[ANN] Apache Syncope 2.1.9

The Apache Syncope team is pleased to announce the release of Syncope 2.1.9 Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: https://syncope.apache.org/downloads

Re: Syncope: Consolidated propagation report

Swagger UI, it is not possible to filter tasks by start / end date. Regards. On Wednesday, March 10, 2021, 02:50:30 AM EST, Francesco Chicchiriccò wrote: On 08/03/21 20:11, utpal kas wrote: Hello, We have set up the PULL task to execute auto-propagation to LDAP (external resource). After

Re: Syncope: Consolidated propagation report

ource" External Resource, with executions (details), sorted by end date (completion). HTH Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Notifications and automatic emails

? >> >> for example. > Classic example of Read The Manual issue, thanks for the pointers. Your > string works like a charm for a 20s update rate. Glad to hear that it worked! Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Notifications and automatic emails

Hi Stefano, it seems you've gone quite far with your tests, cool :-) For background information, please have a look at http://syncope.apache.org/docs/2.1/reference-guide.html#notifications http://syncope.apache.org/docs/2.1/reference-guide.html#e-mail-configuration In particular, you should che

Re: Syncope and Hikari

es. Regards. [1] http://syncope.apache.org/docs/2.1/reference-guide.html#deployment-directories -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

[ANN] Apache Syncope 2.1.8

The Apache Syncope team is pleased to announce the release of Syncope 2.1.8 Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: https://syncope.apache.org/downloads

Re: Role dynamic memberships do not work after importing MasterContent

ncope/core/persistence/jpa/dao/JPARoleDAO.java#L180 [2] https://github.com/apache/syncope/blob/2_1_X/core/persistence-jpa/src/main/java/org/apache/syncope/core/persistence/jpa/dao/JPARoleDAO.java#L104 -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Mem

Re: language and label edition regression in 2 =?UTF-8?Q?.1.7=20when=20having=20"_"=20??=

;:"false","multivalue":false,"uniqueConstraint":false,"readonly":false,"conversionPattern":null,"validator":null,"enumerationValues":"","enumerationKeys":"","secretKey":null,"cipherA

Re: custom reportlet and reportletConf do not appear on console

apache/syncope/core/provisioning/java/job/report/myReportlet.class >> ./core/target/syncope/WEB-INF/classes/org/apache/syncope/common/lib/report/myReportletConf.class >> >> However, no way to see them on console when I go to Configuration -> >> implementation -> reportlets ->

Re: Role layouts does not work when using dynamic membership

On 22/10/20 09:30, Francesco Chicchiriccò wrote: > Hi, > layout information is fetched by the Realm page [1] via AnyLayoutUtils#fetch > [2]. > > As you can see from [2]: > > 1. only static Roles (not dynamic Roles) are currently considered > 2. the first non-null layou

Re: Role layouts does not work when using dynamic membership

rder to set the role to users >> member of some groups. >> >> I see that when I use dynamic role membership, the builder wizard layouts >> defined for the role are not applied to my users in, but if I set like >> statically the role to my users then the layouts

Re: Fwd: How to generate swagger documentation

all with Swagger UI enabled, all working fine. I'd suggest anyway to proceed as indicated below to check your generated openapi.json. Regards. > *From:* Francesco Chicchiriccò > *Sent:* Wednesday, October 14, 2020 10:27 AM > *To:* user@syncope.apache.org > *Subject:* Re: Fwd:

Re: Fwd: How to generate swagger documentation

ope.apache.org/docs/2.1/reference-guide.html#customization-core > >   > > >   > > -- > > - Anmol  > > -- > > Dott. Andrea Patricelli > > Tel. +39 3204524292 > >   > > Engineer @ Tirasa S.r.l. > > Viale Vittoria Colonna 97 - 65127 Pescara > > Tel +39 0859116307 / FAX +39 085973 > > http://www.tirasa.net > >   > > Apache Syncope PMC Member > > -- > Dott. Andrea Patricelli > Tel. +39 3204524292 >   > Engineer @ Tirasa S.r.l. > Viale Vittoria Colonna 97 - 65127 Pescara > Tel +39 0859116307 / FAX +39 085973 > http://www.tirasa.net >   > Apache Syncope PMC Member -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Resource specific counters in Syncope

