Re: [Dev] API 2.1.0 + Identity Server 5.3.0

[Isura Karunaratne]

Hi Javier,

According to the apim-wso2carbon.log file, only admin user tried login to
the APIM instance and it was a success login.  Please attach the log, once
the store login failure occurs. Also, attach the conf folders in each
products.

Thanks
Isura.

On Fri, May 26, 2017 at 8:56 PM, Vazquez-Hidalgo, Javier <
javier.vazquez-hida...@tdsecurities.com> wrote:

> Hi Isura,
>
>
>
> Thanks for your help!
>
>
>
> Attached to the email are both logs with “log4j.logger.org.wso2.carbon.
> user.core=DEBUG” enabled.
>
>
>
> Regards,
>
> Javier
>
>
>
> *From:* Isura Karunaratne [mailto:is...@wso2.com]
> *Sent:* Friday, May 26, 2017 3:10 AM
> *To:* Vazquez-Hidalgo, Javier
> *Cc:* dev@wso2.org
> *Subject:* Re: [Dev] API 2.1.0 + Identity Server 5.3.0
>
>
>
> Hi Javier,
>
>
>
> We need additional information to analyze the issue. Attach the
> wso2carbon.log file after enabling the debug logs for
> org.wso2.carbon.user.core package as follows.
>
>
>
> Add following entry to /repository/conf/log4j.properties file
>
>
>
> log4j.logger.org.wso2.carbon.user.core=DEBUG
>
>
>
>
>
> Thanks
>
> Isura.
>
>
>
> On Fri, May 26, 2017 at 12:50 AM, Vazquez-Hidalgo, Javier <
> javier.vazquez-hida...@tdsecurities.com> wrote:
>
> Hello,
>
>
>
> I’m trying to setup APIM 2.1.0 + Identity Server 5.3.0 on separate boxes,
> at this point I have all configurations in place with shared databases and
> I added a secondary User Store (Read-Only LDAP) on the Identity Server and
> I’m able to assign permissions, etc..
>
>
>
> The problem I’m having is that when I try to login to the API Store using
> a user from the secondary user store I get the following error in the login
> screen:
>
>
>
> “Error! Login failed. Insufficient Privileges.”
>
>
>
> APIM Logs:
>
> -
>
>
>
> [2017-05-25 14:49:52,812] ERROR - JDBCAuthorizationManager Error occurred
> while accessing Java Security Manager Privilege Block
>
> [2017-05-25 14:49:52,812] ERROR - APIStoreHostObject Login failed.
> Insufficient Privileges.
>
>
>
> IS Log:
>
> ---
>
> [2017-05-25 14:49:52,498]  INFO 
> {org.wso2.carbon.core.services.util.CarbonAuthenticationUtil}
> -  'DOMAIN/xxx@carbon.super [-1234]' logged in at [2017-05-25
> 14:49:52,497-0400]
>
>
>
> So, it seems that the user is authenticated but something is happening.
>
>
>
> Just to be clear, the user from the secondary user store has
> “Internal/subscriber” role which should be sufficient to login.
>
>
>
> I also created a test user in the IS primary store and assigned
> “Internal/subscriber” role and that worked fine.
>
>
>
>
>
> Any help or pointers is appreciated.
>
>
>
> Thanks,
>
> Javier Vazquez
>
>
>
>
>
>
>
> If you wish to unsubscribe from receiving commercial electronic messages
> from TD Bank Group, please click here  or go
> to the following web address: www.td.com/tdoptout
> Si vous souhaitez vous désabonner des messages électroniques de nature
> commerciale envoyés par Groupe Banque TD veuillez cliquer ici
>  ou vous rendre à l'adresse www.td.com/tddesab
>
>
> NOTICE: Confidential message which may be privileged. Unauthorized
> use/disclosure prohibited. If received in error, please go to
> www.td.com/legal for instructions.
> AVIS : Message confidentiel dont le contenu peut être privilégié.
> Utilisation/divulgation interdites sans permission. Si reçu par erreur,
> prière d'aller au www.td.com/francais/avis_juridique pour des
> instructions.
>
>
> ___
> Dev mailing list
> Dev@wso2.org
> http://wso2.org/cgi-bin/mailman/listinfo/dev
>
>
>
>
>
> --
>
> *Isura Dilhara Karunaratne*
>
> Senior Software Engineer | WSO2
>
> Email: is...@wso2.com
>
> Mob : +94 772 254 810 <+94%2077%20225%204810>
>
> Blog : http://isurad.blogspot.com/
>
>
>
>
>
>
>



