[PROPOSAL] Replace SecureRandom with ThreadLocalRandom

2018-01-24 Thread Francesco Chicchiriccò
org/apache/syncope/common/lib/SecureTextRandomProvider.java#L29 [2] https://docs.oracle.com/javase/7/docs/api/java/util/concurrent/ThreadLocalRandom.html [3] https://docs.oracle.com/javase/8/docs/api/java/util/concurrent/ThreadLocalRandom.html -- Francesco Chicchiriccò Tirasa - Open Source Excel

Re: [DISCUSS] Swagger UI 3.0

2018-01-05 Thread Francesco Chicchiriccò
FYI: https://issues.apache.org/jira/browse/SYNCOPE-1262 On 26/12/2017 17:27, Francesco Chicchiriccò wrote: Hi all, since we introduced the support for Swagger (as an extension [1] - see it at at work [2]), I believe many have found it very useful. We are currently shipping a patched version

Re: [GitHub] syncope issue #64: Japanese translation

2018-01-02 Thread Francesco Chicchiriccò
thanks for your contribution. I wanted to know if you already sent ICLA( Individual Contributors License Agreement) to become a contributor, if not you follow the guide you find at the following link[1] [1] http://syncope.apache.org/contributing.html --- -- Francesco Chicchiric

[DISCUSS] Swagger UI 3.0

2017-12-26 Thread Francesco Chicchiriccò
rosso/new.json [8] https://github.com/apache/syncope/commit/130c4a084710b77eb7005bf0885cfccaa5d39558 [9] https://github.com/apache/syncope/commit/75ee922abd7072ef1d87824e1388eaa5facfcd04 -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software F

[ANN] Apache Syncope 2.0.7

2017-12-25 Thread Francesco Chicchiriccò
The Apache Syncope team is pleased to announce the release of Syncope 2.0.7. Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: http://syncope.apache.org/downloads.

[RESULT] [VOTE] Apache Syncope 2.0.7

2017-12-25 Thread Francesco Chicchiriccò
Hi all, after 72 hours, the vote for Syncope 2.0.7 [1] *passes* with 6 PMC + 1 non-PMC votes. +1 (PMC / binding) * Francesco Chicchiriccò * Marco Di Sabatino * Fabio Martelli * Matteo Alessandroni * Andrea Patricelli * Colm O hEigeartaigh +1 (non binding) * Matteo Di Carlo 0 -1 Thanks to

Re: [VOTE] Apache Syncope 2.0.7

2017-12-24 Thread Francesco Chicchiriccò
YI, the missing files are exactly the same from the Maven staging repo: https://repository.apache.org/content/repositories/orgapachesyncope-1046/org/apache/syncope/syncope/2.0.7/ Thanks for spotting this! Regards. On Fri, Dec 22, 2017 at 9:55 AM, Francesco Chicchiriccò wrote: I've created a

Re: [DISCUSS] Apache Syncope 2.0.7

2017-12-22 Thread Francesco Chicchiriccò
On 22/12/2017 10:56, Francesco Chicchiriccò wrote: Discussion thread for vote on 2.0.6 release, with GIT source tag (6ddf377551f65a4fad8ff6ebb24ea56b39455845). ...and same here :-/ Sorry, it's 2.0.7 clearly. For more information on the release process, check out http://www.apache.or

[DISCUSS] Apache Syncope 2.0.7

2017-12-22 Thread Francesco Chicchiriccò
a public server (i.e. http://www.apache.org/dist/syncope/) Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: [VOTE] Apache Syncope 2.0.7

2017-12-22 Thread Francesco Chicchiriccò
On 22/12/2017 10:55, Francesco Chicchiriccò wrote: I've created a 2.0.6 release, with the following artifacts up for a vote: It's clearly 2.0.7 (from the subject and the links below), sorry for the typo. GIT source tag (6ddf377551f65a4fad8ff6ebb24ea56b39455845): https

[VOTE] Apache Syncope 2.0.7

2017-12-22 Thread Francesco Chicchiriccò
aging site: http://syncope.apache.org/2.0.7/index.html PGP release keys (signed using 273DF287): http://www.apache.org/dist/syncope/KEYS Vote will be open for 72 hours. [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove (and reason why) Here's my +1 Regards. -- Francesco Chicchiriccò Tir

Re: [DISCUSS] Time for 2.0.7?

2017-12-20 Thread Francesco Chicchiriccò
On 20/12/2017 09:33, Fabio Martelli wrote: Il 20/12/2017 08:56, Francesco Chicchiriccò ha scritto: Hi all, given the consensus, I am about to start the release process. Stay tuned. Hi Francesco, sorry but I just discovered a bug about the latest yesterday changes. I'm ready with a fix, p

Re: [DISCUSS] Time for 2.0.7?

