Thanks Supun. That was helpful. And for future reference I would like to
comment on how I resolved this issue.

---------------------------------------

1. Use 'admin' user (The default user that is created when you install
local WSO2 IS
2. Keep the domain name blank  'tenant-domain' => ' '
-----------------------------------------------




On Mon, May 23, 2016 at 4:10 PM, Supun Nakandala <[email protected]>
wrote:

> You should add only pratik to the admin username ( PGA code is appending
> the @<tenant-domain>)
>
> On Mon, May 23, 2016 at 4:08 PM, Pratik Patel <[email protected]>
> wrote:
>
>> I am doing exactly the same thing. Let me share my config here:
>>
>>     'wsis' => [
>>
>>         /**
>>          * Admin Role Name
>>          */
>>         'admin-role-name' => 'Internal/everyone',
>>
>>         /**
>>          * Read only Admin Role Name
>>          */
>>         'read-only-admin-role-name' => 'Internal/everyone',
>>
>>         /**
>>          * Gateway user role
>>          */
>>         'user-role-name' => 'Internal/everyone',
>>
>>         /**
>>          * Tenant Domain
>>          */
>>         'tenant-domain' =>'test.airavata.com',
>>
>>         /**
>>          * Tenant admin's username
>>          */
>>         'admin-username' => '[email protected]',
>>
>>         /**
>>          * Tenant admin's password
>>          */
>>         'admin-password' => 'patel',
>>
>>         /**
>>          * OAuth client key
>>          */
>>         'oauth-client-key' => 'wfIHq9SmSzkT2CKKAE5ClZiXCYYa',
>>
>>         /**
>>          * OAuth client secret
>>          */
>>         'oauth-client-secret' => '4IR90NP1YlnpZR9y0eUXQCiTz8sa',
>>
>>         /**
>>          * Identity server domain
>>          */
>>         'server' => '149.165.169.226',
>>
>>         /**
>>          * Identity server url
>>          */
>>         'service-url' => 'https://149.165.169.226:9443/',
>>
>>         /**
>>          * Enable HTTPS server verification
>>          */
>>         'verify-peer' => false,
>>
>>         /**
>>          * Path to the server certificate file
>>          */
>>         'cafile-path' => app_path() .
>> '/resources/security/idp_scigap_org.pem',
>>
>>         /**
>>          * Allow self signed server certificates
>>          */
>>         'allow-self-signed-cert' => true
>>     ],
>>
>>
>> I have attached screenshot of tenants details and service provider
>> details as well.
>>
>> Pratik Patel
>>
>> On Mon, May 23, 2016 at 3:40 PM, Supun Nakandala <
>> [email protected]> wrote:
>>
>>> You need to use the admin credentials which you used to create the
>>> tenant, not the gateway admin credentials.
>>>
>>> And when registering the OAuth-Service-Provider you don't need to do any
>>> role configuration.
>>>
>>> On Mon, May 23, 2016 at 3:33 PM, Pratik Patel <[email protected]>
>>> wrote:
>>>
>>>> Apologies for the brevity of the request. On my local instance of the
>>>> IS, there are two users. One- the default admin user which I used to create
>>>> a new tenant. And other user is tenant admin user. So it was not clear
>>>> which user to be used in configuration file. And when we create a OAuth
>>>> service provider , there is a tab for 'Role/permission configuration'. I
>>>> just wanted to know if we need to add any role in that tab. It is not given
>>>> in instructions but wanted to make sure I haven't missed anything because I
>>>> have put correct credentials in the configuration file.
>>>>
>>>> Pratik Patel
>>>> On May 23, 2016, at 3:27 PM, Supun Nakandala <[email protected]>
>>>> wrote:
>>>>>
>>>>> Yes we need to add the admin user credentials of the tenant that was
>>>>> created.
>>>>>
>>>>> Can explain more on what do you mean by credentials of the tenant? and
>>>>> role mappings to OAuth service provider?
>>>>>
>>>>>
>>>>>
>>>>> On Mon, May 23, 2016 at 3:22 PM, Pratik Patel <[email protected]>
>>>>> wrote:
>>>>>
>>>>>> Do we have to provide the credentials of the admin user or the
>>>>>> credentials of the tenant that we created? Do we need to add any role
>>>>>> mapping  for OAuth service provider?
>>>>>>
>>>>>> Pratik Patel
>>>>>> On May 23, 2016, at 3:20 PM, Supun Nakandala <
>>>>>> [email protected]> wrote:
>>>>>>>
>>>>>>> This error normally means that wrong IS admin credentials have been
>>>>>>> used in PGA config.
>>>>>>>
>>>>>>> On Mon, May 23, 2016 at 3:15 PM, Pratik Patel <[email protected]
>>>>>>> > wrote:
>>>>>>>
>>>>>>>> Hi all,
>>>>>>>>
>>>>>>>> I have deployed PGA and WSO2 IS locally, as per the instructions at
>>>>>>>> ' http://airavata.readthedocs.io/en/latest/PGA-Installation/' I
>>>>>>>> have configured pga_conf.php file for wsis and I have put credentials 
>>>>>>>> for
>>>>>>>> the tenant that I created on my local IS. I have attached the 
>>>>>>>> screenshot of
>>>>>>>> the error message. I have also created OAuth service provider and 
>>>>>>>> copied
>>>>>>>> their client key and client secret to the pga_conf file. Is there any 
>>>>>>>> step
>>>>>>>> I am missing out?
>>>>>>>>
>>>>>>>> Pratik Patel
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> --
>>>>>>> Thank you
>>>>>>> Supun Nakandala
>>>>>>> Dept. Computer Science and Engineering
>>>>>>> University of Moratuwa
>>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Thank you
>>>>> Supun Nakandala
>>>>> Dept. Computer Science and Engineering
>>>>> University of Moratuwa
>>>>>
>>>>
>>>
>>>
>>> --
>>> Thank you
>>> Supun Nakandala
>>> Dept. Computer Science and Engineering
>>> University of Moratuwa
>>>
>>
>>
>
>
> --
> Thank you
> Supun Nakandala
> Dept. Computer Science and Engineering
> University of Moratuwa
>

Reply via email to