-- 

*Isura Dilhara Karunaratne*
Senior Software Engineer | WSO2
Email: is...@wso2.com
Mob : +94 772 254 810
Blog : http://isurad.blogspot.com/
___
Dev mailing list
Dev@wso2.org
http://wso2.org/cgi-bin/mailman/listinfo/dev

Re: [Dev] [GSoC 2017][IS] SCIM 2.0 Compliance Test Suite

[Gayan Gunawardana]

On Mon, May 29, 2017 at 1:21 AM, Vindula Jayawardana <
vindula...@cse.mrt.ac.lk> wrote:

> Hi,
>
> I have been working on understanding more on the current SCIM 1.1 test
> suite. Hence I further analyzed it and identified the following
> possibilities.
>
+1

>
> 1. Apart from the specification specific implementation aspects, a
> significant amount of code reuse can be done from the current code base.
> However as per the SCIM mailing list [1] some concerns were raised
> regarding the current structure of the implementation.
> 2. For the proposed scim core component, we can make use of the Charon [2]
> code base as a start.
>
> As Identity Server currently supports SCIM 2.0 in the C5 architecture
> only, I have added a PR [3] and a jira [4] to make it available for C4
> architecture as well. Greatly appreciate if you can review it and merge.
>
We will review [3],[4] btw can you continue the work with IS 6.0.0 in C5 ?
I guess for compliance test it won't make much difference.

>
> I am currently working in the webapp of the component architecture
> proposed and hoping to start implementing the scimcore component in the
> coming week. Apart from that, will look into mocking the /Schemas endpoint
> in the SCIM 1.1 implementation of Identity Server to get a better
> understanding on how the SCIM 1.1 test suite works with IS.
>
Great progress Vindula keep it up.

>
> [1] - https://mailarchive.ietf.org/arch/msg/scim/
> JYFpusDrtQ94hnghvEPjczU4laE
> [2] - https://github.com/wso2/charon
> [3] - https://github.com/wso2-extensions/identity-inbound-
> provisioning-scim2/pull/16
> [4] - https://wso2.org/jira/projects/IDENTITY/issues/IDENTITY-5942
>
> Thank you
>
> *Vindula Jayawardana*
> Computer Science and Engineering Dept.
> University of Moratuwa
> mobile : +713462554
> Email : vindul...@gmail.com
>
> 
> 
> 
> 
>
> *“Respect is how to treat everyone, not just those you want to impress. "*
>
>
> *-Richard Branson-*
>
>
>
> On 2 April 2017 at 18:29, Vindula Jayawardana 
> wrote:
>
>> Hi Omindu,
>>
>> Thank you for the prompt feedback on the draft proposal. I incorporated
>> the suggestions you made on the proposal.
>>
>> As also mentioned in the proposal, I made the configuration options more
>> flexible by giving the manual configuration feasibility to the tester as an
>> optional feature apart from what is mandatory in the project. I hope that
>> would give us the required flexibility in the SCIM 2.0 compliance test
>> suite in terms of configuration options.
>>
>> Thank you,
>>
>> *Vindula Jayawardana*
>> Computer Science and Engineering Dept.
>> University of Moratuwa
>> mobile : +713462554
>> Email : vindul...@gmail.com
>>
>> 
>> 
>> 
>> 
>>
>> *“Respect is how to treat everyone, not just those you want to impress. "*
>>
>>
>> *-Richard Branson-*
>>
>>
>>
>> On 2 April 2017 at 17:08, Omindu Rathnaweera  wrote:
>>
>>> Will have a look Vindula.
>>>
>>> Thanks for putting an effort on running the 1.1 test. The intention
>>> behind it was to get a general idea on what to include in the 2.0 test
>>> suite and the areas to be improved. What you have obtained should be enough
>>> to understand the nature of the tests and basics information to be
>>> captured. I agree on the fact that the configuration options should be more
>>> flexible. Let's capture this in the project proposal if you haven't already.
>>>
>>> Regards,
>>> Omindu.
>>>
>>>
>>>
>>>
>>>
>>> On Sun, Apr 2, 2017 at 1:26 PM, Vindula Jayawardana <
>>> vindula...@cse.mrt.ac.lk> wrote:
>>>
 Hi,