2017-12-19 Thread Francesco Chicchiriccò
Hi all, given the consensus, I am about to start the release process. Stay tuned. Regards. On 19/12/2017 08:50, Francesco Chicchiriccò wrote: Hi all, it seems quite some work has been done for 2.0.7 [1], and I believe the remaining issues [2] can be safely moved to 2.0.8 (or later), hence I

[DISCUSS] Time for 2.0.7?

2017-12-18 Thread Francesco Chicchiriccò
%2012313120%20AND%20fixVersion%20%3D%2012341740%20ORDER%20BY%20priority%20DESC%2C%20key%20ASC -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Group membership

2017-11-30 Thread Francesco Chicchiriccò
at 7:29 AM, Francesco Chicchiriccò wrote: On 28/11/2017 18:18, Colm O hEigeartaigh wrote: Thanks Francesco! What do you think of the following additions to GroupTO: - staticMembershipCount - dynamicMembershipCount - totalMembershipCount (maybe not necessary?) Hi Colm, the first two

Re: Group membership

2017-11-28 Thread Francesco Chicchiriccò
IMHO. Regards. On Wed, Nov 22, 2017 at 12:11 PM, Francesco Chicchiriccò wrote: Hi Colm, On 20/11/2017 18:19, Colm O hEigeartaigh wrote: Hi all, Recently we updated the RelationshipTO class to return the "other" end of the relationship. I'm wondering if it's possible (

Re: Group membership

2017-11-22 Thread Francesco Chicchiriccò
go ahead and fill an improvement on JIRA for this. Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Cannot connect to docker container for DB

2017-11-13 Thread Francesco Chicchiriccò
cope.apache.org/docs/reference-guide.html#postgresql [2] https://syncope.apache.org/docs/reference-guide.html#customization -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail ht

Re: Error when using Syncope rest client to update UserTO

2017-10-29 Thread Francesco Chicchiriccò
h a CXF feature, resulting in the error you are getting. Maybe Sergey can shed some light? Regards. On 10/23/2017 1:34 PM, Francesco Chicchiriccò wrote: Hi, from the snippet and stacktrace below, I have some observations: 1. why Syncope 2.0.1? it's one year old - FYI 2.0.6 was recentl

Re: SYNCOPE-1138 followup

2017-10-27 Thread Francesco Chicchiriccò
On 27/10/2017 10:11, Francesco Chicchiriccò wrote: Hi Colm, I confirm the problem on master; 2_0_X works fine with your use-case below, instead. I probably made some mistake when merging to master; a fix will be provided soon. Here you go: http://git-wip-us.apache.org/repos/asf/syncope

Re: SYNCOPE-1138 followup

2017-10-27 Thread Francesco Chicchiriccò
,"name":"BigEngine","dynRealms":[],"auxClasses":[],"plainAttrs":[{"schemaInfo":{"@class":"org.apache.syncope.common.lib.to.PlainSchemaTO","key":"size","anyTypeClass":"EngineClass","type":"String","mandatoryCondition":"false","multivalue":false,"uniqueConstraint":false,"readonly":false,"conversionPattern":null,"validator":null,"enumerationValues":"","enumerationKeys":"","secretKey":null,"cipherAlgorithm":null,"mimeType":null},"schema":"size","values":["2000"]}],"derAttrs":[],"virAttrs":[],"resources":[],"relationships":[],"memberships":[],"dynMemberships":[]}]} I was expecting to see the reference to BigCar here, as the relationship is bi-directional but nothing is there. Am I missing something? Colm. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Error when using Syncope rest client to update UserTO

2017-10-22 Thread Francesco Chicchiriccò
e some issue when passing key to CXF, can you please have a look? Regards, Anh -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

[ANN] Apache Syncope 2.0.6

2017-10-12 Thread Francesco Chicchiriccò
The Apache Syncope team is pleased to announce the release of Syncope 2.0.6. Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: http://syncope.apache.org/download

[RESULT] [VOTE] Apache Syncope 2.0.6

2017-10-12 Thread Francesco Chicchiriccò
Hi all, after 72 hours, the vote for Syncope 2.0.6 [1] *passes* with 5 PMC + 3 non-PMC votes. +1 (PMC / binding) * Francesco Chicchiriccò * Colm O hEigeartaigh * Massimiliano Perrone * Andrea Patricelli * Marco Di Sabatino +1 (non binding) * Matteo Di Carlo * Matteo Alessandroni * Lorenzo Di

[DISCUSS] Apache Syncope 2.0.6

2017-10-09 Thread Francesco Chicchiriccò
a public server (i.e. http://www.apache.org/dist/syncope/) Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: [VOTE] Apache Syncope 2.0.6