On 07/10/20 14:45, Martin van Es wrote: > Hi Francesco, > > Thx for the quick reply! > > On Wed, Oct 7, 2020 at 11:18 AM Francesco Chicchiriccò <mailto:ilgro...@apache.org>> wrote: > > Hi Martin, > so you'd want to keep different counters for diffe

Re: Resource specific counters in Syncope

ters to hold counter values and (2) creating PropagationActions classes to implement the value injection and counter increment logic. HTH Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Apples OpenDirectory

cacerts. HTH Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Apples OpenDirectory

On 30/09/20 09:43, Henri44 wrote: > Hi Francesco, > > I fix it in the meantime, thanks, will now try the password stuff. Glad to hear this! Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncop

Re: Apples OpenDirectory

to what you write above, it seems you will either need to inject some custom logic into the pull process [2] or to built a whole different strategy around Kerberos. HTH Regards. [1] https://images.apple.com/server/docs/Open_Directory_TB_v10.4.pdf [2] http://syncope.apache.org/docs/2.1/

Re: User group membership in Realm / sub-realm

m > group). > > Do you an an Idea of how should I do this kind of scenario ? Hi, you might want to have a look at http://syncope.apache.org/docs/2.1/reference-guide.html#realms More specifically: A User or an Any Object can be members of Groups in the same realm or in one of the paren

Re: Events for privilege updates

On 22/09/20 09:23, Anmol Sharma wrote: > Hi Francisco, > > I was able to verify that adding these annotations works and helps me > intercept the logic layer for application privilege updates. Glad to hear this! > On Wed, Sep 9, 2020, 4:29 AM Francesco Chicchiriccò <mailto:i

[CVE-2020-11977] Apache Syncope: Remote Code Execution via Flowable workflow definition

Description: When the Flowable extension is enabled, an administrator with workflow entitlements can use Shell Service Tasks to perform malicious operations, including but not limited to file read, file write, and code execution. Severity: Low Vendor: The Apache Software Foundation Affects: 2.

[ANN] Apache Syncope 2.0.16

The Apache Syncope team is pleased to announce the release of Syncope 2.0.16 Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: https://syncope.apache.org/downloads

[ANN] Apache Syncope 2.1.7

The Apache Syncope team is pleased to announce the release of Syncope 2.1.7 Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: https://syncope.apache.org/downloads

Re: Events for privilege updates

icInvocationHandler] *cannot extend > concrete aspect* [org.apache.syncope.core.logic.LogicInvocationHandler] > > Do you think there could be a workaround here or is hijacking > /LogicInvocationHandler/ the only option under this circumstance? > > Thanks, > Anmol > > On Sat, 5 Sep 2020 at 12:06, Franc

Re: Events for privilege updates

ithub.com/apache/syncope/blob/syncope-2.1.6/core/logic/src/main/java/org/apache/syncope/core/logic/ApplicationLogic.java#L85 > [2]  > https://github.com/apache/syncope/blob/syncope-2.1.6/core/logic/src/main/java/org/apache/syncope/core/logic/LogicInvocationHandler.java#L55 > > Anmol &g

Re: CSFR Issue

failure you had was the incorrect location, stored in the db, of the connector bundles, e.g. /opt/syncope/bundles now. Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJP

Re: Events for privilege updates

e? Regards. [1] https://github.com/apache/syncope/blob/syncope-2.1.6/core/logic/src/main/java/org/apache/syncope/core/logic/ApplicationLogic.java#L85 [2] https://github.com/apache/syncope/blob/syncope-2.1.6/core/logic/src/main/java/org/apache/syncope/core/logic/LogicInvocationHandler.java#L55 -- Fra

Re: CSFR Issue

you placed the setting. What deployment directory [1] did you set for config files (normally /opt/syncope/conf) during build? Regards. [1] http://syncope.apache.org/docs/2.1/reference-guide.html#deployment-directories -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www

Re: Identity management and custom LDAP schema

each via Groovy or Java implementations [4]. Hope this clarifies. Regards. [1] http://syncope.apache.org/docs/2.1/reference-guide.html#type-management [2] http://syncope.apache.org/docs/2.1/reference-guide.html#realms [3] http://syncope.apache.org/docs/2.1/reference-guide.html#mapping [4] http://sy

Re: Maven build instead of installer, Kerberos DB support

n any form Moreover, Syncope relies on ConnId for provisioning connectors, and AFAICT there is no connector (yet?) for Kerberos. Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Generatinmg syncope rest client by OPENAPI/swagger from openapi.json - PolicyTO model is missing in generated code