 I shared my draft proposal in GSoC dashboard and I kindly request your
 feedback in improving the proposal.

 Thank you,

 *Vindula Jayawardana*
 Computer Science and Engineering Dept.
 University of Moratuwa
 mobile : +713462554
 Email : vindul...@gmail.com

 
 
 
 

 *“Respect is how to treat everyone, not just those you want to impress.
 "*


 *-Richard Branson-*



 On 30 March 2017 at 23:13, Vindula Jayawardana <
 vindula...@cse.mrt.ac.lk> wrote:

> Hi,
>
> As mentioned above, I looked at the SCIM 1.1 compliance test suite
> [1]. Due to the reason that the SCIM 1.1 test suite requires an internet
> facing SCIM 1.1 server to run the tests against, I setup-ed an Identity
> Server instance in AWS [2]. However when the 

Re: [Dev] [GSoC 2017][ESB]Native inbound and connector for IBM MQ 8.0

[Hasitha Jayasundara]

Hi all,

I have updated the sample MQ-Client [1] to establish SSL connections with
IBM WebSphere MQ. Still carry on the research with the provided links about
the IBM specific options that can be added other than SSL and will update
the thread with the findings as soon as possible.Working on

"Can we check if it is possible to have an alternative way to set SSL
details other than system properties with IBM MQ client libraries.The
reason for that is we are limiting our self to one set of properties per
JVM. eg: System.setProperty("

which discussed in the previous thread.

[1] https://github.com/hasithajayasundara/IBM-MQ-client

On Tue, May 23, 2017 at 7:12 AM, Malaka Silva  wrote:

> Hi Hasitha,
>
> Sounds good. It'll be good if you can come up with the list of IBM specific
> options.
>
> On Tue, May 23, 2017 at 7:08 AM, Hasitha Jayasundara <
> hasithajayasunda...@gmail.com> wrote:
>
>> Hi all,
>>
>> I tried to implement sample MQ-Client that can connect to IBM MQ and we
>> can improve that to implement inbound endpoint and the connector.Will improve
>> that MQ-Client to support more ibm specific options such as SSL connections
>> within next few days.
>>
>> On Fri, May 19, 2017 at 11:07 AM, Hasitha Jayasundara <
>> hasithajayasunda...@gmail.com> wrote:
>>
>>> Hi all,
>>>
>>> Thanks for the replies.I'll go through the links and let you know if
>>> there's any issue.
>>>
>>> On Fri, May 19, 2017 at 8:50 AM, Riyafa Abdul Hameed 
>>> wrote:
>>>
 Hi,

 See if this blog post could be of help:
 https://riyafa.wordpress.com/2016/02/21/sample-java-client-f
 or-websphere-mq-consumer-and-producer/

 Regards,
 Riyafa

 On Thu, May 18, 2017 at 9:13 PM, Malaka Silva  wrote:

> Hi Hasitha,
>
> You can find sample code done for IBM MQ 7.5. Here ESB acts as the
> consumer.
>
> What is required to do is ESB act as the consumer and producer for IBM
> MQ 8.0.
>
> Let me know if something is not clear?
>
> [1] https://github.com/wso2-attic/esb-connectors/pull/483/files
>
> On Tue, May 16, 2017 at 9:39 PM, Hasitha Jayasundara <
> hasithajayasunda...@gmail.com> wrote:
>
>> Hi ayya,
>>
>> As we discussed today can you provide me some materials to get more
>> familiar with IBM MQ 8.0?
>>
>> thanks
>>
>> --
>> *D.M.Hasitha Nadishan Jayasundara*
>> *Department of Electronic and Telecommunication Engineering*
>> University of Moratuwa
>> *mobile:* *+94711959266 <071%20195%209266>*
>> *blogspot*: learnjavawithisla.blogspot.com/  *email:*
>> hasithajayasunda...@gmail.com
>> 
>> 
>> 
>>
>
>
>
> --
>
> Best Regards,
>
> Malaka Silva
> Associate Director / Architect
> M: +94 777 219 791 <+94%2077%20721%209791>
> Tel : 94 11 214 5345
> Fax :94 11 2145300 <011%202%20145300>
> Skype : malaka.sampath.silva
> LinkedIn : http://www.linkedin.com/pub/malaka-silva/6/33/77
> Blog : http://mrmalakasilva.blogspot.com/
>
> WSO2, Inc.
> lean . enterprise . middleware
> https://wso2.com/signature
> http://www.wso2.com/about/team/malaka-silva/
> 
> https://store.wso2.com/store/
>
> Don't make Trees rare, we should keep them with care
>
> ___
> Dev mailing list
> Dev@wso2.org
> http://wso2.org/cgi-bin/mailman/listinfo/dev
>
>


 --
 Riyafa Abdul Hameed
 Software Engineer, WSO2 Lanka (Pvt) Ltd 

 Email: riy...@wso2.com 
 Website: https://riyafa.wordpress.com/ 
   
 

>>>
>>>
>>>
>>> --
>>> *D.M.Hasitha Nadishan Jayasundara*
>>> *Department of Electronic and Telecommunication Engineering*
>>> University of Moratuwa
>>> *mobile:* *+94711959266 <+94%2071%20195%209266>*
>>> *blogspot*: learnjavawithisla.blogspot.com/  *email:*
>>> hasithajayasunda...@gmail.com
>>> 
>>> 
>>> 
>>>
>>
>>
>>
>> --
>> *D.M.Hasitha Nadishan Jayasundara*
>> *Department of Electronic and Telecommunication Engineering*
>> University of Moratuwa
>> *mobile:* *+94711959266 <+94%2071%20195%209266>*
>> *blogspot*: learnjavawithisla.blogspot.com/  *email:*
>> hasithajayasunda...@gmail.com
>> 
>> 
>> 
>>
>
>
>
> --
>
> Best Regards,
>
> Malaka Silva
> Associate Director / Architect
> M: +94 

Re: [Dev] [GSOC][CEP][DEV] Python API for Siddhi CEP

[Madhawa Vidanapathirana]

Hi,
I have started working on debugger wrapping. So far I have made progress
through first two test cases at [1]. However, the code is failing in test
case 3.

*This is because of python crashing with following error when callback
events are fired from non python created threads. The issue affects not
only the debugger but other callbacks such as StreamCallback and
QueryCallback.*

> Fatal Python error: take_gil: NULL tstate


This error appear only in Python versions 3.4+.  The code works fine when I
tested with Python 3.3 and below. Furthermore, the error doesn't appear in
any Python version when the debugger is connected. During further
investigation of error, I found the documented bug [2] of Python which
affect Python 3.4+ in similar manner.

So far, a possible solution we have is to use a single python created
thread to transfer callbacks from Java side to Python. For this purpose, we
can use a queue (in java) to hold callback events triggered from java and a
single (python created) thread to transfer the events in queue to python.
However, this approach might have some performance issues. Can I know your
opinion on this approach? (So far I have not implemented this approach)

Furthermore, I have opened an issue in pyjnius github [3] (the API I use to
communicate between Java and Python) on this matter. It might also be
possible to fix the issue from pyjnius side using some of the suggestions
available in [2] and [4]. I will look into this approach as well.