2017-10-09 Thread Francesco Chicchiriccò
On 09/10/2017 12:06, Francesco Chicchiriccò wrote: I've created a 2.0.6 release, with the following artifacts up for a vote: GIT source tag (4d88e9b510014da81291d095830a5ddcae9108c4): Bad copy / paste: the GIT source tag is d9da82f6ae760c5b612462b064a7ba5fa9b97179 (as you can read fro

[VOTE] Apache Syncope 2.0.6

2017-10-09 Thread Francesco Chicchiriccò
aging site: http://syncope.apache.org/2.0.6/index.html PGP release keys (signed using 273DF287): http://www.apache.org/dist/syncope/KEYS Vote will be open for 72 hours. [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove (and reason why) Here's my +1 Regards. -- Francesco Chicchiriccò Tir

[DISCUSS] Time for 2.0.6?

2017-10-04 Thread Francesco Chicchiriccò
41555%20ORDER%20BY%20priority%20DESC,%20key%20ASC [2] https://issues.apache.org/jira/issues/?jql=statusCategory%20=%20done%20AND%20project%20=%2012313120%20AND%20fixVersion%20=%2012341555%20ORDER%20BY%20priority%20DESC,%20key%20ASC -- Francesco Chicchiriccò Tirasa - Open Source Excellence

Re: [DISCUSS] - Privileges in Syncope 2.1.0

2017-09-14 Thread Francesco Chicchiriccò
On 14/09/2017 18:36, Colm O hEigeartaigh wrote: On Thu, Sep 14, 2017 at 8:47 AM, Francesco Chicchiriccò wrote: That's fine. (SCIM? Are you working on something that might be useful for SYNCOPE-152?) Yes, hopefully I will have some news on this soon. Wow :-) Is it a possibility t

Re: [DISCUSS] - Privileges in Syncope 2.1.0

2017-09-14 Thread Francesco Chicchiriccò
On 08/09/2017 16:33, Colm O hEigeartaigh wrote: Hi Francesco, On Fri, Sep 8, 2017 at 8:18 AM, Francesco Chicchiriccò wrote: Very practical reasons (as said elsewhere I believe): starting with 2.0, Entitlements are no more database entities (as they used to be up to 1.2) but Java constants

Re: [DISCUSS] - gitbox migration

2017-09-14 Thread Francesco Chicchiriccò
017 at 10:25 AM, Francesco Chicchiriccò wrote: On 13/09/2017 10:22, Andrea Patricelli wrote: Hi Colm, Il 12/09/2017 13:40, Colm O hEigeartaigh ha scritto: Hi all, Other git-based projects at Apache, such as Apache CXF, have moved to use gitbox.apache.org. The main advantage is that the source i

Re: [DISCUSS] - gitbox migration

2017-09-13 Thread Francesco Chicchiriccò
). Why there is so scarce documentation? It's https://gitbox.apache.org/ I'm actually +-0 for this: I don't see much benefits (we've been handling PRs without much troubles so far) nor big problems. Regards. [1] http://www.gitboxapp.com/ -- Francesco Chicchiriccò

[ANN] Apache Syncope 2.0.5

2017-09-10 Thread Francesco Chicchiriccò
The Apache Syncope team is pleased to announce the release of Syncope 2.0.5. Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: http://syncope.apache.org/downloads

[RESULT] [VOTE] Apache Syncope 2.0.5 (take 3)

2017-09-10 Thread Francesco Chicchiriccò
Hi all, after 72 hours, the vote for Syncope 2.0.5 [1] *passes* with 4 PMC + 4 non-PMC votes. +1 (PMC / binding) * Francesco Chicchiriccò * Colm O hEigeartaigh * Massimiliano Perrone * Andrea Patricelli +1 (non binding) * Matteo Di Carlo * Matteo Alessandroni * Lorenzo Di Cola * Sergey

Re: [DISCUSS] - Privileges in Syncope 2.1.0

2017-09-08 Thread Francesco Chicchiriccò
" privileges to be assigned to Syncope. On Thu, Aug 17, 2017 at 2:02 PM, Francesco Chicchiriccò wrote: On 14/08/2017 19:12, Colm O hEigeartaigh wrote: Hi Francesco, Many thanks for your reply. On Thu, Jul 27, 2017 at 10:08 AM, Francesco Chicchiriccò < ilgro...@apache.org> wrot

[VOTE] Apache Syncope 2.0.5 (take 3)

2017-09-06 Thread Francesco Chicchiriccò
aging site: http://syncope.apache.org/2.0.5/index.html PGP release keys (signed using 273DF287): http://www.apache.org/dist/syncope/KEYS Vote will be open for 72 hours. [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove (and reason why) Here's my +1 Regards. -- Francesco Chicchiriccò Tir

