helped them learn FreeIPA, how difficult it was, etc.
+
+Example: https://goo.gl/forms/UOkcsVROqV
+
+
+Vagrant boxes
+-------------
+
+See ``building.rst`` for instructions on building Vagrant boxes.
+At time of writing, the ``netoarmando/freeipa-workshop`` box is
+FreeIPA 4.6.90 / Fedora 28, for the VirtualBox and libvirt providers.

doc/workshop/Vagrantfile

@@ -0,0 +1,63 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+Vagrant.configure(2) do |config|
+
+  config.vm.box = "netoarmando/freeipa-workshop"
+
+  config.vm.synced_folder ".", "/vagrant", disabled: true
+
+  config.vm.provider :libvirt do |libvirt|
+    libvirt.qemu_use_session = false
+    libvirt.memory = 1024
+  end
+
+  # Vagrant's "change host name" sets the short host name.  Before
+  # we repair /etc/hosts (see below) let's reset /etc/hostname to
+  # the *full* host name
+  #
+  config.vm.provision "shell",
+    inline: "hostname --fqdn > /etc/hostname && hostname -F /etc/hostname"
+
+  # Vagrant's "change host name" capability for Fedora maps hostname
+  # to loopback.  We must repair /etc/hosts
+  #
+  config.vm.provision "shell",
+    inline: "sed -ri 's/127\.0\.0\.1\s.*/127.0.0.1 localhost localhost.localdomain/' /etc/hosts"
+
+  config.vm.define "server" do |server|
+    server.vm.network "private_network", ip: "192.168.33.10"
+    server.vm.hostname = "server.ipademo.local"
+  end
+
+  config.vm.define "replica" do |replica|
+    replica.vm.network "private_network", ip: "192.168.33.11"
+    replica.vm.hostname = "replica.ipademo.local"
+
+    replica.vm.provision "shell",
+      inline: 'echo "PEERDNS=no" >> /etc/sysconfig/network-scripts/ifcfg-eth0'
+    replica.vm.provision "shell",
+      inline: 'echo "DNS1=192.168.33.10" >> /etc/sysconfig/network-scripts/ifcfg-eth1'
+    replica.vm.provision "shell",
+      inline: 'echo "nameserver 192.168.33.10" > /etc/resolv.conf'
+  end
+
+  config.vm.define "client" do |client|
+    client.vm.network "private_network", ip: "192.168.33.20"
+    client.vm.hostname = "client.ipademo.local"
+
+    client.vm.provision "shell",
+      inline: 'echo "PEERDNS=no" >> /etc/sysconfig/network-scripts/ifcfg-eth0'
+    client.vm.provision "shell",
+      inline: 'echo "DNS1=192.168.33.10" >> /etc/sysconfig/network-scripts/ifcfg-eth1'
+    client.vm.provision "shell",
+      inline: 'echo "nameserver 192.168.33.10" > /etc/resolv.conf'
+    client.vm.provision "shell",
+      inline: 'sudo sed -i "s/^/#/g" /etc/httpd/conf.d/ssl.conf'
+    client.vm.provision "shell",
+      inline: 'systemctl -q enable httpd && systemctl start httpd'
+    client.vm.provision "shell",
+      inline: 'systemctl -q enable oddjobd && systemctl start oddjobd'
+  end
+
+end

doc/workshop/app.py

@@ -0,0 +1,14 @@
+def application(environ, start_response):
+    start_response('200 OK', [('Content-Type', 'text/plain')])
+    remote_user = environ.get('REMOTE_USER')
+
+    if remote_user is not None:
+        yield "LOGGED IN AS: {}\n".format(remote_user).encode('utf8')
+    else:
+        yield b"NOT LOGGED IN\n"
+
+    yield b"\nREMOTE_* REQUEST VARIABLES:\n\n"
+
+    for k, v in environ.items():
+        if k.startswith('REMOTE_'):
+            yield "  {}: {}\n".format(k, v).encode('utf8')

doc/workshop/ipa.sh

@@ -0,0 +1,39 @@
+#!/bin/bash
+sudo dnf install -y freeipa-server freeipa-server-dns sssd-dbus mod_lookup_identity mod_authnz_pam haveged nmap-ncat nano pamtester bash-completion
+sudo systemctl enable haveged
+sudo sh -c "echo 'PS1=\"[\u@\h]\\\\$ \"' >> /etc/profile"
+sudo sh -c "echo 'PS1=\"[\h]\\\\$ \"' >> /etc/bashrc"
+sudo sh -c "echo '192.168.33.10 server.ipademo.local' >> /etc/hosts"
+sudo sh -c "echo '192.168.33.11 replica.ipademo.local' >> /etc/hosts"
+sudo sh -c "echo '192.168.33.20 client.ipademo.local' >> /etc/hosts"
+sudo rm -f /etc/httpd/conf.d/welcome.conf
+
+sudo sh -c "cat >/usr/share/httpd/app.py" <<EOF
+def application(environ, start_response):
+    start_response('200 OK', [('Content-Type', 'text/plain')])
+    logged_in = 'REMOTE_USER' in environ
+
+    if logged_in:
+        yield "LOGGED IN AS: {}\n".format(environ['REMOTE_USER']).encode('utf8')
+    else:
+        yield b"NOT LOGGED IN\n"
+
+    yield b"\nREMOTE_* REQUEST VARIABLES:\n\n"
+
+    for k, v in environ.items():
+        if k.startswith('REMOTE_'):
+            yield "  {}: {}\n".format(k, v).encode('utf8')
+EOF
+
+sudo sh -c "cat >/etc/httpd/conf.d/app.conf" <<EOF
+<VirtualHost *:80>
+    ServerName client.ipademo.local
+    WSGIScriptAlias / /usr/share/httpd/app.py
+
+    <Directory /usr/share/httpd>
+        <Files "app.py">
+            Require all granted
+        </Files>
+    </Directory>
+</VirtualHost>
+EOF