[1] -
https://github.com/wso2/siddhi/blob/79608b6aea4fbd99bb08cf64493c8b4144bc32e4/modules/siddhi-core/src/test/java/org/wso2/siddhi/core/debugger/TestDebugger.java
[2] - https://bugs.python.org/issue20891
[3] - https://github.com/kivy/pyjnius/issues/276
[4] - https://bugs.python.org/issue19576

Thanks and Regards,
Madhawa

On Thu, May 25, 2017 at 5:32 AM, Sriskandarajah Suhothayan 
wrote:

> Great, you can do the debugger now, he said after finishing the debugger
> work, work on wrap event simulator .
>
> Regards
> Suho
>
> On Wed, May 24, 2017 at 6:19 PM, Madhawa Vidanapathirana <
> madhawavidanapathir...@gmail.com> wrote:
>
>> Hi,
>>
>> I have updated the README.md file. Will let you know when I have progress
>> with debugger.
>>
>> Thanks
>> Madhawa
>>
>> On Mon, May 22, 2017 at 12:41 PM, Grainier Perera 
>> wrote:
>>
>>> Hi Madhawa,
>>>
>>> I went through your impl and it works great. Try to improve the test
>>> cases and documentation (README.md on git) when you get a time.
>>>
>>> Furthermore, I have added Event simulator REST API endpoints to the doc
>>> that you shared earlier. After getting debugger to work, try to wrap event
>>> simulator endpoints as well. You can refer to [1] for the documentation on
>>> them.
>>>
>>> [1] https://docs.wso2.com/display/DAS400/Simulating+Events
>>>
>>> Regards,
>>> Grainier.
>>>
>>> On Sun, May 21, 2017 at 6:00 PM, Madhawa Vidanapathirana <
>>> madhawavidanapathir...@gmail.com> wrote:
>>>
 Hi,

 I started working on the native wrapper. So far, have the very basic
 functionality working for Siddhi 3.1 and Siddhi 4.0.
 I am maintaining my code at the repo [1].

 Next step is getting the Siddhi debugger working. I will let you know
 when it is done.

 [1] - https://github.com/madhawav/SiddhiCEPPythonAPI

 Thanks,
 Madhawa


 On Fri, May 19, 2017 at 12:47 PM, Sriskandarajah Suhothayan <
 s...@wso2.com> wrote:

> Sure we'll look into that.
>
> As the immediate next step can you make finish the work on native
> Siddhi working with python.
> Make sure Siddhi debugger also works.
>
> Regards
> Suho
>
> On Fri, May 19, 2017 at 11:45 AM, Madhawa Vidanapathirana <
> madhawavidanapathir...@gmail.com> wrote:
>
>> Hi,
>>
>> I have updated the shared doc [1] by adding "List of Admin Services
>> to be used for DAS 3.1". Feel free to add-in your suggestions as well.
>>
>> Also, are their any documentation available on specific Admin
>> Services APIs I have mentioned in doc? Such as a Reference Guide 
>> describing
>> the methods and parameters of individual Admin Services APIs. I am 
>> already
>> aware of the general documentation on Admin Services available at [2]
>>
>> [1] - https://docs.google.com/document/d/154ndex3OBoE0zNOLHatmMOvt
>> 2JHh9RJya2VdHlHOTl4/edit?usp=sharing
>> [2] - https://docs.wso2.com/display/DAS310/Calling+Admin+Services+
>> from+Apps
>>
>> Thanks,
>> Madhawa
>>
>> On Tue, May 9, 2017 at 11:11 AM, Sriskandarajah Suhothayan <
>> s...@wso2.com> wrote:
>>
>>> +1 for the approach.
>>> We will add the classes
>>>
>>> On Tue, May 9, 2017 at 12:05 AM Madhawa Vidanapathirana <
>>> madhawavidanapathir...@gmail.com> wrote:
>>>
 Hi,

 I will look into REST side also then. Already found good APIs to
 work with 

Re: [Dev] [GSoC 2017][IS] SCIM 2.0 Compliance Test Suite

[Vindula Jayawardana]

Hi,

I have been working on understanding more on the current SCIM 1.1 test
suite. Hence I further analyzed it and identified the following
possibilities.

1. Apart from the specification specific implementation aspects, a
significant amount of code reuse can be done from the current code base.
However as per the SCIM mailing list [1] some concerns were raised
regarding the current structure of the implementation.
2. For the proposed scim core component, we can make use of the Charon [2]
code base as a start.