[DISCUSS] Apache Syncope 2.0.5 (take 3)

2017-09-06 Thread Francesco Chicchiriccò
a public server (i.e. http://www.apache.org/dist/syncope/) Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: [DISCUSS] Apache Syncope 2.0.5

2017-09-06 Thread Francesco Chicchiriccò
On 06/09/2017 08:56, Francesco Chicchiriccò wrote: (Replying here as this is DISCUSS thread related to the VOTE in progress) On 05/09/2017 18:26, Colm O hEigeartaigh wrote: I tried to start the standalone distribution but got the error

[CANCELED] [VOTE] Apache Syncope 2.0.5

2017-09-05 Thread Francesco Chicchiriccò
, Francesco Chicchiriccò wrote: I've created a 2.0.5 release, with the following artifacts up for a vote: GIT source tag (726614b80cd25168637754f88cdb2f9030e77012): https://git-wip-us.apache.org/repos/asf?p=syncope.git;a=commit;h=726614b80cd25168637754f88cdb2f9030e77012 List of changes: https:

Re: [DISCUSS] Apache Syncope 2.0.5

2017-09-05 Thread Francesco Chicchiriccò
Naturally, I am going to cancel (for the 2nd time in 2 days) the VOTE in progress. Regards. On 05/09/2017 11:35, Francesco Chicchiriccò wrote: Discussion thread for vote on 2.0.5 release, with GIT source tag (726614b80cd25168637754f88cdb2f9030e77012). For more information on the release pr

[DISCUSS] Apache Syncope 2.0.5

2017-09-05 Thread Francesco Chicchiriccò
a public server (i.e. http://www.apache.org/dist/syncope/) Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

[VOTE] Apache Syncope 2.0.5

2017-09-05 Thread Francesco Chicchiriccò
aging site: http://syncope.apache.org/2.0.5/index.html PGP release keys (signed using 273DF287): http://www.apache.org/dist/syncope/KEYS Vote will be open for 72 hours. [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove (and reason why) Here's my +1 Regards. -- Francesco Chicchiriccò Tir

[CANCELED] [VOTE] Apache Syncope 2.0.5

2017-09-04 Thread Francesco Chicchiriccò
Hi all, this vote is now canceled. I will remove the tag from GIT, the staging artifacts, the Maven staging repository and the staging site. After resolving SYNCOPE-1199 and SYNCOPE-1203 I will start again a vote for 2.0.5. Regards. On 04/09/2017 11:38, Francesco Chicchiriccò wrote: I&#x

Re: [DISCUSS] Apache Syncope 2.0.5

2017-09-04 Thread Francesco Chicchiriccò
fix the two issues above and start a new vote soon, hopefully today. Regards. On 04/09/2017 11:39, Francesco Chicchiriccò wrote: Discussion thread for vote on 2.0.5 release, with GIT source tag (5c388d4455f58c50c52ee467e81fbac4e2aea017). For more information on the release process, check out

[DISCUSS] Apache Syncope 2.0.5

2017-09-04 Thread Francesco Chicchiriccò
a public server (i.e. http://www.apache.org/dist/syncope/) Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

[VOTE] Apache Syncope 2.0.5

2017-09-04 Thread Francesco Chicchiriccò
aging site: http://syncope.apache.org/2.0.5/downloads.html PGP release keys (signed using 273DF287): http://www.apache.org/dist/syncope/KEYS Vote will be open for 72 hours. [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove (and reason why) Here's my +1 Regards. -- Francesco Chicchiriccò Tir

Re: [DISCUSS] Apache Syncope 2.0.5?

2017-09-04 Thread Francesco Chicchiriccò
Hi all, FYI I am starting right now. Regards. On 29/08/2017 13:50, Francesco Chicchiriccò wrote: On 29/08/2017 13:47, Colm O hEigeartaigh wrote: Yes, sounds good to me. I will have WSS4J 2.1.11 released by early next week, so SYNCOPE-1195 <https://issues.apache.org/jira/browse/SYNCOPE-1

Re: SAML RelayState length

2017-08-31 Thread Francesco Chicchiriccò
On 31/08/2017 12:29, Colm O hEigeartaigh wrote: On Thu, Aug 31, 2017 at 11:22 AM, Francesco Chicchiriccò wrote: About checking the Relay State expiration, the duration is currently set to 5 seconds but I am afraid it is not curerntly verified during the response validation. 5 seconds seems

Re: SAML RelayState length

2017-08-31 Thread Francesco Chicchiriccò
On 31/08/2017 11:33, Colm O hEigeartaigh wrote: On Thu, Aug 31, 2017 at 7:51 AM, Francesco Chicchiriccò wrote: Anyway, I see several SAML 2.0 implementations out there not enforcing the 80 chars limit: would removing all but the AuthnRequestID from the current JWT-based Relay State be an

Re: SAML RelayState length

2017-08-30 Thread Francesco Chicchiriccò
On 30/08/2017 19:01, Colm O hEigeartaigh wrote: Hi Francesco, On Thu, Aug 17, 2017 at 2:10 PM, Francesco Chicchiriccò wrote: Hi Colm, at the moment the relay state as signed JWT is used to hold [1]: * the preference to use the (non-standard?) deflate encoding - which might be omitted, we

Re: [DISCUSS] Apache Syncope 2.0.5?