PushPolicyTO) I think the real issue is that the related REST service is heavily using Java generics: see https://github.com/apache/syncope/blob/2_1_X/common/rest-api/src/main/java/org/apache/syncope/common/rest/api/service/PolicyService.java and I am not sure how this could be better handled i

Re: error on maven gui install

On 17/07/20 10:58, Francesco Chicchiriccò wrote: > On 17/07/20 02:32, Stephen Ingram wrote: >> On Thu, Jul 16, 2020 at 2:01 PM Stephen Ingram > <mailto:sbing...@gmail.com>> wrote: >> >> I'm trying to use the graphical install method and seeing the followi

Re: error on maven gui install

t I know that XML is very picky about tags. Am > I correct or is there altogether something else wrong here? Bug confirmed: https://issues.apache.org/jira/browse/SYNCOPE-1581 Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: standalone demo stops working three days after install

asons, including the in-memory configuration for persistence: this implies that any configuration made or user created are cleared out when Tomcat is shut down. Debian, Docker and especially Maven are recommended for production. Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: compatibility with OpenJDK 11/CentOS 8

ts/syncope/2_1_X/getting-started.html#create-project FYI Syncope 3.0.0 (next major version) will require JDK 11. Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMai

Re: Logging in Syncope scripts

rence-guide.html#audit [2] http://syncope.apache.org/docs/2.1/reference-guide.html#architecture -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Create maven syncope archetype project for 2.1.7-SNAPSHOT

gt;do not >see the syncope archetype pom any where in the maven repo. https://ci.apache.org/projects/syncope/2_1_X/getting-started.html#maven-project Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope

Re: Current plans for Syncope 3.0

iki.apache.org/confluence/display/SYNCOPE/%5BDISCUSS%5D+Syncope+3.0 -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Relationship data in provision rules mapping

from the test case we added alongside the fix: https://github.com/apache/syncope/blob/2_1_X/fit/core-reference/src/test/java/org/apache/syncope/fit/core/PropagationTaskITCase.java#L582-L586 Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at T

Re: Relationship data in provision rules mapping

e steps you make and the stacktrace? The fix should be quite simple; however, in order to get it, you will have to switch to latest 2.1.7-SNAPSHOT Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Relationship data in provision rules mapping

quot;: false, > "mandatoryCondition": "true", > "purpose": "PROPAGATION", &

Re: Configure Syncope-console to accept logged in identity/username?

r can also be) compatible with OpenID, but similar to the > SAML situation above, I don't see where we add the new OIDC Provider > ("Extensions" -> "OIDC Client" and add a new OIDC Provider by clicking on the > "+" icon.)? > > Please advise. >

Re: Deploying mapping and topology changes - without MasterContent.xml

;connectorName\":\"string\",\"bundleName\":\"string\",\"version\":\"string\",\"displayName\":\"string\",\"connRequestTimeout\":0,\"poolConf\":{\"maxObjects\":0,\"minIdle\":0,\"maxIdle\

Re: Configure Syncope-console to accept logged in identity/username?

ncope-console) be > configured to accept that logged-in user automatically (i.e., "identity > assertion")? > > Thanks, > Jim -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: What approach to do this in Syncope?

asty; I was honestly surprised that you were able the Javadocs about ItemTransformer ... Regards. > My apologies for having to say that... > > Jim > > On Saturday, May 2, 2020, 10:26:36 AM EDT, Francesco Chicchiriccò > wrote: > > > Hi, > for some reason it see

Re: What approach to do this in Syncope?

> - "Something" (Java?) that take the attribute value and calculates the 2 new > attribute values and pushes those values into the realm > > But I am not sure what that "Something" is in Syncope? > > > Thanks, > Jim -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: 2.1.6 and/vs. 2.0.15 ?

"? > > Thanks, > Jim -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

[CVE-2020-1961] Server-Side Template Injection on mail templates

Description: Vulnerability to Server-Side Template Injection on Mail templates enabling attackers to inject arbitrary JEXL expressions, leading to Remote Code Execution (RCE) was discovered. Severity: Important Vendor: The Apache Software Foundation Affects: 2.0.X releases prior to 2.0.15 2.1.X

[CVE-2020-1959] Multiple Remote Code Execution Vulnerabilities

Description: A Server-Side Template Injection was identified in Syncope enabling attackers to inject arbitrary Java EL expressions, leading to an unauthenticated Remote Code Execution (RCE) vulnerability. Apache Syncope uses Java Bean Validation (JSR 380) custom constraint validators. When buildi

[CVE-2019-17557] Enduser UI XSS

Description: It was found that the EndUser UI login page reflects the successMessage parameters. By this mean, a user accessing the Enduser UI could execute javascript code from URL query string. Severity: Medium Vendor: The Apache Software Foundation Affects: 2.0.X releases prior to 2.0.15 2.