As Identity Server currently supports SCIM 2.0 in the C5 architecture only,
I have added a PR [3] and a jira [4] to make it available for C4
architecture as well. Greatly appreciate if you can review it and merge.

I am currently working in the webapp of the component architecture proposed
and hoping to start implementing the scimcore component in the coming week.
Apart from that, will look into mocking the /Schemas endpoint in the SCIM
1.1 implementation of Identity Server to get a better understanding on how
the SCIM 1.1 test suite works with IS.

[1] - https://mailarchive.ietf.org/arch/msg/scim/JYFpusDrtQ94hnghvEPjczU4laE
[2] - https://github.com/wso2/charon
[3] -
https://github.com/wso2-extensions/identity-inbound-provisioning-scim2/pull/16
[4] - https://wso2.org/jira/projects/IDENTITY/issues/IDENTITY-5942

Thank you

*Vindula Jayawardana*
Computer Science and Engineering Dept.
University of Moratuwa
mobile : +713462554
Email : vindul...@gmail.com






*“Respect is how to treat everyone, not just those you want to impress. "*


*-Richard Branson-*



On 2 April 2017 at 18:29, Vindula Jayawardana 
wrote:

> Hi Omindu,
>
> Thank you for the prompt feedback on the draft proposal. I incorporated
> the suggestions you made on the proposal.
>
> As also mentioned in the proposal, I made the configuration options more
> flexible by giving the manual configuration feasibility to the tester as an
> optional feature apart from what is mandatory in the project. I hope that
> would give us the required flexibility in the SCIM 2.0 compliance test
> suite in terms of configuration options.
>
> Thank you,
>
> *Vindula Jayawardana*
> Computer Science and Engineering Dept.
> University of Moratuwa
> mobile : +713462554
> Email : vindul...@gmail.com
>
> 
> 
> 
> 
>
> *“Respect is how to treat everyone, not just those you want to impress. "*
>
>
> *-Richard Branson-*
>
>
>
> On 2 April 2017 at 17:08, Omindu Rathnaweera  wrote:
>
>> Will have a look Vindula.
>>
>> Thanks for putting an effort on running the 1.1 test. The intention
>> behind it was to get a general idea on what to include in the 2.0 test
>> suite and the areas to be improved. What you have obtained should be enough
>> to understand the nature of the tests and basics information to be
>> captured. I agree on the fact that the configuration options should be more
>> flexible. Let's capture this in the project proposal if you haven't already.
>>
>> Regards,
>> Omindu.
>>
>>
>>
>>
>>
>> On Sun, Apr 2, 2017 at 1:26 PM, Vindula Jayawardana <
>> vindula...@cse.mrt.ac.lk> wrote:
>>
>>> Hi,
>>>
>>> I shared my draft proposal in GSoC dashboard and I kindly request your
>>> feedback in improving the proposal.
>>>
>>> Thank you,
>>>
>>> *Vindula Jayawardana*
>>> Computer Science and Engineering Dept.
>>> University of Moratuwa
>>> mobile : +713462554
>>> Email : vindul...@gmail.com
>>>
>>> 
>>> 
>>> 
>>> 
>>>
>>> *“Respect is how to treat everyone, not just those you want to impress.
>>> "*
>>>
>>>
>>> *-Richard Branson-*
>>>
>>>
>>>
>>> On 30 March 2017 at 23:13, Vindula Jayawardana >> > wrote:
>>>
 Hi,

 As mentioned above, I looked at the SCIM 1.1 compliance test suite
 [1]. Due to the reason that the SCIM 1.1 test suite requires an internet
 facing SCIM 1.1 server to run the tests against, I setup-ed an Identity
 Server instance in AWS [2]. However when the test are run, it fails due to
 /ServiceProviderConfigs and /Schemas endpoints. As WSO2 SCIM 1.1 support
 [3] is not covering the mentioned two endpoints, tests are
 failing when run.

 However in order to get an idea on how the result representation had
 been done in SCIM 1.1 compliance test suit, I mocked the
 /ServiceProviderConfigs endpoint [4] and was able to get the
 following output.


 ​