2017-08-29 Thread Francesco Chicchiriccò
it then for WSS4J 2.1.11 and get SYNCOPE-1195 on-board then. Do you also think to address SYNCOPE-1198? Regards. On Mon, Aug 28, 2017 at 7:53 AM, Andrea Patricelli wrote: Hi all, Il 28/08/2017 08:33, Francesco Chicchiriccò ha scritto: Hi all, Apache Syncope 2.0.5 already contains several

[DISCUSS] Apache Syncope 2.0.5?

2017-08-27 Thread Francesco Chicchiriccò
%20ASC -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Which IDE and O/S for dev machine?

2017-08-19 Thread Francesco Chicchiriccò
sed on Syncope or (b) willing to contribute to the Apache Syncope project? >> A: Overall, I'd like to do both: develop an IdM for my employer, and >> contribute to the project. >> I will send in the ICLA some time next week. >> As for "what areas I'd like to contr

Re: IdP initiated SAML SSO

2017-08-17 Thread Francesco Chicchiriccò
passed to the Agent by the IdP itself (as a request param, for example) and then added by the Agent into the REST call which ends up in SAML2SPLogic. Having a further setting for IdP conf to explicitly authorize IdP-initiated scenarios makes sense too, to me. Regards. -- Francesco Chicchiriccò

Re: SAML RelayState length

2017-08-17 Thread Francesco Chicchiriccò
.java#L408 -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: [DISCUSS] - Privileges in Syncope 2.1.0

2017-08-17 Thread Francesco Chicchiriccò
On 14/08/2017 19:12, Colm O hEigeartaigh wrote: Hi Francesco, Many thanks for your reply. On Thu, Jul 27, 2017 at 10:08 AM, Francesco Chicchiriccò wrote: Hi Colm, thanks for bringing back this topic. As said in the original thread mentioned above, I would stay as much general as possible

Re: Some queries on getMetadata in SAML2SPLogic

2017-08-16 Thread Francesco Chicchiriccò
:26 AM, Francesco Chicchiriccò wrote: Hi, FYI I have now remembered why we used to have @PreAuthorize("hasRole('" + StandardEntitlement.ANONYMOUS + "')") on SAML2SPLogic#getMetadata: the reason was that metadata were supposed to be get through the SAML2SPAgent, wh

Re: Some queries on getMetadata in SAML2SPLogic

2017-08-16 Thread Francesco Chicchiriccò
Hi, FYI I have now remembered why we used to have @PreAuthorize("hasRole('" + StandardEntitlement.ANONYMOUS + "')") on SAML2SPLogic#getMetadata: the reason was that metadata were supposed to be get through the SAML2SPAgent, which acts as HTTP interface for all SAML 2.0 operations - this is als

Re: Some queries on getMetadata in SAML2SPLogic

2017-08-14 Thread Francesco Chicchiriccò
at 2:59 PM, Francesco Chicchiriccò wrote: Agree. Maybe it should just be changed to @PreAuthorize("isAuthenticated()") +1. b) The urlContext not validated at all. For example, you can pass through something like "../../root" which is added to the metadata,

Re: Some queries on getMetadata in SAML2SPLogic

2017-08-11 Thread Francesco Chicchiriccò
in mind here? Just forbid '../'? What could be the issue(s) with the current implementation? Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Which IDE and O/S for dev machine?

2017-08-11 Thread Francesco Chicchiriccò
deas about the areas where you'd like to contribute, thanks. Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: [DISCUSS] - Privileges in Syncope 2.1.0

2017-07-27 Thread Francesco Chicchiriccò
d be enough, working with ApplicationTO (having a List privileges field). WDYT? Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: [DISCUSS] - Dynamic group memberships

2017-07-26 Thread Francesco Chicchiriccò
On 2017-07-26 13:49 Colm O hEigeartaigh wrote: Hi Francesco, On Wed, Jul 26, 2017 at 9:35 AM, Francesco Chicchiriccò wrote: Anyway, your proposed change looks fine, but I would not mix in the same field both static and dynamic memberships; hence, I propose to: * keep List memberships