[ANN] Apache Syncope 2.0.15

The Apache Syncope team is pleased to announce the release of Syncope 2.0.15 Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: https://syncope.apache.org/downloads

[ANN] Apache Syncope 2.1.6

The Apache Syncope team is pleased to announce the release of Syncope 2.1.6 Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: https://syncope.apache.org/downloads

Re: Edit a user with more than 10 memberships causes timeout

On 28/04/20 18:47, roccom wrote: > Upgrading to a newer version fixed this for us. We were on 2.1.2 and now are > on 2.1.5. I think this issue was reported and fixed in 2.1.3. Glad to hear this. Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/

Re: Cannot access attributes in custom pull action

returned attributes by overriding the new moreAttrsToGet() method: see https://github.com/apache/syncope/blob/2_1_X/core/provisioning-api/src/main/java/org/apache/syncope/core/provisioning/api/pushpull/PullActions.java#L45 Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http:

Re: Cannot access attributes in custom pull action

nException { You'll find everything in the "delta" object, namely: * delta.getUid() * delta.getObject().getName() * delta.getObject().getAttributes() Javadoc: http://connid.tirasa.net/apidocs/1.5/org/identityconnectors/framework/common/objects/SyncDelta.html HTH Regards. > [...] -- Fr

Re: Mapping external resource with ACCOUNT and GROUP data

to migrate to latest stable 2.1.5 - for which you should look at https://github.com/apache/syncope/blob/syncope-2.1.5/core/provisioning-java/src/main/java/org/apache/syncope/core/provisioning/java/pushpull/LDAPMembershipPullActions.java instead. HTH Regards. -- Francesco Chicchiriccò Tirasa - Open

Re: Mapping external resource with ACCOUNT and GROUP data

] http://syncope.apache.org/docs/reference-guide.html#propagationactions -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Getting (possible) threadpool error when running tasks with larger sets of users?

njpa.persistence.EntityManagerImpl.commit(EntityManagerImpl.java:669) > ~[openjpa-persistence-3.1.0.jar:3.1.0] >     at > org.springframework.orm.jpa.JpaTransactionManager.doCommit(JpaTransactionManager.java:532) > ~[spring-orm-5.1.9.RELEASE.jar:5.1.9.RELEASE] >     ... 14 more > > Has anyone seen this before?  We think that it might be a threadpool > size-related problem, but are not sure where or what we need to change in the > configuration? > > Also FYI, we hope to eventually test like 50K users once we get past this, so > what else will we run into capacity/configuration-wise? > > Thanks, > Jim -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: CONFIRM unsubscribe from user@syncope.apache.org

gl/6n+ > /2riaumndUcPFZOsewDmg/75jszjc6hoe7wreBkJi0u8kvm6F0RpIlGk5WpCa7bljEc6Erm9 > GLON/DoYn1MSpdMZdwucairqvMK1YWg/7wI/xjgq6br5FBoLegVE8bd3Iy4SVWKUIRURBF7q > Ft3rVRUJdcmqHvCWpxDJ1VKPRDHf5szVkWXFJI0xiU6KuICWidZ9Hg3WXUsm3SePD7FtokiK > 0Y9SBzHpd9EZe8KRIHekl5gVS2Xe83GC5GvPHEXE0usYUNRDArOXqIkGU

Re: Possible bug - or Strange (or at least unexpected) behavior to Syncope 2.1.5 REST endpoint (tasks/executions/recent/?max=1)

what we suspect (that the millisecs > should be like ".000Z") is correct? > > As you may infer, if our guess is correct, I think that it would be very > difficult to replicate the problem at-will, so I think that the answer to > that would probably has to come from the Sy

Re: Possible bug - or Strange (or at least unexpected) behavior to Syncope 2.1.5 REST endpoint (tasks/executions/recent/?max=1)