Re: [DISCUSS] - Dynamic group memberships

2017-07-26 Thread Francesco Chicchiriccò
round interested in dynamic memberships :-) Anyway, your proposed change looks fine, but I would not mix in the same field both static and dynamic memberships; hence, I propose to: * keep List memberships * change List dynGroups into List dynMemberships, where each MembershipTO has natu

Re: Console error on master

2017-07-26 Thread Francesco Chicchiriccò
36 PM, Francesco Chicchiriccò wrote: Il 18 luglio 2017 16:50:30 CEST, Colm O hEigeartaigh ha scritto: I see the following error after creating a user using the standalone distribution on Master: org.apache.wicket.WicketRuntimeException: Property could not be resolved for class:

Re: Console error on master

2017-07-18 Thread Francesco Chicchiriccò
instance with property "resourceName" which I recently renamed as "resource". Can someone take a look and fix? I'm just going on holiday :-) Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Soft

Re: 2.0.x test failures

2017-07-17 Thread Francesco Chicchiriccò
_0_X/48/console [2] http://jenkins.tirasa.net/job/ApacheSyncope_2_0_X/551/console -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Encryptor + AES + key size

2017-07-17 Thread Francesco Chicchiriccò
at 3:34 PM, Francesco Chicchiriccò wrote: On 17/07/2017 16:32, Colm O hEigeartaigh wrote: Hi all, When AES is used as the cipher algorithm, and if the supplied secret key length is < 16, Encryptor prints the debug message: "actualKey too short, adding some random characters&qu

Re: Encryptor + AES + key size

2017-07-17 Thread Francesco Chicchiriccò
think instead we should be using some random bytes instead! Optionally we could also impose a minimum acceptable size on the secret key length, and throw an exception if it does not match this. WDYT? +1 Shall we fix this also on 1_2_X (besides 2_0_X and master)? Regards. -- Francesco Chicchi

Re: [DISCUSS] - Change default password algorithm for 2.1.0

2017-07-14 Thread Francesco Chicchiriccò
/spring/security/DefaultCredentialChecker.java#L31 no? If you are ok with switching to SSHA256 for 2.1.0 I'll create a JIRA Sure, please go ahead. Regards. On Fri, Jul 14, 2017 at 12:09 PM, Francesco Chicchiriccò < ilgro...@apache.org> wrote: On 14/07/2017 11:54, Colm O h

Re: [DISCUSS] - Change default password algorithm for 2.1.0

2017-07-14 Thread Francesco Chicchiriccò
took a different approach for default admin password, default JWS key, etc https://issues.apache.org/jira/browse/SYNCOPE-1119 No? On Fri, Jul 14, 2017 at 10:48 AM, Francesco Chicchiriccò wrote: On 14/07/2017 11:45, Colm O hEigeartaigh wrote: How does the salt configuration work

Re: [DISCUSS] - Change default password algorithm for 2.1.0

2017-07-14 Thread Francesco Chicchiriccò
g/security/Encryptor.java with configuration from security.properties Regards. On Fri, Jul 14, 2017 at 10:41 AM, Francesco Chicchiriccò < ilgro...@apache.org> wrote: On 14/07/2017 11:40, Colm O hEigeartaigh wrote: I guess SHA-256 would be a straightforward replacement. Maybe we should instead

Re: [DISCUSS] - Change default password algorithm for 2.1.0

2017-07-14 Thread Francesco Chicchiriccò
/lib/types/CipherAlgorithm.java :-) Regards. On Fri, Jul 14, 2017 at 9:52 AM, Francesco Chicchiriccò wrote: On 14/07/2017 10:48, Colm O hEigeartaigh wrote: Should we change the default password algorithm from SHA1 for 2.1.0? It's probably time to migrate from SHA1 IMO. Makes sense

Re: [DISCUSS] - Change default password algorithm for 2.1.0

2017-07-14 Thread Francesco Chicchiriccò
Not a big deal, anyway. Which algorithm do you propose? Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Access Tokens label in dashboard panel

2017-07-13 Thread Francesco Chicchiriccò
On 12/07/2017 19:02, Colm O hEigeartaigh wrote: (Active) SSO Tokens? +1 for "SSO Tokens" Regards. On Wed, Jul 12, 2017 at 4:51 PM, Francesco Chicchiriccò wrote: Hi , I am not completely sure that "Access Token" is actually misleading - wikipedia does not even me

Re: Access Tokens label in dashboard panel

2017-07-12 Thread Francesco Chicchiriccò
okens... Maybe we should change that name because access token is the standard name of an OAuth token so it's misleading. Maybe we can use something like sessions or authenticated sessions or authenticated users... WDYT? Best regards, Massi -- Francesco Chicchiriccò Tirasa - Open Source Ex

[ANN] Apache Syncope 2.0.4

2017-07-06 Thread Francesco Chicchiriccò
The Apache Syncope team is pleased to announce the release of Syncope 2.0.4. Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: http://syncope.apache.org/downloads.

[RESULT] [VOTE] Apache Syncope 2.0.4

2017-07-06 Thread Francesco Chicchiriccò
Hi all, after 72 hours, the vote for Syncope 2.0.4 [1] *passes* with 6 PMC + 1 non-PMC votes. +1 (PMC / binding) * Francesco Chicchiriccò * Fabio Martelli * Marco Di Sabatino * Andrea Patricelli * Massimiliano Perrone * Colm O hEigeartaigh +1 (non binding) * Matteo Di Carlo 0 -1 Thanks

Re: Third-party JWT integration

2017-07-05 Thread Francesco Chicchiriccò
On 05/07/2017 10:19, Colm O hEigeartaigh wrote: Just committed! Thanks, I'm working on it. Regards. On Wed, Jul 5, 2017 at 9:15 AM, Francesco Chicchiriccò wrote: On 05/07/2017 10:12, Colm O hEigeartaigh wrote: OK will do! I'll check in an @Ignore'd test that I wrote, feel

Re: Third-party JWT integration

2017-07-05 Thread Francesco Chicchiriccò
On 05/07/2017 10:12, Colm O hEigeartaigh wrote: OK will do! I'll check in an @Ignore'd test that I wrote, feel free to modify or replace it if you want. Sure. Where is the test code located? I cannot find it.. Regards. On Tue, Jul 4, 2017 at 7:05 PM, Francesco Chicchiriccò wrote:

Re: Third-party JWT integration

2017-07-04 Thread Francesco Chicchiriccò
cope/core/spring/security/AuthDataAccessor.java#L389 Even if I have a custom JWTSSOProvider plugged in, there is still an error about not finding a corresponding access token. Colm. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software F

Re: AnyObjects query

2017-07-04 Thread Francesco Chicchiriccò
:-) Regards. On 04/07/17 15:04, Francesco Chicchiriccò wrote: On 04/07/2017 15:57, Sergey Beryozkin wrote: I did some experiments in CXF: https://github.com/apache/cxf/blob/master/rt/rs/extensions/search/src/test/java/org/apache/cxf/jaxrs/ext/search/sql/SQLHierarchicalQueryTest.java Indeed

Re: AnyObjects query

2017-07-04 Thread Francesco Chicchiriccò
we have "a.b.c" then if 'b' is a collection then it would branch to doBuildCollectionPredicate. It was awhile back since I played with the typed JPA2 code, Native one is a mystery... I agree supporting such queries is not easy...but supporting then can offer an ultimate searc

Re: Numbers REST endpoint

2017-07-04 Thread Francesco Chicchiriccò
See https://issues.apache.org/jira/browse/SYNCOPE-1141 Regards. On 03/07/2017 17:44, Colm O hEigeartaigh wrote: Yes looks good to me, thanks! Colm. On Mon, Jul 3, 2017 at 4:19 PM, Francesco Chicchiriccò wrote: On 03/07/2017 16:36, Francesco Chicchiriccò wrote: On 03/07/2017 16:28, Colm

Re: Numbers REST endpoint

2017-07-03 Thread Francesco Chicchiriccò
On 03/07/2017 16:36, Francesco Chicchiriccò wrote: On 03/07/2017 16:28, Colm O hEigeartaigh wrote: Hi all, Just checking to see if this is a known issue or not. If I call the following: curl -u admin:password -H "Accept: application/xml" http://localhost:9080/syncope/rest/numb

Re: Numbers REST endpoint

2017-07-03 Thread Francesco Chicchiriccò
6feae4befa65f1d3@%3Cdev.syncope.apache.org%3E -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

[DISCUSS] Apache Syncope 2.0.4

2017-07-03 Thread Francesco Chicchiriccò
and on a public server (i.e. http://www.apache.org/dist/syncope/) Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

[VOTE] Apache Syncope 2.0.4

2017-07-03 Thread Francesco Chicchiriccò
site: http://syncope.apache.org/2.0.4/downloads.html PGP release keys (signed using 273DF287): http://www.apache.org/dist/syncope/KEYS Vote will be open for 72 hours. [ ] +1 approve [ ] +0 no opinion [ ] -1 disapprove (and reason why) Here's my +1 Regards. -- Francesco Chicchiriccò Tir

Re: AnyObjects query

2017-07-03 Thread Francesco Chicchiriccò
On 30/06/2017 18:23, Colm O hEigeartaigh wrote: Hi Francesco, On Fri, Jun 30, 2017 at 3:42 PM, Francesco Chicchiriccò wrote: At persistence level, Relationships have leftEnd and rightEnd: https://github.com/apache/syncope/blob/2_0_X/core/persistence-api/src/main/java/org/apache/syncope/core