:02:35Z > > In other words, the msecs part was completely missing! > > Is this (dropping the msecs part of the timestamp) intentional?  > > I am guessing (just a guess) that it is being dropped because possibly the > msecs part is like ".0"?  > > Is that the correct? > > Or is this a bug in Syncope 2.1.5 REST API? > > Thanks, > Jim -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Tomcat not shutting down properly after Syncope deployed to it.

nJDK Runtime Environment (build 1.8.0_222-b10) > OpenJDK 64-Bit Server VM (build 25.222-b10, mixed mode) > > Thanks, > Jim > > > > On Tuesday, January 28, 2020, 7:34:16 AM UTC, Francesco Chicchiriccò > wrote: > > > Hi, > in my experience, such behavior by Tomc

Re: Tomcat not shutting down properly after Syncope deployed to it.

kinds lof lock problems (which is what caused me to look > into this). > > Anyone seen this before?  Also, is there something we need to do to the > Syncope configuration to allow it to allow Tomcat to shutdown properly? > > FYI, we are using: > - Java: openjdk version "1.

Re: Verification on SCIM 1.1 / SCIM 2.0 in Syncope

bundle (3) implement the needed operations via the Scripted REST connector bundle (and possibly contribute the code back to the original repository) I would suggest to continue this discussion on the connid-users list, as not directly regarding Apache Syncope. Regards. [1] https://groups.g

Re: Rest Connector issue

erProxy.java:99) > ~[connector-framework-internal-1.5.0.0.jar:?] > at com.sun.proxy.$Proxy400.search(Unknown Source) ~[?:?] > at sun.reflect.GeneratedMethodAccessor1628.invoke(Unknown Source) > ~[?:?] > > > -- > Sent from: http://syncope-user.1051894.n5.nabble.com/ -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: How to determine if a task has finished?

s that we run, the > tasks within the sequence of tasks need to not be run until after the > previous task has completed (not just triggered, but actually completed), but > we have not been able to find a way, using either CLI or REST, to find out > when the task has completed

Re: Verification on SCIM 1.1 / SCIM 2.0 in Syncope

On 13/12/19 08:49, Francesco Chicchiriccò wrote: > On 12/12/19 17:53, lfinch wrote: >> That's what I'm trying to determine. My target is a SCIM 1.1 provider and I >> have to ConnID SCIM 1.1 connector implemented. >> >> How to I use Syncope to propagate a g

Re: Verification on SCIM 1.1 / SCIM 2.0 in Syncope

provider then all you need is to properly configure the ConnId SCIM 1.1 bundle. I don't think I ever configured that bundle for group provisioning, nor it seems there is reference about that (howtos, blog posts, ...); however, I am quite sure it should work, just keep trying :-) Regards.

Re: Verification on SCIM 1.1 / SCIM 2.0 in Syncope

nstead, is a SCIM 1.1 client; when configured in Syncope, it allows Syncope to provision identities from / to a SCIM 1.1 provider. Are you sure you need both? Regards. [1] https://syncope.apache.org/docs/2.1/reference-guide.html#scim [2] https://github.com/Tirasa/ConnIdSCIMv11Bundle -- Francesco

Re: AKS - InvalidImageName deploying Syncope on AKS

> > I get InvalidImageName > > syncope-console-69d47c444c-2g9x2   0/1     InvalidImageName   0          17s > > syncope-dd677f7cf-z52d6            0/1     InvalidImageName   0          17s > > syncope-enduser-7fc4f6b778-2j2dh   0/1     InvalidImageName   0          17s > >

Re: Connector issue

ovide your own implementation of Task Executor (possibly extending PriorityPropagationTaskExecutor as indicated in the docs) with purpose of skipping READ before (and after) CREATE / UPDATE / DELETE. Regards. > On Mon, Nov 25, 2019 at 9:58 AM Francesco Chicchiriccò <mailto:ilgro...@apache.org>> wro

Re: Connector issue

ATTEMPTED) -> I have implemented all of the needed methods in my > connector I think? > > Please could someone point me in the right direction as this is driving me > crazy > > Regards > Steve > > -- > Steve van der Merwe > Blog : http://www.stevevandermerwe.co.za

Re: Why DefaultItemTransformer is removed in 2_1_X ?