Re: AnyObjects query

2017-06-30 Thread Francesco Chicchiriccò
worths an improvement, maybe for 2.0.5 as there are ATM 0 issues open for 2.0.4 and CXF 3.1.12 was just released - meaning that we could start our own release process on Monday. Regards. On Thu, Jun 29, 2017 at 10:19 AM, Francesco Chicchiriccò wrote: On 29/06/2017 11:04, Sergey Beryozkin w

Re: AnyObjects query

2017-06-29 Thread Francesco Chicchiriccò
this code which next goes over the list of all the cartridges and prepare a list of Printers will sit ? As far as the demand is concerned: it is driven by a too long URI production issue Colm referred to Thanks, Sergey On 29/06/17 09:53, Francesco Chicchiriccò wrote: On 29/06/2017 10:52, Se

Re: AnyObjects query

2017-06-29 Thread Francesco Chicchiriccò
hip.getType())) { printers.add(relationship.getRightKey()); } } } Anyway, as said, there is always room to improve. Regards. On 29/06/17 09:53, Francesco Chicchiriccò wrote: On 29/06/2017 10:52, Sergey Beryozkin wrote: Hi Fabio That would not wo

Re: AnyObjects query

2017-06-29 Thread Francesco Chicchiriccò
llectionPredicate. It was awhile back since I played with the typed JPA2 code, Native one is a mystery... I agree supporting such queries is not easy...but supporting then can offer an ultimate search experience :-) Cheers, Sergey On 28/06/17 10:26, Francesco Chicchiriccò wrote: On 28/0

Re: Master tests failing?

2017-06-29 Thread Francesco Chicchiriccò
On 29/06/2017 09:22, Francesco Chicchiriccò wrote: On 28/06/2017 19:18, Colm O hEigeartaigh wrote: I'm seeing some failures on Master... [INFO] [ERROR] Failures: [ERROR] PolicyITCase.getCorrelationRules:159 expected:<1> but was:<0> [ERROR] PullTaskITCase.getPullActionsC

Re: Master tests failing?

2017-06-29 Thread Francesco Chicchiriccò
anges for SYNCOPE-1129 (even though I cannot figure out why 2_0_X is working fine, instead...). Regards. -- Francesco Chicchiriccò Tirasa - Open Source Excellence http://www.tirasa.net/ Member at The Apache Software Foundation Syncope, Cocoon, Olingo, CXF, OpenJPA, PonyMail http://home.apache.org/~ilgrosso/

Re: Installer error

2017-06-28 Thread Francesco Chicchiriccò
main profile, thus generating the duplication warning. In order to avoid that, I think we should remove Activiti from the all profile. Regards. On Wed, Jun 28, 2017 at 10:13 AM, Francesco Chicchiriccò wrote: Hi Colm, the problems with installer (actually, with archetype) on master ar

Re: AnyObjects query

2017-06-28 Thread Francesco Chicchiriccò
lementation would be rather complex as the query logic is already quite involved 2. we haven't had may requests for such complex queries so far ...anyway, as you know, volunteers are welcome :-) Regards. On 28/06/17 09:46, Francesco Chicchiriccò wrote: On 28/06/2017 10:41, Sergey Beryozkin w

Re: Installer error

2017-06-28 Thread Francesco Chicchiriccò
fine on 2.0.x but the pom there still looks a bit dodgy after the installer is done with it. The plugin appears twice under build/plugins and also under profiles. Colm. On Fri, Jun 23, 2017 at 2:29 PM, Francesco Chicchiriccò wrote: Colm O hEigeartaigh wrote: Hi all, I'm seeing an

Re: AnyObjects query

2017-06-28 Thread Francesco Chicchiriccò
-jpa/src/main/java/org/apache/syncope/core/persistence/jpa/dao/ElasticsearchAnySearchDAO.java On 28/06/17 08:54, Francesco Chicchiriccò wrote: On 27/06/2017 18:18, Colm O hEigeartaigh wrote: Thanks Francesco! On a related note, let's say I have some AnyObjects (Printer) with a relationsh

Re: AnyObjects query

2017-06-28 Thread Francesco Chicchiriccò
type==PRINTER;$relationshipTypes==WITH_CARTDRIGE;color==blue but this would rather search for blue printers having a relationship on type WITH_CARTDRIGE. Regards. On Tue, Jun 27, 2017 at 4:29 PM, Francesco Chicchiriccò wrote: On 27/06/2017 17:24, Colm O hEigeartaigh wrote: Hi all, How c

<    1   2   3   4   5   6   7   8   9   10   >