va.data.CustomTransformer#beforePropagation > /with /@Transactional(propagation = Propagation.REQUIRES_NEW, rollbackFor = > { Throwable.class }) /annotation. This allows to use a new entity manager > (that utilizes another available db connection) by opening a new transaction. > In this case, the flush is not happening as a new transaction is opened. > >   > >   > > I would really appreciate if you could answer on questions [Q1] and [Q2]. > > Thanks for your answers in advance! > >   > >   > > Kind Regards, > > Dmitriy Brashevets > -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Some problems encountered while testing Syncope CLI

ttributes didn't appear > to work.  For us, if this is the case, this would be a MAJOR problem, as in > the current product we use, we have many attribute flows where a single > attribute is pushed to multiple attributes in the target LDAPs. > > Please advise if there are any ways to workaround the above problems? > > Thanks, > Jim -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Syncope configuration/server replication inquiry

there is no alternative than exporting the needed configurations via REST from source and importing via REST into the destination (you can use Swagger UI for that if it comes handy). HTH Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The

Re: Syncope 2.1.5 builds failing (regardless of Maven version) due to missing dependencies (and transitive dependencies and missing POM errors)

uides/introduction/introduction-to-archetypes.html Regards. > On Monday, October 28, 2019, 3:35:24 PM UTC, Francesco Chicchiriccò > wrote: > > > On 28/10/19 16:31, oh...@yahoo.com <mailto:oh...@yahoo.com> wrote: >> Francesco, >> >> I noticed from the paste tha

Re: Syncope 2.1.5 builds failing (regardless of Maven version) due to missing dependencies (and transitive dependencies and missing POM errors)

coordinates of *your* project, not Syncope's, hence: * groupId: my.company * artifactId: idm * version 1.0.0-SNAPSHOT or any values that is not clashing with Syncope own coordinates, e.g. * org.apache.syncope * syncope * 2.1.5 HTH Regards. -- Francesco Chicchiriccò Tira

Re: Syncope 2.1.5 builds failing (regardless of Maven version) due to missing dependencies (and transitive dependencies and missing POM errors)

rdContext.startInternal(StandardContext.java:5048) >     at > org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183) >     ... 38 more >     Caused by: java.lang.ClassNotFoundException: > org.apache.cocoon.pipeline.component.PipelineComponent >     at > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1363) >     at > org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1186) >     ... 51 more > > > Can someone tell us exactly what version of the products are "officially" > being used for building Syncope, for everything (especially maven)? > > Also Hunter has mentioned that these are the exact same problems/errors he > was seeing in his earlier problem, e.g.: > > Pony Mail! <https://lists.apache.org/list.html?user@syncope.apache.org> > > > > > > Pony Mail! > > <https://lists.apache.org/list.html?user@syncope.apache.org> > > > > Thanks, > JIm > > > > On Friday, October 25, 2019, 5:12:53 PM UTC, oh...@yahoo.com > wrote: > > > Hi, > > I am trying to reproduce the Syncope 2.1.5 (on RHEL 7) build that one of my > colleagues (Hunter) had had problems with previously as reported on this > mailing list.  As described previously, he was eventually able to get a good > build by using Maven 3.0.5 instead of Maven 3.6.2.  > > However in my new build, I started with using Maven 3.0.5 and encountered > similar "transitive dependencies" and "missing POM" errors as the ones he had > been seeing previously, and then, also, working with Hunter today, he tried > both Maven 3.0.5 and 3.6.2, and today, his build attempts are also failing > now. > > So we wanted to find out if maybe there is something bad going on with the > Syncope Maven repos at this time? > > Please advise. > > Thanks, > Jim -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: How to delete old users

ental > Matching rule: Update > Unmatching rule: Provision > Allow create: checked > Allow update: checked > Allow delete: unchecked > Sync status: unchecked Ah! Of course "Allow delete" should be checked... Regards. > *Sent:* Saturday, October 12, 2019 at 6:59

Re: How to delete old users

as "This is the only mode which allows pulling delete events". Beware that ConnId's SYNC operation must be available for the related connector, otherwise incremental pull is not possible. HTH Regards. [1] http://syncope.apache.org/docs/2.1/reference-guide.html#pull-mode

Re: syncope-console HTTP Status 500 – Internal Server Error

> at > org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343) > at > org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:408) > at > org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)

Re: Performance improvements: SQL queries

cope.core.persistence.jpa.dao.AbstractAnyDAO#securityChecks can > be also optimized and adopted to consume multiple entities. > > And we can use the new method "findByKeys" instead of the loop. > > After all, entities are fetched by keys in a single query we can sort the > e

Re: Install 2.1.5 Issue, Syncope Core Failing to Deploy

ependency:tree -X` on the command line, the only errors I see > in the syncope-archetype project are > [WARNING] The POM for org.apache.syncope.core:syncope-core-rest-cxf:jar:2.1.5 > is > invalid, transitive dependencies (if any) will not be available: 1 problem was > encountered whil

Re: JWT and Active Directory Pass-through Authentication

ated its own REST endpoints. Regards. [1] http://syncope.apache.org/docs/2.1/reference-guide.html#pass-through-authentication [2] http://syncope.apache.org/docs/2.1/reference-guide.html#jwtssoprovider -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apach

Re: Having trouble updating an AD domain controller

look like a bad password (Connection reset) and I have verified > that I got the password right. > > The principal IS in the Domain Admins group and can log in and edit users on > the > domain controller. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tir

Re: Not able to create a resource

x27;t be hard to decode: it seems you have set no values under "Base contexts" or similar configuration property. Anyway, look at the sample configuration provided by the post linked above. Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

[ANN] Apache Syncope 2.0.14

The Apache Syncope team is pleased to announce the release of Syncope 2.0.14 Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: https://syncope.apache.org/downloads

[ANN] Apache Syncope 2.1.5

The Apache Syncope team is pleased to announce the release of Syncope 2.1.5 Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: https://syncope.apache.org/downloads

Re: Syncope trying to deploy using Maven and not getting login

NFO Add ConnectorInfo ConnectorKey( > bundleName=net.tirasa.connid.bundles.db.table bundleVersion=2.2.6 > connectorName=net.tirasa.connid.bundles.db.table.DatabaseTableConnector )> > to Local Connector Info Manager from > file:/opt/syncope/bundles/net.tirasa.connid.bundles.db.t

Re: Guide how start test environment to run integration tests

n such tests properly. > Hi Dmitriy, here you go: http://syncope.apache.org/building#Debug Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Syncope How do I Generate the different adminPasswordAlgorithm

use a bcrypt for the admin password (and of course change it) > but would first like to > figure out how to generate the SSHA256 this is being used right now. I know > this has to be simple > and I am missing something but search for SSHA256 does not turn up anything > except for SHA25

Re: demo problem

rver could not handle the request > > Reason: Error reading from remote server" -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Syncope behind a Apache Reverse proxy.

a$12$0HvCGo2ao0gI3q8 > for a 12th order bcrypt encode? > > > From: Francesco Chicchiriccò > Sent: Tuesday, September 3, 2019 8:43 > To: user@syncope.apache.org > Subject: Re: Syncope behind a Apache Reverse proxy. > > Hi Philip, welcome to Sy

Re: Syncope behind a Apache Reverse proxy.

http://.mdtsoft.com:18080/syncope > > > > ProxyPreserveHost on > ProxyPass http://X.mdtsoft.com:28080/syncope-console > ProxyPassReverse http://.mdtsoft.com:28080/syncope-console > > > > ProxyPreserveHost on > ProxyPass http://.mdtsoft.com:38080/syncope-enduser > ProxyPassReverse http://.mdtsoft.com:38080/syncope-enduser > > > --- -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Group Sync with Member

nfiguration or is it not possible? -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: trying to implement a Groovy Item Transformer

wArrayList<>(values); newValues.get(0).setStringValue("test"+ values.get(0).getStringValue()); returnnewValues; } thanks again On Wed, Aug 14, 2019 at 1:52 AM Francesco Chicchiriccò mailto:ilgro...@apache.org>> wrote: On 12/08/19 17:54, Noah Hansen . wrote: >

Re: trying to implement a Groovy Item Transformer

thub.com/apache/syncope/blob/2_1_X/fit/core-reference/src/main/java/org/apache/syncope/fit/core/reference/DateToLongItemTransformer.java -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA

Re: JWT with User Key

] https://github.com/apache/syncope/blob/master/core/spring/src/main/java/org/apache/syncope/core/spring/security/AuthDataAccessor.java#L371 [2] https://github.com/apache/syncope/blob/master/core/spring/src/main/java/org/apache/syncope/core/spring/security/SyncopeJWTSSOProvider.java#L86 -- Francesco

Demo URLs updated

Hi all, I just wanted to follow-up some upgrade activities performed by infra, which resulted in updating our demo URLs, now based at https://syncope-vm.apache.org/ See http://syncope.apache.org/demo for full reference. Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence

<    1   2   3   4   5   6   7   8   9   10   >